Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/nXQYMBaM7GKPKeBITcoqld6AXf8.roa
File: nXQYMBaM7GKPKeBITcoqld6AXf8.roa (raw, json)
Hash identifier: RI5YIpgEb7cN1liA/mHPOoCygSfwaQ++ICDD1+ynQYk=
Subject key identifier: 9D:74:18:30:16:8C:EC:62:8F:29:E0:48:4D:CA:2A:95:DE:80:5D:FF
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0192FDF58F0B505B66959201E66BB9F6CCA1
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/nXQYMBaM7GKPKeBITcoqld6AXf8.roa
Signing time: Tue 05 Nov 2024 20:13:01 +0000
ROA not before: Tue 05 Nov 2024 20:13:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215112
IP address blocks: 2a10:6c40::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 22 Nov 2024 20:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fd:f5:8f:0b:50:5b:66:95:92:01:e6:6b:b9:f6:cc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Nov 5 20:13:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d741830168cec628f29e0484dca2a95de805dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:db:2c:82:69:6e:e8:5e:7f:c4:db:6d:e6:f3:
dd:3f:b5:c1:75:03:bc:12:a8:ee:a8:6b:5a:a4:0d:
00:6b:e4:07:20:0f:d5:44:80:71:1f:5a:b0:72:62:
73:4b:00:33:e2:08:3d:87:fb:f4:e7:ac:88:34:33:
c8:7c:f6:2c:71:d4:eb:05:e3:d8:71:68:28:d7:dc:
74:fa:03:8f:91:8b:b5:06:32:66:9f:93:9e:16:69:
7e:9d:94:64:ae:df:01:8f:c0:b8:88:da:2a:8a:52:
54:3d:ca:66:1a:15:b2:80:c5:cf:d6:0b:ab:ec:d4:
9b:ef:de:0c:a3:f8:81:79:a3:b5:81:1e:4b:b8:5d:
a0:9e:70:0e:dc:89:16:16:8c:f0:fd:57:a6:27:89:
cd:1b:28:0b:51:33:60:b7:f0:47:e5:59:40:ec:99:
1c:cf:55:67:69:36:5d:57:f4:2c:c4:e4:5c:6f:66:
f1:3c:30:7f:71:e5:c6:45:3b:33:35:82:e6:d0:04:
e5:8b:a3:cc:6e:9f:38:9d:38:07:73:0a:48:cc:29:
ca:57:1c:3d:20:e8:67:cc:d3:56:9f:b4:80:e2:62:
52:aa:42:d1:30:1a:9b:19:b4:65:6a:17:33:91:ed:
8e:73:a5:c3:00:38:25:2e:a8:e8:ba:0e:21:42:c7:
b3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:74:18:30:16:8C:EC:62:8F:29:E0:48:4D:CA:2A:95:DE:80:5D:FF
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/nXQYMBaM7GKPKeBITcoqld6AXf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:6c40::/29
Signature Algorithm: sha256WithRSAEncryption
7e:74:97:a2:88:0a:38:56:63:76:25:b9:5e:49:10:e4:1e:9c:
dd:10:9b:da:91:f5:5a:d8:23:a1:dd:b9:ef:28:11:d0:51:4f:
85:1d:ca:88:89:5b:b8:2d:38:54:28:73:c2:c4:a2:26:8b:14:
eb:d6:7a:32:3b:c0:ff:0a:7f:3f:a4:99:49:f4:bf:38:26:5c:
6a:3a:82:41:8e:8d:b3:71:c1:e8:61:22:8e:93:c1:72:02:e4:
f5:22:54:cf:bb:e8:ae:b7:43:3f:6c:6a:6a:14:d1:5d:12:1e:
f8:27:7f:dd:9c:13:33:8d:59:ef:59:53:c8:20:9c:aa:1e:40:
9b:72:07:2b:7f:62:65:22:67:d6:17:a9:40:5c:34:ce:37:c1:
70:ad:a9:4d:cf:34:1f:f1:17:22:82:bc:97:50:06:84:e1:35:
a2:f7:6f:65:36:81:dc:6d:7a:aa:09:5d:5c:09:96:e6:65:33:
17:5e:a8:5f:40:07:65:51:ad:b3:51:f6:1a:8a:da:3b:a0:04:
4d:80:f0:bc:d2:10:4b:36:12:7c:d6:de:64:4e:0f:8c:7b:27:
80:ee:00:b4:5e:32:46:b4:2b:fd:18:00:d0:e2:32:5f:15:95:
c6:21:91:b4:69:8e:a3:de:f3:4c:bb:32:af:b2:47:19:2b:cc:
f7:02:45:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:17:12 2024 by rpki-client on console-fra.rpki-client.org