Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/nw-lf1ixD9BUnXSTMNPd3uA0hS8.roa
File: nw-lf1ixD9BUnXSTMNPd3uA0hS8.roa (raw, json)
Hash identifier: +zzhONaTkdALVvtSavFkwYDxYKVAHG4UBgrSrUn2SQE=
Subject key identifier: 9F:0F:A5:7F:58:B1:0F:D0:54:9D:74:93:30:D3:DD:DE:E0:34:85:2F
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0193A297912BC83B818797FAD67D21F27922
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/nw-lf1ixD9BUnXSTMNPd3uA0hS8.roa
Signing time: Sat 07 Dec 2024 19:27:42 +0000
ROA not before: Sat 07 Dec 2024 19:27:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2a0e:a780::/29 maxlen: 29
2a10:6c40::/29 maxlen: 29
2a10:9600::/29 maxlen: 29
2a13:8000::/29 maxlen: 29
2a13:bfc0::/29 maxlen: 29
2a14:72c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 25 Dec 2024 10:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a2:97:91:2b:c8:3b:81:87:97:fa:d6:7d:21:f2:79:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Dec 7 19:27:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f0fa57f58b10fd0549d749330d3dddee034852f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:76:d6:74:d1:d3:f6:83:90:91:ea:df:cb:b5:
29:e3:4c:59:57:75:d3:e1:95:4e:8f:1b:97:5c:3e:
9a:65:d9:2b:62:f6:89:d1:42:00:cf:62:30:38:5e:
a2:fd:1b:f6:16:48:a0:d3:2f:34:85:16:29:e2:ac:
c8:9c:27:8c:0a:1c:ca:07:16:f8:be:f2:04:d5:3b:
2e:b3:56:6f:d5:1b:ad:46:9a:99:7f:b8:16:be:ef:
80:34:76:7d:d9:95:72:bf:f3:cf:75:dc:da:e4:0e:
a5:3d:0f:e5:72:a6:c7:a7:3a:fc:e9:24:ea:da:d9:
ad:61:f3:dd:e9:b7:00:a4:7c:15:a7:7f:e8:b9:e2:
55:c6:6c:3a:6b:96:b4:cf:2f:c3:57:9f:22:ca:50:
89:cb:07:90:9b:b1:c2:56:b0:73:fe:e7:85:92:3c:
51:2e:d5:ff:89:92:c1:cb:2f:83:c2:37:18:8d:c4:
27:b8:ec:7e:44:00:dc:56:58:43:cf:6b:0e:8c:0b:
be:81:90:93:d0:77:4d:11:ac:51:1e:1a:8c:91:d3:
70:36:42:92:bc:5d:ce:64:02:a0:c1:b8:56:04:f0:
8c:1a:73:d1:d1:8d:e4:7a:db:a8:e8:cf:b2:27:cb:
ca:60:c3:ad:f4:4a:25:98:07:63:8f:3a:20:e1:50:
1b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0F:A5:7F:58:B1:0F:D0:54:9D:74:93:30:D3:DD:DE:E0:34:85:2F
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/nw-lf1ixD9BUnXSTMNPd3uA0hS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:a780::/29
2a10:6c40::/29
2a10:9600::/29
2a13:8000::/29
2a13:bfc0::/29
2a14:72c0::/29
Signature Algorithm: sha256WithRSAEncryption
4d:c8:f0:8b:8f:5b:8c:fb:7e:73:63:f8:c2:76:df:90:b2:f9:
e1:5f:4a:b5:29:0d:c1:76:9d:3a:de:78:f5:84:c6:8e:d5:4c:
a1:1c:90:f7:39:09:da:6b:d3:48:b7:a0:7d:12:11:10:a7:8f:
fa:47:1b:8b:61:ce:3d:9a:eb:4c:f3:0e:84:15:27:18:94:b3:
bd:ad:ee:0b:40:dd:d4:bc:4f:fc:d7:6f:62:cd:ee:c2:4a:8f:
6e:1a:b6:03:ec:be:58:76:3f:dd:02:cd:df:40:b7:18:41:d7:
2a:44:8c:cb:39:a2:ac:1f:95:4e:bc:e6:2b:d8:75:ba:dc:4a:
5b:9c:aa:e7:9e:45:80:da:e6:21:07:ae:89:69:d5:4a:66:98:
55:83:de:92:f6:48:f7:88:5c:d4:cf:3d:91:23:34:a0:2e:cb:
75:53:2f:64:b0:bb:61:0d:95:68:e2:af:cb:41:48:7d:65:3a:
74:eb:83:44:ed:28:dc:c0:4f:c2:b2:ce:c4:aa:9a:05:c7:9b:
d4:2c:24:99:ad:8b:14:13:08:3a:53:fe:ff:b7:67:39:22:a0:
f2:05:10:34:28:78:a7:04:5a:0f:0e:44:32:94:69:48:00:2e:
1f:fe:9e:8f:7c:c3:e3:6d:b6:b6:35:30:2d:61:0d:45:2a:81:
74:6f:3d:8a
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZOil5EryDuBh5f61n0h8nkiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjQxMjA3MTkyNzQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjBmYTU3ZjU4YjEwZmQwNTQ5ZDc0OTMzMGQzZGRkZWUwMzQ4NTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHbWdNHT9oOQkerfy7Up40xZV3XT
4ZVOjxuXXD6aZdkrYvaJ0UIAz2IwOF6i/Rv2Fkig0y80hRYp4qzInCeMChzKBxb4
vvIE1Tsus1Zv1RutRpqZf7gWvu+ANHZ92ZVyv/PPddza5A6lPQ/lcqbHpzr86STq
2tmtYfPd6bcApHwVp3/oueJVxmw6a5a0zy/DV58iylCJyweQm7HCVrBz/ueFkjxR
LtX/iZLByy+DwjcYjcQnuOx+RADcVlhDz2sOjAu+gZCT0HdNEaxRHhqMkdNwNkKS
vF3OZAKgwbhWBPCMGnPR0Y3ketuo6M+yJ8vKYMOt9EolmAdjjzog4VAbGwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFJ8PpX9YsQ/QVJ10kzDT3d7gNIUvMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvbnctbGYxaXhEOUJVblhTVE1OUGQzdUEwaFM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAAjAqAwUDKg6ngAMF
AyoQbEADBQMqEJYAAwUDKhOAAAMFAyoTv8ADBQMqFHLAMA0GCSqGSIb3DQEBCwUA
A4IBAQBNyPCLj1uM+35zY/jCdt+QsvnhX0q1KQ3Bdp063nj1hMaO1UyhHJD3OQna
a9NIt6B9EhEQp4/6RxuLYc49mutM8w6EFScYlLO9re4LQN3UvE/8129ize7CSo9u
GrYD7L5Ydj/dAs3fQLcYQdcqRIzLOaKsH5VOvOYr2HW63EpbnKrnnkWA2uYhB66J
adVKZphVg96S9kj3iFzUzz2RIzSgLst1Uy9ksLthDZVo4q/LQUh9ZTp064NE7Sjc
wE/Css7EqpoFx5vULCSZrYsUEwg6U/7/t2c5IqDyBRA0KHinBFoPDkQylGlIAC4f
/p6PfMPjbba2NTAtYQ1FKoF0bz2K
-----END CERTIFICATE-----
Generated at Thu Apr 17 18:16:27 2025 by rpki-client