Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/nqnKIrIyOSxLlKBswrU_AnPHyPo.roa
File: nqnKIrIyOSxLlKBswrU_AnPHyPo.roa (raw, json)
Hash identifier: iPzkNgwd5ln9fajKwabZkh59lXU6ff53sv98EUA+Ty4=
Subject key identifier: 9E:A9:CA:22:B2:32:39:2C:4B:94:A0:6C:C2:B5:3F:02:73:C7:C8:FA
Certificate issuer: /CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Certificate serial: 018C9791B65B94BC0F6231B756D7B5341575
Authority key identifier: CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/nqnKIrIyOSxLlKBswrU_AnPHyPo.roa
Signing time: Sat 23 Dec 2023 16:45:58 +0000
ROA not before: Sat 23 Dec 2023 16:45:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60504
IP address blocks: 2a13:82c2::/32 maxlen: 32
2a13:82c0::/32 maxlen: 32
2a13:82c4:1::/48 maxlen: 48
2a13:82c5:3000::/36 maxlen: 36
2a13:82c5:4000::/36 maxlen: 36
2a13:82c5:5000::/36 maxlen: 36
2a13:82c5:6000::/36 maxlen: 36
2a13:82c5:1000::/36 maxlen: 36
2a13:82c5:2000::/36 maxlen: 36
2a13:82c7::/32 maxlen: 32
2a13:82c1::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:97:91:b6:5b:94:bc:0f:62:31:b7:56:d7:b5:34:15:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Validity
Not Before: Dec 23 16:45:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ea9ca22b232392c4b94a06cc2b53f0273c7c8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:af:02:3e:d3:19:64:61:71:15:94:d4:05:b8:
ca:bc:af:e8:02:ac:7b:d6:0b:33:3f:09:00:71:2d:
5d:6e:be:3a:9e:5e:31:de:ac:7c:d6:e1:71:9d:97:
7d:ef:51:1f:11:d3:9f:e7:1e:9a:47:b3:d9:5f:db:
d8:53:b0:75:65:77:9b:76:49:37:ee:9d:a5:d7:fc:
42:dd:5a:92:22:ef:ff:06:e7:89:fc:ff:d1:34:e3:
0d:7f:26:25:f7:d0:ff:81:03:a7:e7:25:0b:1f:69:
6e:49:d4:39:0f:05:b2:78:af:e4:e5:cd:03:8f:86:
97:36:a9:9f:81:cb:39:f7:c0:a9:a7:29:40:24:e2:
31:91:ea:f3:08:cf:8d:4c:6d:88:a6:06:10:16:44:
eb:de:97:24:6f:31:c8:a3:df:58:f7:3a:69:7b:38:
d3:78:f6:4f:a9:aa:d2:5c:6a:9f:d0:5a:9a:e6:1f:
7d:09:20:3d:55:c1:af:4d:b9:c0:da:fc:9c:98:e3:
18:16:b2:6d:a5:5b:be:07:c9:ac:d3:d7:c9:fe:a3:
19:30:05:a6:8d:20:e4:95:8f:9c:54:e1:72:05:9d:
af:aa:31:b1:04:fc:0a:7e:c5:89:d9:3c:66:16:5c:
a3:40:12:c6:fc:67:b3:b0:43:e4:45:3e:b6:2e:61:
0d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A9:CA:22:B2:32:39:2C:4B:94:A0:6C:C2:B5:3F:02:73:C7:C8:FA
X509v3 Authority Key Identifier:
keyid:CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/nqnKIrIyOSxLlKBswrU_AnPHyPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:82c0::-2a13:82c2:ffff:ffff:ffff:ffff:ffff:ffff
2a13:82c4:1::/48
2a13:82c5:1000::-2a13:82c5:6fff:ffff:ffff:ffff:ffff:ffff
2a13:82c7::/32
Signature Algorithm: sha256WithRSAEncryption
6f:3c:f5:18:13:9a:74:0d:65:99:0a:32:ef:d2:0d:77:df:a3:
67:3f:f4:b6:ce:64:d8:ea:10:e2:00:f7:17:5c:6b:23:e7:f4:
37:5d:fc:27:f2:cb:c9:32:37:a1:16:75:e4:77:38:ce:95:79:
d5:f7:9f:e5:82:62:b1:f7:7e:5c:97:dd:2f:c8:aa:96:a8:82:
24:14:c3:dd:87:6a:a5:14:e2:8e:86:16:ac:30:32:12:b0:c4:
61:32:ef:4d:ca:3f:1d:7a:e8:ab:96:44:6e:38:43:30:1a:d3:
32:ed:26:36:91:30:34:d7:3d:03:32:44:7a:a6:70:d6:1f:f4:
31:e2:38:72:a8:01:67:cd:d0:7b:b8:7e:e8:19:c5:bb:27:27:
89:06:96:67:15:32:cc:19:0a:05:90:7c:cf:2f:f1:8f:2d:7c:
1e:57:c0:5e:b3:7b:f7:67:39:93:1c:39:47:51:6f:6f:ca:b4:
9c:0d:f2:6a:62:e6:41:9b:0d:2f:b0:27:9b:55:ea:22:24:1e:
99:0f:de:78:d4:7b:85:d4:d8:89:b9:dc:e6:2b:4f:bc:50:94:
76:10:c6:2a:1e:c2:fe:75:2e:40:9b:5d:37:11:18:1d:7b:dc:
c2:dd:75:3c:fb:47:37:bc:05:18:c6:0c:a1:7f:78:a1:7a:b1:
e4:24:64:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-fra.rpki-client.org