Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/NapjLGj6B5uSFsvkw72ytPRlQYQ.roa
File: NapjLGj6B5uSFsvkw72ytPRlQYQ.roa (raw, json)
Hash identifier: Io0RCS/RXkxpPjNFOFBR8L0/hYPqORW/KM11r40gbyQ=
Subject key identifier: 35:AA:63:2C:68:FA:07:9B:92:16:CB:E4:C3:BD:B2:B4:F4:65:41:84
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01856F1DD547B969E5F6EB54F8579A047370
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/NapjLGj6B5uSFsvkw72ytPRlQYQ.roa
Signing time: Sun 01 Jan 2023 20:55:04 +0000
ROA not before: Sun 01 Jan 2023 20:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57969
IP address blocks: 2a09:7:2002::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:d5:47:b9:69:e5:f6:eb:54:f8:57:9a:04:73:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 20:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35aa632c68fa079b9216cbe4c3bdb2b4f4654184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:21:59:e8:f0:b2:f2:eb:58:1b:46:35:ba:
0d:9a:c2:67:5a:fb:c1:5e:29:c6:6f:84:dd:4e:8e:
1f:7c:f5:44:cf:35:37:28:f0:be:c0:dc:2f:a2:4c:
64:88:9b:78:6c:50:17:49:52:80:ee:5a:f9:d5:1c:
e8:f5:46:a6:6d:cf:91:16:d5:23:91:f4:06:0b:bd:
4d:83:ff:2d:2c:e3:21:a8:0c:0d:9a:12:85:99:d2:
db:27:0b:56:e9:74:7e:a9:41:21:41:6a:de:99:48:
85:1e:1d:77:e2:d3:2e:78:3c:38:91:6e:99:3c:d0:
fd:14:84:45:43:41:26:d3:4b:72:1f:98:e9:03:08:
70:1f:48:d0:21:cc:7b:72:2f:2f:c1:1e:e4:91:e9:
c1:af:0e:c2:be:2f:df:ed:9b:19:f3:d4:c5:f3:25:
d1:97:60:ae:6f:d0:82:eb:79:8e:fb:6f:b0:52:3a:
61:74:c2:6b:e7:d5:a1:20:7c:16:34:0f:a2:b3:2f:
e4:b9:a6:24:a0:9d:11:68:58:0f:19:99:98:3d:99:
5d:79:5f:e2:fd:eb:f8:2a:c4:78:08:0b:58:af:e1:
1e:8c:72:69:1b:e4:59:c6:58:fe:7e:68:5b:24:7e:
bf:7c:16:0a:8b:ac:ee:9e:34:37:35:90:57:8d:a4:
d7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AA:63:2C:68:FA:07:9B:92:16:CB:E4:C3:BD:B2:B4:F4:65:41:84
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/NapjLGj6B5uSFsvkw72ytPRlQYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7:2002::/48
Signature Algorithm: sha256WithRSAEncryption
25:f9:f7:67:57:8b:5e:70:44:98:8e:d3:90:98:b6:21:d0:a9:
f7:ff:b2:f8:6c:cc:48:f8:e2:e8:38:a0:55:49:14:a1:da:66:
06:ae:ad:c7:67:5d:b8:49:ce:6e:f1:4c:02:76:1b:ae:8c:84:
33:78:8c:36:6d:7f:a2:ee:2c:60:a0:ef:32:f5:22:c4:7f:5f:
91:16:aa:d3:31:ba:9a:1d:b5:58:44:6f:37:f8:39:ca:6c:0f:
9e:be:d0:37:d9:6b:b9:da:ca:f5:7e:be:2e:5e:17:43:72:92:
a8:68:a6:23:67:b4:93:de:4f:e9:8d:d1:da:04:21:c7:97:6c:
3d:62:17:a0:81:6b:12:f4:a4:56:4e:4f:55:b7:75:c7:53:8c:
13:bb:87:69:82:df:bf:89:4d:df:3b:8f:7f:be:68:17:5e:9b:
56:0d:85:9f:18:94:b2:5f:73:13:1c:8c:b2:ba:79:d7:25:0c:
11:c2:4b:eb:49:16:fd:80:0b:04:4b:c0:00:70:7d:69:75:3d:
64:24:15:fa:e6:bd:16:94:c4:56:fd:02:60:e3:0f:b7:0c:f8:
3a:fc:3b:ec:fb:ab:e1:e5:f2:b9:5e:4a:02:e4:56:ef:51:8d:
af:19:53:b8:ef:f1:85:b2:32:4e:5c:b5:70:97:6e:87:b8:cd:
54:7c:4d:ff
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvHdVHuWnl9utU+FeaBHNwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjMwMTAxMjA1NTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWFhNjMyYzY4ZmEwNzliOTIxNmNiZTRjM2JkYjJiNGY0NjU0MTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOUhWejwsvLrWBtGNboNmsJnWvvB
XinGb4TdTo4ffPVEzzU3KPC+wNwvokxkiJt4bFAXSVKA7lr51Rzo9Uambc+RFtUj
kfQGC71Ng/8tLOMhqAwNmhKFmdLbJwtW6XR+qUEhQWremUiFHh134tMueDw4kW6Z
PND9FIRFQ0Em00tyH5jpAwhwH0jQIcx7ci8vwR7kkenBrw7Cvi/f7ZsZ89TF8yXR
l2Cub9CC63mO+2+wUjphdMJr59WhIHwWNA+isy/kuaYkoJ0RaFgPGZmYPZldeV/i
/ev4KsR4CAtYr+EejHJpG+RZxlj+fmhbJH6/fBYKi6zunjQ3NZBXjaTXqQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDWqYyxo+gebkhbL5MO9srT0ZUGEMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvTmFwakxHajZCNXVTRnN2a3c3Mnl0UFJsUVlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgkAByAC
MA0GCSqGSIb3DQEBCwUAA4IBAQAl+fdnV4tecESYjtOQmLYh0Kn3/7L4bMxI+OLo
OKBVSRSh2mYGrq3HZ124Sc5u8UwCdhuujIQzeIw2bX+i7ixgoO8y9SLEf1+RFqrT
MbqaHbVYRG83+DnKbA+evtA32Wu52sr1fr4uXhdDcpKoaKYjZ7ST3k/pjdHaBCHH
l2w9YheggWsS9KRWTk9Vt3XHU4wTu4dpgt+/iU3fO49/vmgXXptWDYWfGJSyX3MT
HIyyunnXJQwRwkvrSRb9gAsES8AAcH1pdT1kJBX65r0WlMRW/QJg4w+3DPg6/Dvs
+6vh5fK5XkoC5FbvUY2vGVO47/GFsjJOXLVwl26HuM1UfE3/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:46 2024 by rpki-client on console-ams.rpki-client.org