Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/NcexVXYcK5qJHFDgksfqFVgRctQ.roa
File: NcexVXYcK5qJHFDgksfqFVgRctQ.roa (raw, json)
Hash identifier: Z7TrhzyXs8a/EWOt4RQEC93M+vIjw3hxyZMMC0RlWsw=
Subject key identifier: 35:C7:B1:55:76:1C:2B:9A:89:1C:50:E0:92:C7:EA:15:58:11:72:D4
Certificate issuer: /CN=b5b537918dd90251eb36538e7181ce933c7ef845
Certificate serial: 018572311F981AA33C7C124565FCD299C84E
Authority key identifier: B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/NcexVXYcK5qJHFDgksfqFVgRctQ.roa
Signing time: Mon 02 Jan 2023 11:14:59 +0000
ROA not before: Mon 02 Jan 2023 11:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207394
IP address blocks: 2001:67c:25ec::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:1f:98:1a:a3:3c:7c:12:45:65:fc:d2:99:c8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b537918dd90251eb36538e7181ce933c7ef845
Validity
Not Before: Jan 2 11:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35c7b155761c2b9a891c50e092c7ea15581172d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2d:40:8f:b6:1c:55:56:0e:bd:6c:1a:0d:b2:
14:d1:23:06:dd:41:e0:29:ad:bd:b8:75:6a:f7:f0:
8a:20:73:bb:e8:13:ee:2c:73:39:f7:fb:ae:0d:dd:
c9:e7:3c:47:39:27:62:4b:04:fb:b9:fd:c2:82:5b:
49:e1:00:28:d7:cd:20:f7:58:dc:e8:dc:a3:8b:42:
c1:df:73:f1:dc:4e:ab:d8:2a:6a:df:ad:af:82:57:
0f:23:c6:ae:4e:39:72:5e:32:78:39:1e:0c:92:6d:
d3:23:b9:30:b4:8e:80:ed:82:54:6c:13:da:a6:58:
87:b6:34:b2:a3:dd:e8:c6:90:93:e9:c1:11:4b:91:
a3:1e:b2:19:44:50:b4:30:fa:57:36:7d:66:6a:c0:
ff:26:46:e1:d4:ba:0d:fa:ae:86:56:bc:98:9d:f1:
fb:48:d5:f1:da:49:71:bb:15:6d:f8:c4:15:84:6c:
79:c0:e5:33:1a:c2:7a:81:98:89:f9:3a:60:2a:64:
d8:7c:e3:8f:9b:ab:74:b0:47:2d:7f:40:03:66:6c:
58:71:1f:ee:2b:54:c9:44:2e:dc:3f:ea:3a:2b:ef:
fe:a9:5b:2a:cb:f8:90:c6:d7:40:f0:5b:a1:a3:37:
d5:c9:c2:aa:ce:a4:d3:c6:de:08:36:b4:72:4b:16:
e7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C7:B1:55:76:1C:2B:9A:89:1C:50:E0:92:C7:EA:15:58:11:72:D4
X509v3 Authority Key Identifier:
keyid:B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/NcexVXYcK5qJHFDgksfqFVgRctQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:25ec::/48
Signature Algorithm: sha256WithRSAEncryption
27:15:67:7f:3c:85:b1:6d:45:41:60:ba:57:29:7f:39:0d:b6:
eb:30:d3:30:85:fa:44:cd:a5:4a:13:f8:17:cf:17:8e:02:7d:
fb:93:94:e9:e7:37:81:a3:2f:91:29:ec:be:14:4d:ad:18:e5:
9f:9b:c2:77:30:05:41:4f:b4:e1:47:2a:32:fd:ac:0b:11:81:
77:44:52:f5:1d:3f:a2:fe:80:01:f7:36:58:3b:5f:84:db:23:
f7:94:ee:32:06:73:7b:35:9a:b7:52:32:5c:40:44:98:df:9b:
39:db:6c:4d:8e:06:8e:23:0a:a6:a8:3c:12:b8:91:aa:53:5a:
7d:44:a2:8d:71:ab:14:1d:4d:a5:05:14:f9:34:ee:a3:6d:78:
4c:69:3c:57:53:8c:70:e5:98:6c:f8:19:23:76:8a:81:bb:68:
03:9d:30:ac:44:bc:7a:bb:02:70:68:1a:5e:91:27:99:0b:36:
08:8f:46:ac:23:81:94:71:a1:1a:09:f0:f0:21:d9:fd:94:f4:
e5:f1:b0:79:16:7d:30:ad:ef:c8:99:8a:04:a6:31:70:56:ab:
6c:fa:06:94:64:ad:3c:7e:59:7c:d1:f2:ae:52:6c:4b:22:3a:
f6:b9:ba:5e:31:55:23:fb:c6:37:bb:9e:a0:e2:27:b4:ab:ae:
b4:aa:3d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-fra.rpki-client.org