Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/ND5Gx_NZewAfNPcRgNUeEtF0Mv8.roa
File: ND5Gx_NZewAfNPcRgNUeEtF0Mv8.roa (raw, json)
Hash identifier: Gi696LZArLO/dWA38SeuEqJiW28mNcTBK/xt64DXRiM=
Subject key identifier: 34:3E:46:C7:F3:59:7B:00:1F:34:F7:11:80:D5:1E:12:D1:74:32:FF
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 01856C6F0617248345D91C993B5185E96E12
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/ND5Gx_NZewAfNPcRgNUeEtF0Mv8.roa
Signing time: Sun 01 Jan 2023 08:24:53 +0000
ROA not before: Sun 01 Jan 2023 08:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141483
IP address blocks: 2a0e:46c4:1800::/48 maxlen: 48
2a0e:46c4:1801::/48 maxlen: 48
2a0e:46c4:1802::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:06:17:24:83:45:d9:1c:99:3b:51:85:e9:6e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 08:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=343e46c7f3597b001f34f71180d51e12d17432ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f2:68:93:56:14:46:2f:fd:9c:95:d7:05:d6:
59:df:bd:be:52:c2:d4:99:52:65:fa:ba:dc:46:4f:
05:ac:81:1c:45:32:6c:1f:6d:c1:f1:bb:6b:23:3e:
a9:8d:11:6e:62:1a:a1:e9:58:74:54:9c:4e:b6:77:
8d:f7:29:53:32:c6:e8:ce:43:07:8f:11:59:3a:d6:
0a:14:ac:04:b4:28:2a:48:cb:f9:c7:08:ae:70:03:
2b:93:d2:c0:90:40:7e:09:94:40:d9:9c:97:81:e9:
2e:83:fe:99:11:97:a7:a0:4b:89:e8:72:b8:a3:80:
d5:77:65:1b:45:03:93:7e:3d:93:30:02:7f:da:9b:
ce:fc:82:81:9f:06:f7:09:ff:32:02:62:08:e4:96:
bb:b9:3b:75:f5:a4:28:1f:06:c7:36:63:62:01:7c:
50:2b:17:2d:1e:b4:8a:6c:7d:46:c7:25:0d:bc:b4:
60:2e:16:18:46:8f:9b:5f:66:72:ee:47:ce:d6:29:
bf:d1:03:b8:56:e0:bd:85:5a:a5:96:f1:42:ed:3f:
26:35:01:cc:81:9f:ba:63:6f:9e:18:87:cb:e4:59:
6a:bd:ae:61:ea:f1:19:69:79:4c:16:35:ee:1f:65:
20:fd:15:15:58:fd:d2:b4:1d:1e:7a:25:8a:30:52:
5e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3E:46:C7:F3:59:7B:00:1F:34:F7:11:80:D5:1E:12:D1:74:32:FF
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/ND5Gx_NZewAfNPcRgNUeEtF0Mv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:1800::-2a0e:46c4:1802:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
97:e6:2d:1d:23:18:bf:36:0d:12:f0:9c:71:fd:8e:a8:5f:47:
c5:65:6e:de:9f:32:a7:e2:80:cf:a4:3c:63:53:64:16:a9:5b:
7f:b9:e9:d9:35:44:1c:86:40:b0:4b:21:78:7f:18:f6:d7:bf:
d2:27:23:4e:a6:97:dc:8c:3b:ec:dc:63:35:09:43:9d:8d:4a:
f7:ce:90:7f:0d:34:4b:5e:98:cc:ea:f2:b1:02:d0:17:6e:c0:
47:78:cc:c4:f7:cc:75:fa:a2:b5:af:de:3b:cc:4f:c7:ac:56:
32:4e:cb:2c:86:42:bf:e1:6b:14:e8:38:59:c0:53:d6:d5:17:
e7:77:cb:5b:dc:1b:d3:bf:3c:60:db:82:ef:07:1d:f1:3b:f8:
1c:95:00:d6:97:7d:e5:d2:3f:09:45:58:ff:bb:a7:86:3f:fe:
ab:c1:30:23:7b:19:88:77:f5:9d:d8:2e:18:65:d4:95:e3:0a:
22:94:f9:e7:dc:4e:ec:42:7c:36:03:30:c6:54:e0:00:73:b9:
ec:cb:35:47:26:d9:59:cd:f6:dc:03:3e:b8:d5:f0:1d:0b:79:
90:9b:cb:82:c8:7d:93:74:d9:a7:30:91:fd:8e:83:0a:17:f3:
fd:47:e0:3f:06:a6:5d:71:cf:60:fe:24:14:b5:a3:e1:db:b4:
f0:6e:0d:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:15 2024 by rpki-client on console-fra.rpki-client.org