Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/NliSBjIV9AxczJg-aVouI-NFLig.roa
File: NliSBjIV9AxczJg-aVouI-NFLig.roa (raw, json)
Hash identifier: MKzFG7854GJLu8sfyi52MemJDjnW/ktGinK9rblX8O4=
Subject key identifier: 36:58:92:06:32:15:F4:0C:5C:CC:98:3E:69:5A:2E:23:E3:45:2E:28
Certificate issuer: /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Certificate serial: 01856C4A4418B2507AB0AF3869CC62E9B3CD
Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/NliSBjIV9AxczJg-aVouI-NFLig.roa
Signing time: Sun 01 Jan 2023 07:44:44 +0000
ROA not before: Sun 01 Jan 2023 07:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50022
IP address blocks: 2a05:7401:4000::/34 maxlen: 34
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:44:18:b2:50:7a:b0:af:38:69:cc:62:e9:b3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Validity
Not Before: Jan 1 07:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=365892063215f40c5ccc983e695a2e23e3452e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5f:19:16:c2:95:9f:8c:9b:cd:07:97:67:f3:
34:01:8d:08:65:2e:40:ed:0b:56:7b:7f:63:c9:5c:
b6:f5:3f:62:52:a6:e5:3b:cd:94:b3:fa:2b:f1:b3:
6c:6a:31:17:8d:42:6c:16:3c:37:18:77:56:b8:64:
35:8d:91:af:b4:f3:09:8f:6c:7a:94:3c:da:3c:6c:
f0:e1:3f:af:de:b3:e3:ba:57:be:f1:90:63:fe:30:
c1:2c:bb:e4:ed:19:12:76:c8:03:b4:90:a2:ff:1b:
1c:e5:02:42:98:b2:23:4d:42:c1:f5:d8:df:bd:8e:
81:cd:bf:1f:d0:b4:73:cc:8d:00:7a:d2:f3:65:90:
f6:3f:9a:ee:cd:e1:e4:51:c6:6e:5b:2f:02:aa:00:
21:fa:f3:af:8e:23:89:ca:0d:3e:61:49:bb:18:23:
92:cb:03:27:3e:44:3b:36:57:42:30:6c:6d:6e:fa:
87:93:02:8b:d9:99:b9:61:c5:62:24:c9:67:3f:f7:
e8:9e:f6:47:80:a8:c2:ba:1c:c9:b6:d6:99:ca:9d:
41:a5:e7:f0:38:19:5e:8a:ba:6c:27:16:f2:b3:0b:
e5:03:fd:c6:d7:1b:6c:96:f8:ff:07:08:3e:23:d2:
9e:6d:69:81:d1:50:24:f9:5a:77:60:59:80:b1:09:
63:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:58:92:06:32:15:F4:0C:5C:CC:98:3E:69:5A:2E:23:E3:45:2E:28
X509v3 Authority Key Identifier:
keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/NliSBjIV9AxczJg-aVouI-NFLig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:7401:4000::/34
Signature Algorithm: sha256WithRSAEncryption
44:8a:15:12:b3:0f:7f:cc:d8:26:96:25:23:9a:e6:64:a3:63:
be:4c:12:c9:8b:1e:93:ba:ee:7b:13:a5:00:cb:4b:70:20:4e:
15:2c:92:1a:98:4b:84:7a:b3:c9:9f:53:d9:d1:ab:9e:97:97:
c9:74:cb:6f:25:3e:5a:46:9d:d6:f0:e6:d8:9f:f4:14:ed:a2:
72:cf:2f:4e:7e:e9:0e:fd:5b:b2:69:d7:58:88:51:3e:c2:20:
3e:4a:b2:fe:8f:7d:02:f2:8c:39:29:c9:a5:4b:95:c2:50:fe:
61:f4:aa:7c:48:5b:52:77:ca:10:33:5b:cb:d8:f4:2d:2f:f6:
8e:b5:5f:20:68:b8:44:dd:5e:33:5b:72:dc:1d:52:d6:86:1b:
9b:e3:c5:51:1e:03:13:3c:57:91:c3:58:07:9c:37:d4:c4:ca:
13:4f:04:9d:8d:bf:74:cc:8c:d0:8c:3e:2b:ca:8c:00:f8:db:
5f:37:df:67:17:43:6b:1c:a8:cb:4e:02:58:b6:85:a3:b5:b5:
4d:60:64:2e:f6:36:a1:f6:7d:1e:48:05:3d:12:1a:99:86:cc:
ca:49:68:8e:5c:af:4a:64:29:6f:1a:82:49:f7:56:c9:fa:73:
1d:fe:aa:cf:2a:c8:b7:56:40:6f:e7:9d:0d:15:35:c2:59:41:
a6:c3:b9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:18 2024 by rpki-client on console-ams.rpki-client.org