Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/NtwF2kS-xZ4-MWwg9q4IBGeRC6s.roa
File: NtwF2kS-xZ4-MWwg9q4IBGeRC6s.roa (raw, json)
Hash identifier: abaq8dfHxnNeRnLmpwEN8Tz/7Fk5Pt5oWVZyh4kEwsQ=
Subject key identifier: 36:DC:05:DA:44:BE:C5:9E:3E:31:6C:20:F6:AE:08:04:67:91:0B:AB
Certificate issuer: /CN=996f903f91a85a60c546ee1141348cc3c8036927
Certificate serial: 01856EAFCA4868D8B48AD6786EC99FFF7C63
Authority key identifier: 99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/NtwF2kS-xZ4-MWwg9q4IBGeRC6s.roa
Signing time: Sun 01 Jan 2023 18:54:52 +0000
ROA not before: Sun 01 Jan 2023 18:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198333
IP address blocks: 2001:67c:1988::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:ca:48:68:d8:b4:8a:d6:78:6e:c9:9f:ff:7c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996f903f91a85a60c546ee1141348cc3c8036927
Validity
Not Before: Jan 1 18:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36dc05da44bec59e3e316c20f6ae080467910bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:59:2d:65:70:19:6f:a7:f7:4f:b9:6e:ab:
64:63:53:b3:66:fa:3d:62:4e:55:1b:18:4f:7a:7d:
71:b9:4c:07:43:be:a5:7f:18:00:d8:74:5b:b1:50:
48:fc:5a:ee:29:c9:d7:6b:88:ef:e1:b5:09:9c:db:
ba:7d:f5:44:bf:ac:6b:3c:51:87:77:6a:97:01:da:
c0:76:3d:b7:54:b2:16:30:c5:24:0d:66:0a:f1:6d:
c5:27:ca:41:66:9b:6f:fc:ea:01:38:df:d4:85:5d:
61:12:f7:03:30:e9:a4:c9:a4:0d:06:b2:d7:7a:07:
67:8b:00:d6:9c:79:38:b1:1e:2d:1a:52:7f:54:60:
71:ff:fb:9a:36:83:33:65:18:d6:22:5f:a3:97:92:
bd:19:ee:90:3b:19:8a:e6:fb:07:6a:f1:b9:15:d0:
66:f6:a3:e4:51:6f:f0:d3:62:51:55:3b:0a:d1:f3:
d8:b2:30:e6:30:fb:64:bc:19:fe:58:e4:39:f4:31:
bc:81:b8:3f:32:5f:f0:06:6e:8f:bd:1f:25:45:98:
1b:60:e9:6e:f0:64:eb:fc:24:83:68:df:6e:57:76:
3f:43:ad:f0:41:95:33:1b:c9:d3:cf:79:a7:c0:79:
ad:15:a2:44:cb:b3:e2:5a:f4:95:63:ea:3e:76:25:
7e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DC:05:DA:44:BE:C5:9E:3E:31:6C:20:F6:AE:08:04:67:91:0B:AB
X509v3 Authority Key Identifier:
keyid:99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/NtwF2kS-xZ4-MWwg9q4IBGeRC6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1988::/48
Signature Algorithm: sha256WithRSAEncryption
92:db:28:33:33:bd:b7:78:4f:f4:b4:7a:72:2a:51:d3:5c:df:
18:f9:3f:3b:c9:91:17:df:c8:c6:98:9b:58:2b:31:cc:5f:d5:
07:3e:de:4a:fb:2d:03:cd:d6:ac:53:41:85:19:ae:e6:3f:33:
86:43:06:0b:6d:0b:2c:36:22:ac:49:44:d9:1b:b6:bd:91:27:
98:e2:ca:25:5a:1d:32:9f:64:42:a0:d2:02:9f:71:fa:22:d5:
fe:b6:0a:72:17:a0:e3:73:29:be:ff:53:5f:9c:13:b4:8c:e0:
4f:71:bb:33:d4:6c:9d:9f:b7:60:4b:e8:23:50:37:49:99:9b:
f2:6a:cb:61:8e:7c:4e:d3:b3:c4:37:16:38:06:20:f1:7e:d0:
6b:9a:b6:52:04:ae:15:00:fb:3d:30:10:0c:b0:c4:88:54:ed:
2c:48:71:e3:a5:9c:f2:1e:d3:02:c5:6f:ca:21:25:49:31:0b:
12:0b:9c:69:20:37:75:22:fe:39:2e:2c:c1:e6:7d:9b:42:51:
18:9e:88:cd:26:ca:6c:be:5d:4e:ca:1b:98:a7:cf:a4:11:44:
d5:23:b2:a0:88:60:90:38:27:60:aa:11:47:17:3f:a4:ed:d5:
93:cc:a3:5e:32:d8:03:7f:82:0e:59:23:8d:c2:e4:40:8f:f7:
78:87:98:57
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVur8pIaNi0itZ4bsmf/3xjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NmY5MDNmOTFhODVhNjBjNTQ2ZWUxMTQxMzQ4Y2MzYzgw
MzY5MjcwHhcNMjMwMTAxMTg1NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmRjMDVkYTQ0YmVjNTllM2UzMTZjMjBmNmFlMDgwNDY3OTEwYmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojNZLWVwGW+n90+5bqtkY1OzZvo9
Yk5VGxhPen1xuUwHQ76lfxgA2HRbsVBI/FruKcnXa4jv4bUJnNu6ffVEv6xrPFGH
d2qXAdrAdj23VLIWMMUkDWYK8W3FJ8pBZptv/OoBON/UhV1hEvcDMOmkyaQNBrLX
egdniwDWnHk4sR4tGlJ/VGBx//uaNoMzZRjWIl+jl5K9Ge6QOxmK5vsHavG5FdBm
9qPkUW/w02JRVTsK0fPYsjDmMPtkvBn+WOQ59DG8gbg/Ml/wBm6PvR8lRZgbYOlu
8GTr/CSDaN9uV3Y/Q63wQZUzG8nTz3mnwHmtFaJEy7PiWvSVY+o+diV+swIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDbcBdpEvsWePjFsIPauCARnkQurMB8GA1UdIwQY
MBaAFJlvkD+RqFpgxUbuEUE0jMPIA2knMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVctUVA1R29XbURGUnU0UlFUU013OGdEYVNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMjAxMDEtMWM5Zi00NGM1LTgwNzct
NTE5MGY3ODY5YTdmLzEvTnR3RjJrUy14WjQtTVd3ZzlxNElCR2VSQzZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9hMjAxMDEtMWM5Zi00NGM1LTgwNzctNTE5MGY3ODY5YTdm
LzEvbVctUVA1R29XbURGUnU0UlFUU013OGdEYVNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBmI
MA0GCSqGSIb3DQEBCwUAA4IBAQCS2ygzM723eE/0tHpyKlHTXN8Y+T87yZEX38jG
mJtYKzHMX9UHPt5K+y0DzdasU0GFGa7mPzOGQwYLbQssNiKsSUTZG7a9kSeY4sol
Wh0yn2RCoNICn3H6ItX+tgpyF6Djcym+/1NfnBO0jOBPcbsz1Gydn7dgS+gjUDdJ
mZvyasthjnxO07PENxY4BiDxftBrmrZSBK4VAPs9MBAMsMSIVO0sSHHjpZzyHtMC
xW/KISVJMQsSC5xpIDd1Iv45LizB5n2bQlEYnojNJspsvl1OyhuYp8+kEUTVI7Kg
iGCQOCdgqhFHFz+k7dWTzKNeMtgDf4IOWSONwuRAj/d4h5hX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:19 2024 by rpki-client on console-fra.rpki-client.org