Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/NbaHPOC_1PyX90vh7DJmh7mwuLw.roa
File: NbaHPOC_1PyX90vh7DJmh7mwuLw.roa (raw, json)
Hash identifier: Q2uhlTfkSEZtR2dUCjOpGq6rF487nAsSEUSkqzyaueU=
Subject key identifier: 35:B6:87:3C:E0:BF:D4:FC:97:F7:4B:E1:EC:32:66:87:B9:B0:B8:BC
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 0193434670812D5C8053969B2CCFBC896F6C
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/NbaHPOC_1PyX90vh7DJmh7mwuLw.roa
Signing time: Tue 19 Nov 2024 07:15:09 +0000
ROA not before: Tue 19 Nov 2024 07:15:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45681
IP address blocks: 45.143.0.0/22 maxlen: 24
2a14:2d40::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:43:46:70:81:2d:5c:80:53:96:9b:2c:cf:bc:89:6f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: Nov 19 07:15:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35b6873ce0bfd4fc97f74be1ec326687b9b0b8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:07:fa:3c:5c:72:14:7c:3d:4e:92:fa:87:af:
a0:d5:9f:54:8c:e0:4c:03:ed:c1:80:65:43:0f:b0:
00:59:f8:ed:5f:f4:fe:2d:f4:0f:f5:cd:7a:46:5b:
c4:a7:b5:c2:ab:84:e9:5f:a7:96:bf:51:4a:67:c3:
7a:1e:82:b1:67:f0:23:93:d8:16:6e:1c:29:d6:a1:
37:05:04:78:26:a7:fa:67:94:08:53:7c:43:de:b1:
87:52:58:d0:6c:1b:cb:13:f2:f6:d1:6c:a7:7d:ff:
6b:74:82:8d:90:18:13:14:fe:8f:65:a2:fc:7c:84:
fa:b0:72:7c:57:35:b4:77:b6:cd:a1:66:f3:c1:8a:
4e:2a:04:e5:d6:02:6b:16:03:16:f4:5a:04:95:54:
dd:46:5e:73:2d:8b:9b:a4:fc:17:35:e2:d7:7f:69:
e4:0f:77:bf:55:54:b3:17:df:a5:42:3a:b9:a1:79:
84:1a:a8:6b:14:a5:a2:df:2e:c6:d5:3c:80:6b:a6:
14:d3:dc:93:77:6a:1f:71:c7:f0:10:3a:40:9d:6e:
10:e9:6e:5c:87:35:1c:24:51:7e:0f:ea:cf:d9:d9:
cb:91:8c:ae:a6:95:90:04:04:7a:68:59:8c:35:d8:
be:b7:74:20:1e:d8:73:81:f9:b4:2d:bd:fd:b6:5d:
3e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B6:87:3C:E0:BF:D4:FC:97:F7:4B:E1:EC:32:66:87:B9:B0:B8:BC
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/NbaHPOC_1PyX90vh7DJmh7mwuLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.0.0/22
IPv6:
2a14:2d40::/29
Signature Algorithm: sha256WithRSAEncryption
bb:d7:7a:b3:a4:b9:00:91:4c:a8:1d:be:5d:71:e4:71:58:a4:
9d:11:89:aa:b5:8c:34:a4:49:30:b2:56:f8:01:61:b7:e2:c1:
87:fe:d7:ba:bf:72:33:fd:d6:8e:0f:bc:24:3d:02:a5:f1:27:
b5:21:73:11:f3:c4:82:5b:a4:1f:e1:d1:79:6c:f8:4d:c9:8b:
31:c1:3b:56:d8:cf:4a:db:46:01:d3:5b:44:ff:ce:77:4c:b5:
29:ed:97:dc:0e:c2:e7:7a:5b:cc:95:74:3b:32:0a:68:ea:f7:
1f:42:c4:dc:17:64:75:66:ce:4c:bc:fc:af:f5:57:37:6a:54:
e3:06:f2:68:f0:5a:fb:34:11:28:7a:42:45:b5:24:32:5e:ec:
f9:30:30:f0:83:6a:f4:62:ec:4c:c9:83:3f:6e:ba:28:ec:5f:
dc:26:4a:65:b4:ca:19:56:dd:45:a5:41:74:0b:22:54:ea:98:
3f:88:f7:b0:5d:0d:7d:b1:a2:dc:3b:d9:19:a2:0b:2a:0b:03:
a1:7e:02:36:63:4d:35:17:e8:23:73:91:1a:fb:79:06:ba:c7:
22:a6:32:0f:da:40:31:de:a2:bb:cd:a0:af:f2:5d:75:1f:f5:
f8:83:5a:a4:07:55:71:41:ce:91:49:09:44:ab:f5:a3:0d:6b:
f6:9a:ed:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:19 2025 by rpki-client