Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/NgMlblMb1AlU9WSzpEY6RQJBUqE.roa
File: NgMlblMb1AlU9WSzpEY6RQJBUqE.roa (raw, json)
Hash identifier: p3l/Q9LHFiEA3NuVh/+iu2n6PP5Quw+peVdcMaNbs94=
Subject key identifier: 36:03:25:6E:53:1B:D4:09:54:F5:64:B3:A4:46:3A:45:02:41:52:A1
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018CC3B6B251A455026759BB5D02BB4D946C
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/NgMlblMb1AlU9WSzpEY6RQJBUqE.roa
Signing time: Mon 01 Jan 2024 06:29:39 +0000
ROA not before: Mon 01 Jan 2024 06:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58083
IP address blocks: 2a07:3500:10a0::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b2:51:a4:55:02:67:59:bb:5d:02:bb:4d:94:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 1 06:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3603256e531bd40954f564b3a4463a45024152a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7b:6b:de:fe:0a:7b:35:19:61:73:aa:49:fc:
1f:eb:ff:d6:d8:d4:df:18:2a:30:03:22:eb:ac:23:
50:e6:34:a8:16:bf:f1:2e:ad:fd:c0:aa:45:9f:61:
b1:10:02:b8:e3:f1:1e:97:09:3f:96:31:46:e0:55:
08:27:ad:1a:2c:b2:ff:f3:91:d9:5b:51:14:2a:7e:
6e:c1:56:92:52:05:48:7d:42:85:3b:c1:37:bd:35:
26:e0:74:0e:8b:bd:a8:38:4f:97:53:ee:d8:45:52:
aa:95:f6:76:d4:86:89:8c:a7:29:58:f8:c9:03:3f:
1f:d9:a3:62:71:f9:06:18:b2:ae:62:7b:0e:6a:5e:
e3:69:cb:bb:d1:e3:c6:52:6a:16:12:99:a4:02:28:
f0:ff:2b:5c:34:c3:34:b2:6a:4b:d3:b0:26:ee:a7:
06:48:2d:18:6c:49:7c:a4:b6:e5:78:7b:c2:f5:25:
66:4d:21:2a:89:94:99:7b:51:3c:0c:91:34:08:1d:
a1:d4:31:3f:82:16:da:b1:c6:63:64:ad:b2:e0:ca:
89:31:80:4a:12:50:74:d4:9a:39:82:34:59:73:24:
b2:c1:3f:59:bc:16:fd:90:9b:ab:bb:e7:0c:0a:a5:
37:e3:b6:e1:44:f5:8a:39:98:21:7a:c8:2a:8a:20:
23:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:03:25:6E:53:1B:D4:09:54:F5:64:B3:A4:46:3A:45:02:41:52:A1
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/NgMlblMb1AlU9WSzpEY6RQJBUqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:10a0::/48
Signature Algorithm: sha256WithRSAEncryption
1f:6b:67:52:bb:8e:01:7a:f2:1d:ad:05:23:a7:22:0e:e2:be:
88:c3:96:11:ba:23:16:2a:6b:3e:98:93:e9:cd:a0:94:b7:0b:
ce:79:c8:d8:75:42:fc:07:94:3a:c5:4e:b3:ec:c8:ef:48:82:
29:3c:83:83:cc:82:17:b5:38:2f:3a:58:54:bf:83:d0:fc:0b:
c2:35:81:0d:f3:f6:ce:a5:cc:c7:d2:3c:12:38:78:53:de:71:
48:63:5a:6e:b9:af:3f:6e:41:9c:04:38:50:55:b6:81:33:6e:
45:fb:51:1b:1e:08:5f:c1:68:b2:57:a1:8f:ee:32:83:09:dc:
ea:25:e2:d6:c8:86:45:72:21:76:34:a2:b9:b8:f6:ef:15:1f:
83:99:23:59:19:41:a4:2f:65:34:6b:25:d2:1a:a4:06:3d:a8:
b6:e4:77:a6:89:c0:d9:75:ae:1f:9a:2c:42:bc:ef:ee:5a:32:
36:85:8c:36:8c:e9:10:19:82:9b:48:0c:80:78:a6:ba:72:e7:
79:63:6e:2b:d5:82:ad:3b:ac:60:b1:fb:15:a7:03:a6:c2:9a:
b9:59:e5:e1:6a:02:e8:26:51:37:9e:39:70:e5:15:68:73:9c:
b3:14:c5:ec:07:28:a7:35:6f:00:1f:f4:57:94:ba:f0:34:c1:
ad:70:72:12
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzDtrJRpFUCZ1m7XQK7TZRsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl
MTQwNzEwHhcNMjQwMTAxMDYyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjAzMjU2ZTUzMWJkNDA5NTRmNTY0YjNhNDQ2M2E0NTAyNDE1MmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXtr3v4KezUZYXOqSfwf6//W2NTf
GCowAyLrrCNQ5jSoFr/xLq39wKpFn2GxEAK44/Eelwk/ljFG4FUIJ60aLLL/85HZ
W1EUKn5uwVaSUgVIfUKFO8E3vTUm4HQOi72oOE+XU+7YRVKqlfZ21IaJjKcpWPjJ
Az8f2aNicfkGGLKuYnsOal7jacu70ePGUmoWEpmkAijw/ytcNMM0smpL07Am7qcG
SC0YbEl8pLbleHvC9SVmTSEqiZSZe1E8DJE0CB2h1DE/ghbascZjZK2y4MqJMYBK
ElB01Jo5gjRZcySywT9ZvBb9kJuru+cMCqU347bhRPWKOZghesgqiiAjWwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDYDJW5TG9QJVPVks6RGOkUCQVKhMB8GA1UdIwQY
MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt
YWQ1NzU1MjJiMzY1LzEvTmdNbGJsTWIxQWxVOVdTenBFWTZSUUpCVXFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1
LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgc1ABCg
MA0GCSqGSIb3DQEBCwUAA4IBAQAfa2dSu44BevIdrQUjpyIO4r6Iw5YRuiMWKms+
mJPpzaCUtwvOecjYdUL8B5Q6xU6z7MjvSIIpPIODzIIXtTgvOlhUv4PQ/AvCNYEN
8/bOpczH0jwSOHhT3nFIY1puua8/bkGcBDhQVbaBM25F+1EbHghfwWiyV6GP7jKD
CdzqJeLWyIZFciF2NKK5uPbvFR+DmSNZGUGkL2U0ayXSGqQGPai25HemicDZda4f
mixCvO/uWjI2hYw2jOkQGYKbSAyAeKa6cud5Y24r1YKtO6xgsfsVpwOmwpq5WeXh
agLoJlE3njlw5RVoc5yzFMXsByinNW8AH/RXlLrwNMGtcHIS
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:41 2025 by rpki-client