Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/nez10ev3GCMSVjpgyLZW75sZm_E.roa
File: nez10ev3GCMSVjpgyLZW75sZm_E.roa (raw, json)
Hash identifier: wKHaUqmezQYFLjYgm+re7ULR8r+z2N2QQNVcCLBFRfo=
Subject key identifier: 9D:EC:F5:D1:EB:F7:18:23:12:56:3A:60:C8:B6:56:EF:9B:19:9B:F1
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 0191E486DCB2D62EAB59388F26EC24BBD0D8
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/nez10ev3GCMSVjpgyLZW75sZm_E.roa
Signing time: Thu 12 Sep 2024 04:38:48 +0000
ROA not before: Thu 12 Sep 2024 04:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 5.1.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e4:86:dc:b2:d6:2e:ab:59:38:8f:26:ec:24:bb:d0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 12 04:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9decf5d1ebf7182312563a60c8b656ef9b199bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:19:eb:45:e9:27:32:5a:2d:e0:43:27:ad:ec:
98:39:93:93:24:bf:fd:47:b2:dd:46:54:d6:74:dc:
54:e3:c6:e0:f5:5e:26:36:b0:a4:0b:74:7a:63:e4:
cd:81:68:40:12:74:59:22:2b:75:05:31:7d:e3:18:
8f:71:8d:13:f8:3f:a5:f7:9f:44:1c:1f:2a:67:a3:
b9:63:d0:8e:f1:d8:28:9f:d7:0a:fb:e6:56:04:a6:
de:d6:c6:35:8e:c8:0c:03:c1:21:69:4c:96:de:62:
26:3c:13:02:92:8e:f3:51:45:dd:ca:1d:9e:bf:68:
3d:97:4c:cd:5d:7f:6e:5b:df:25:4f:ef:d6:87:d0:
41:b0:93:51:8b:90:4b:b8:2f:42:15:26:62:cb:4f:
3e:7b:bc:5c:7a:bf:04:7d:8e:8b:cc:f8:98:e0:7c:
fd:8c:3a:96:f7:00:51:a2:5d:4c:32:1f:58:78:3f:
3d:e4:43:be:5e:c7:ef:aa:8c:aa:62:b5:c1:de:38:
5a:9a:f3:89:c2:52:8e:6f:81:98:31:f8:91:c7:81:
67:d4:c7:80:c6:70:12:59:86:3a:0d:94:48:2c:ff:
89:23:b3:6f:16:3a:b3:2c:65:53:e1:8f:95:f0:04:
e3:12:e1:71:4e:9d:fd:d4:d6:4e:8c:91:33:49:c3:
ce:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EC:F5:D1:EB:F7:18:23:12:56:3A:60:C8:B6:56:EF:9B:19:9B:F1
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/nez10ev3GCMSVjpgyLZW75sZm_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.40.0/24
Signature Algorithm: sha256WithRSAEncryption
18:03:82:c2:03:30:7d:6e:49:af:c6:c7:30:ec:50:7c:63:ad:
9a:6a:e4:96:48:fb:06:1b:46:5a:ff:4f:79:27:4d:36:14:18:
ff:93:4c:53:21:ed:4d:89:c4:08:05:38:ba:48:c7:bc:62:c8:
3e:a7:a1:fa:67:7e:74:37:53:bd:ee:77:18:d3:f7:26:50:91:
00:50:94:3a:f0:a3:d6:7a:91:2a:46:f3:b6:c7:31:c9:c5:f4:
c6:71:94:8f:91:cb:54:4b:4a:68:b5:f8:82:76:07:06:24:d4:
af:22:ef:dc:f2:73:4e:3b:a4:80:80:65:e2:0e:ff:a8:4a:90:
8e:94:cb:96:9d:78:95:a4:a6:0d:2c:a0:68:12:0c:8b:4b:73:
c4:a5:b1:b0:f3:37:84:94:c9:ad:58:6a:0d:a7:87:6b:6e:9a:
9e:fa:76:85:68:6c:e8:33:26:98:cf:49:f2:4a:69:66:c1:50:
e6:53:80:56:4d:18:6f:94:f0:23:60:f4:ae:35:29:e4:c4:a3:
4b:55:29:bf:00:3c:3a:e7:dd:df:fe:c2:f3:55:b1:36:96:02:
d6:ad:d9:ff:d2:41:ff:2a:bb:5a:7c:91:73:c8:74:50:97:f0:
3a:97:ad:16:15:c2:fc:91:13:ce:7a:1d:57:5a:ff:94:bf:55:
46:a4:a9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:57 2025 by rpki-client