Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/nfzC3wBkjv71huLmEQ74SuogVlY.roa
File: nfzC3wBkjv71huLmEQ74SuogVlY.roa (raw, json)
Hash identifier: rPQkcLSC5S2y37Use7RGmsm88sVa91UWBSVviDDIzDc=
Subject key identifier: 9D:FC:C2:DF:00:64:8E:FE:F5:86:E2:E6:11:0E:F8:4A:EA:20:56:56
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 018D3444A9B016CB7AEB085D360694675F50
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/nfzC3wBkjv71huLmEQ74SuogVlY.roa
Signing time: Tue 23 Jan 2024 03:02:11 +0000
ROA not before: Tue 23 Jan 2024 03:02:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48503
IP address blocks: 217.76.70.0/24 maxlen: 24
2a03:32c0::/48 maxlen: 48
2a03:32c0:1::/48 maxlen: 48
2a03:32c0:2::/48 maxlen: 48
2a03:32c0:3::/48 maxlen: 48
2a03:32c0:4::/48 maxlen: 48
2a03:32c0:5::/48 maxlen: 48
2a03:32c0:6::/48 maxlen: 48
2a03:32c0:7::/48 maxlen: 48
2a03:32c0:3000::/48 maxlen: 48
2a03:32c0:3001::/48 maxlen: 48
2a03:32c0:3002::/48 maxlen: 48
2a03:32c0:3003::/48 maxlen: 48
2a03:32c0:3004::/48 maxlen: 48
2a03:32c0:3005::/48 maxlen: 48
2a03:32c0:4000::/48 maxlen: 48
2a03:32c0:4001::/48 maxlen: 48
2a03:32c0:4002::/48 maxlen: 48
2a03:32c0:5000::/48 maxlen: 48
2a03:32c0:5001::/48 maxlen: 48
2a03:32c0:5002::/48 maxlen: 48
2a03:32c0:6000::/48 maxlen: 48
2a03:32c0:6001::/48 maxlen: 48
2a03:32c0:7000::/48 maxlen: 48
2a03:32c0:7001::/48 maxlen: 48
2a03:32c0:8000::/48 maxlen: 48
2a03:32c0:8001::/48 maxlen: 48
2a03:32c0:8002::/48 maxlen: 48
2a03:32c0:8003::/48 maxlen: 48
2a03:32c0:8004::/48 maxlen: 48
2a03:32c0:8005::/48 maxlen: 48
2a03:32c0:8006::/48 maxlen: 48
2a03:32c0:8007::/48 maxlen: 48
2a03:32c0:9000::/48 maxlen: 48
2a03:32c0:9001::/48 maxlen: 48
2a03:32c0:9002::/48 maxlen: 48
2a03:32c0:9003::/48 maxlen: 48
2a03:32c0:9004::/48 maxlen: 48
2a03:32c0:9005::/48 maxlen: 48
2a03:32c0:9006::/48 maxlen: 48
2a03:32c0:9007::/48 maxlen: 48
2a03:32c0:b000::/48 maxlen: 48
2a03:32c0:b001::/48 maxlen: 48
2a03:32c0:b002::/48 maxlen: 48
2a03:32c0:b003::/48 maxlen: 48
2a03:32c0:b004::/48 maxlen: 48
2a03:32c0:b005::/48 maxlen: 48
2a03:32c0:b006::/48 maxlen: 48
2a03:32c0:b007::/48 maxlen: 48
2a03:32c0:b008::/48 maxlen: 48
2a03:32c0:b009::/48 maxlen: 48
2a03:32c0:e000::/48 maxlen: 48
2a03:32c0:e001::/48 maxlen: 48
2a03:32c0:e002::/48 maxlen: 48
2a03:32c0:e003::/48 maxlen: 48
2a03:32c0:e004::/48 maxlen: 48
2a03:32c0:e005::/48 maxlen: 48
2a03:32c0:e006::/48 maxlen: 48
2a03:32c0:e007::/48 maxlen: 48
2a03:32c0:e008::/48 maxlen: 48
2a03:32c0:e009::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 23 Jan 2024 07:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:34:44:a9:b0:16:cb:7a:eb:08:5d:36:06:94:67:5f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Jan 23 03:02:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dfcc2df00648efef586e2e6110ef84aea205656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:94:44:74:44:ba:20:e2:3e:1f:ba:66:61:48:
3f:28:e6:80:b1:02:09:e4:9f:1b:7c:ec:46:d1:fc:
cf:b8:48:54:ca:83:68:6c:4f:27:b7:b2:5b:d5:b4:
ee:7f:64:63:cf:85:9f:67:93:53:2b:e2:f1:56:52:
f2:7a:68:42:43:05:8f:0c:4c:23:10:07:0d:5a:99:
1d:4f:9c:db:93:70:50:62:2a:bf:ab:28:50:ea:9f:
f6:58:44:90:50:ec:84:ff:fb:01:f8:3d:ce:51:e6:
ba:11:d3:57:f2:42:44:65:1a:0c:a3:34:18:c8:31:
43:e8:c7:03:2d:77:f2:77:bd:49:2e:ce:00:eb:75:
dd:e3:2f:46:0b:fb:6f:62:e9:58:54:f5:20:36:02:
26:47:44:44:94:be:9f:7f:bc:c1:c5:3d:26:b9:ed:
c4:40:27:de:b3:12:15:6b:11:5f:44:27:26:64:a9:
d8:1b:71:d8:a4:93:2c:bf:9d:4c:ba:32:3f:68:c5:
86:f7:51:5a:8b:bf:d1:29:e4:91:6a:1c:3d:1b:a8:
13:cb:35:83:f8:1b:2f:fb:cc:2b:1b:c9:e2:7e:be:
2b:b2:8a:cd:34:53:d1:38:43:d7:01:d3:84:6d:31:
78:87:ac:4b:a2:f2:30:86:3e:d7:56:26:27:a9:d6:
ec:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FC:C2:DF:00:64:8E:FE:F5:86:E2:E6:11:0E:F8:4A:EA:20:56:56
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/nfzC3wBkjv71huLmEQ74SuogVlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.76.70.0/24
IPv6:
2a03:32c0::/45
2a03:32c0:3000::-2a03:32c0:3005:ffff:ffff:ffff:ffff:ffff
2a03:32c0:4000::-2a03:32c0:4002:ffff:ffff:ffff:ffff:ffff
2a03:32c0:5000::-2a03:32c0:5002:ffff:ffff:ffff:ffff:ffff
2a03:32c0:6000::/47
2a03:32c0:7000::/47
2a03:32c0:8000::/45
2a03:32c0:9000::/45
2a03:32c0:b000::-2a03:32c0:b009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:e000::-2a03:32c0:e009:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
95:d1:73:b6:77:95:8e:7a:57:23:be:73:a5:58:b0:6c:27:1e:
55:7e:37:f6:be:69:98:79:20:53:15:13:9c:9c:48:4e:6d:b4:
b1:cb:5f:f1:f2:fe:d4:a7:af:19:31:b8:12:f8:80:0d:5c:10:
fb:0e:26:ec:6d:7a:25:a7:9b:84:8b:2a:79:7e:92:5f:bc:d8:
f5:79:15:49:a7:c7:d5:4b:7b:86:4a:97:14:99:ca:12:f7:c6:
85:2e:1c:6f:36:0f:ed:6b:05:ba:ff:5b:53:96:2f:d1:d4:00:
94:ce:6a:fc:37:83:75:63:fd:b0:29:e1:d7:0e:b9:a4:fd:31:
16:9b:a2:fe:dc:41:ee:3f:af:15:b5:50:16:eb:88:91:13:2a:
c3:f3:4b:92:12:c1:69:15:99:1d:68:81:12:93:b7:3d:33:7c:
9f:4c:0f:06:3c:f1:4d:c3:c8:65:b1:e8:35:09:69:ef:b9:4c:
6c:6d:05:c4:07:5c:88:e9:2b:29:f5:a5:91:89:f6:f0:c5:5f:
3f:3c:0a:52:20:b7:20:dc:c2:ba:ec:bf:08:89:40:46:19:dc:
2a:3f:81:44:c6:f8:17:08:5d:e0:e0:ee:b3:3e:85:07:3b:60:
f5:ab:2a:12:0e:88:b1:bd:c6:20:01:d6:2d:f1:d5:25:48:ad:
4f:12:ab:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:54 2024 by rpki-client on console-ams.rpki-client.org