Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/nsKxJWYNnrz56YIG3epAIG3tj4M.roa
File: nsKxJWYNnrz56YIG3epAIG3tj4M.roa (raw, json)
Hash identifier: ozkNcODb29fFxmiUpEuBS4PGRD73nECYZKbUGdrz874=
Subject key identifier: 9E:C2:B1:25:66:0D:9E:BC:F9:E9:82:06:DD:EA:40:20:6D:ED:8F:83
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018E7E119E12D963992111EE9B597E6C09F2
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/nsKxJWYNnrz56YIG3epAIG3tj4M.roa
Signing time: Wed 27 Mar 2024 04:01:07 +0000
ROA not before: Wed 27 Mar 2024 04:01:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50340
IP address blocks: 2a0e:b900::/29 maxlen: 29
2a10:4900::/29 maxlen: 29
2a10:4900::/32 maxlen: 32
2a10:4901::/32 maxlen: 32
2a10:4902::/32 maxlen: 32
2a10:4903::/32 maxlen: 32
2a10:4904::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 29 Mar 2024 04:34:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7e:11:9e:12:d9:63:99:21:11:ee:9b:59:7e:6c:09:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Mar 27 04:01:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ec2b125660d9ebcf9e98206ddea40206ded8f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:66:d6:a0:f2:11:72:26:01:42:12:f8:df:44:
30:7a:ba:74:bd:d8:cd:ac:36:e4:5e:22:7c:ba:ed:
50:c2:e5:d5:ca:d1:15:d6:b6:a0:16:f7:1a:5d:d6:
3b:e3:52:b3:7e:b7:6e:d1:b7:41:da:07:b5:d1:d8:
91:d4:f6:01:33:69:13:5a:d3:cf:0c:24:cc:c9:22:
78:7c:44:24:f8:82:27:e3:a5:9a:c7:da:d4:8c:32:
68:dd:79:26:66:1e:06:28:7c:7e:a5:f5:f6:7d:b6:
2d:68:e1:02:09:d9:dc:c8:a0:ea:7b:65:f7:52:3e:
65:95:cc:3d:13:a6:dd:c1:40:0f:89:3e:82:80:a2:
64:b7:37:a3:87:46:cf:c9:c1:38:96:87:ed:ef:6c:
6b:a5:d6:79:8f:7b:93:19:98:ca:50:65:ea:cc:d0:
db:22:0b:e2:a3:b4:a3:76:78:db:67:f0:ef:3e:42:
b3:20:83:ad:f6:dc:69:16:01:a0:5d:7f:75:c4:e9:
ee:02:aa:c3:c4:66:a8:2a:59:34:0f:34:71:54:e9:
43:01:7c:d4:44:3f:71:f8:e5:22:93:01:02:0c:4b:
ab:a3:ff:f4:2d:f8:19:d4:e9:6c:a8:49:be:a5:67:
32:51:23:0c:9a:f8:b5:1d:d0:95:8a:0d:dd:b4:bb:
d7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C2:B1:25:66:0D:9E:BC:F9:E9:82:06:DD:EA:40:20:6D:ED:8F:83
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/nsKxJWYNnrz56YIG3epAIG3tj4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b900::/29
2a10:4900::/29
Signature Algorithm: sha256WithRSAEncryption
5b:33:49:e8:b1:74:d1:09:0c:e1:88:82:43:15:c4:fe:92:6c:
a6:5b:bf:19:fd:e3:03:ce:da:5d:91:7b:df:66:bc:85:6f:4e:
f2:b5:bb:11:24:90:c5:2e:5e:cb:51:42:03:80:0a:f4:c4:1e:
9b:45:a7:25:d8:21:44:a9:ee:fa:0a:18:87:98:7d:e4:c0:3d:
b2:90:74:1c:8c:dd:c4:68:6e:16:58:bf:0a:a8:f8:47:2c:ba:
4d:68:26:fb:9d:f8:40:fa:10:3d:17:07:ad:7a:7e:c6:b4:76:
6e:5a:7e:cf:f1:09:17:72:ba:39:7e:06:c1:38:ea:96:39:8c:
f7:a8:31:62:2b:6c:fb:34:19:ee:c1:9f:1f:ff:77:7b:ec:75:
a9:14:b3:e2:d1:f4:74:10:3d:d8:85:f4:ed:2e:0e:26:91:e4:
62:c2:26:c6:ad:4e:79:b9:ce:78:b9:e7:ec:9a:f0:3d:d3:cc:
d7:29:b7:3a:03:22:12:94:b5:ef:d3:43:b4:90:2f:5e:93:24:
2e:95:b8:ce:f5:9d:08:0b:19:ad:8b:99:9f:65:4d:3f:82:76:
be:f9:dd:6d:40:b4:e3:7a:03:b5:e1:f5:26:05:12:dc:df:cd:
8e:43:45:d2:0f:00:9c:34:37:59:eb:c6:31:f5:0d:00:64:31:
55:b9:9f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:03 2025 by rpki-client