Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NWbK1-WUpdISwIhnN4JrpztPP98.roa
File: NWbK1-WUpdISwIhnN4JrpztPP98.roa (raw, json)
Hash identifier: liqFMKNjxvvfwtvPDpnAHu9osPw9/IUkVjieydVad9E=
Subject key identifier: 35:66:CA:D7:E5:94:A5:D2:12:C0:88:67:37:82:6B:A7:3B:4F:3F:DF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018D4094D35939CB35B08DD2B5930A8019C9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NWbK1-WUpdISwIhnN4JrpztPP98.roa
Signing time: Thu 25 Jan 2024 12:25:11 +0000
ROA not before: Thu 25 Jan 2024 12:25:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 2a0f:df40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 27 Mar 2024 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:40:94:d3:59:39:cb:35:b0:8d:d2:b5:93:0a:80:19:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 25 12:25:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3566cad7e594a5d212c0886737826ba73b4f3fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bc:97:97:3d:76:83:a2:7d:ee:7b:e8:55:66:
89:d8:eb:67:71:31:30:3e:6c:f3:e2:aa:49:0a:cf:
58:e9:03:e8:8e:31:99:c1:4d:7f:59:3e:8d:72:9e:
ec:bc:ee:e5:5f:2f:c3:54:57:43:2d:65:89:2a:08:
e7:bf:1e:5d:17:e0:ac:cf:72:8d:cd:91:91:a9:e2:
0e:10:c7:c3:85:ac:45:8c:53:67:5d:7b:37:0b:b8:
71:d6:ab:52:f9:6d:62:f5:6c:a3:63:82:10:06:bc:
27:35:f6:b3:f9:b6:87:7c:24:10:57:9e:fb:da:5c:
f9:01:11:b8:d1:08:1e:05:10:1d:3a:94:41:75:b0:
8c:cd:41:e8:0d:7e:75:18:70:74:68:59:a5:bf:29:
f4:38:32:ea:a0:21:ef:78:b0:a8:f1:3c:64:9c:48:
2c:9b:18:4d:de:13:c5:9d:ac:ec:90:19:8e:4b:be:
48:1c:1d:42:7d:99:8e:a6:3e:fb:d3:5f:96:93:38:
9c:77:45:71:fb:15:e5:08:93:f3:e9:53:fe:cb:fd:
7b:15:ef:f1:c1:92:a6:93:33:22:1b:7e:a0:b9:b7:
73:98:6d:33:ab:8c:e7:b9:15:dd:0e:20:7c:4e:b0:
c7:ab:35:1c:3f:3c:3f:39:52:ab:51:61:45:7b:94:
5f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:66:CA:D7:E5:94:A5:D2:12:C0:88:67:37:82:6B:A7:3B:4F:3F:DF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NWbK1-WUpdISwIhnN4JrpztPP98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:df40::/29
Signature Algorithm: sha256WithRSAEncryption
5b:88:a1:b9:51:9b:50:79:63:e5:68:2b:9c:7e:34:8a:35:2f:
c7:12:7d:8b:ed:3a:2f:4f:9b:83:f5:7a:1f:e2:d3:44:4e:14:
fa:26:79:76:75:5c:da:43:a1:2f:02:c4:e4:5b:d8:77:d8:0f:
a5:56:67:81:9b:13:a6:46:e2:be:55:d8:b5:ae:3d:fb:3c:5a:
d1:23:e5:a8:32:2c:53:7b:60:1a:ce:51:de:0d:6e:cd:ac:eb:
c3:fd:1b:a9:1a:f5:0d:c1:33:05:80:76:da:88:79:e3:bf:60:
9e:26:af:e6:a2:12:58:52:6a:fd:56:d3:e9:7d:43:fb:09:d4:
af:9f:c9:8e:80:49:95:35:22:e9:63:b2:60:29:79:75:d7:45:
72:28:ee:c2:24:5c:99:67:a0:bf:0f:c3:f1:05:91:19:21:06:
3e:58:06:6f:1c:fa:aa:8e:a7:ce:55:7a:90:02:1d:8f:a3:0e:
d9:bc:e0:f2:93:fe:f1:a8:56:37:a9:1c:e8:22:50:57:3c:fa:
92:ca:e3:d0:a2:c5:48:79:89:f2:e4:9a:46:4d:52:7a:0e:af:
1a:be:22:46:ad:ea:69:7c:ba:d1:ab:9e:07:c6:1c:fa:65:4c:
e0:0b:44:6e:8b:18:59:d2:9f:47:7c:ee:35:08:0e:8c:1d:56:
27:d2:44:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:48:48 2025 by rpki-client