Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/njCgTyA3OSmWrKl1O391vodUnj4.roa
File: njCgTyA3OSmWrKl1O391vodUnj4.roa (raw, json)
Hash identifier: c9CRcJRTk7HzF/JTOaouED33nSRt8KPI71z1aeMiLig=
Subject key identifier: 9E:30:A0:4F:20:37:39:29:96:AC:A9:75:3B:7F:75:BE:87:54:9E:3E
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 0194DA6A98AF84AD21529C87BE9CB81148E8
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/njCgTyA3OSmWrKl1O391vodUnj4.roa
Signing time: Thu 06 Feb 2025 08:40:06 +0000
ROA not before: Thu 06 Feb 2025 08:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60117
IP address blocks: 77.110.96.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 10 Feb 2025 19:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:6a:98:af:84:ad:21:52:9c:87:be:9c:b8:11:48:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Feb 6 08:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e30a04f2037392996aca9753b7f75be87549e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:62:01:7c:9b:86:14:09:3f:59:be:ee:8b:88:
62:11:07:e4:d4:2b:d2:70:2c:77:44:7a:72:39:48:
d8:9a:22:e1:77:e9:a7:9f:5e:b8:32:54:e3:13:79:
e9:45:65:2e:c9:cc:1f:1a:6c:92:92:46:45:f6:1f:
97:40:24:97:10:1f:20:9b:a9:a6:d2:c9:1a:f8:97:
33:dd:3b:76:c0:fd:0a:96:28:f7:aa:0a:a3:b2:dd:
33:0a:dc:ef:14:0b:fa:34:95:45:a4:c0:f4:ae:4c:
33:66:34:bb:23:f2:c8:d8:ff:72:2f:02:b9:37:c3:
24:61:74:d3:52:4c:ab:66:7f:5f:66:c8:ff:39:14:
19:e3:3c:c6:6d:42:0a:0b:92:a8:80:27:d7:f2:33:
dc:00:ef:8c:52:6d:6d:b6:d6:15:e3:81:c3:6d:73:
5a:7d:22:80:49:86:d4:cc:56:6d:70:23:a3:2c:ec:
de:fd:1c:20:56:04:f9:4f:e4:57:db:1a:42:0a:07:
fa:bc:6f:4a:8d:bf:98:f3:26:dd:ec:a0:fb:11:f1:
be:68:c2:ad:39:86:af:bf:4e:39:66:c1:d9:28:53:
29:57:5c:e7:ae:86:0b:75:59:04:9b:b3:e8:06:37:
dc:81:d7:07:12:fd:9a:24:fb:d7:a5:92:01:de:c7:
21:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:30:A0:4F:20:37:39:29:96:AC:A9:75:3B:7F:75:BE:87:54:9E:3E
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/njCgTyA3OSmWrKl1O391vodUnj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.96.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:36:e5:c8:7f:cb:c6:02:b9:8d:49:cc:c9:fd:8d:79:16:0c:
35:38:23:15:0c:14:63:61:58:d1:c1:11:f3:36:9f:6f:93:58:
3e:cf:9f:38:f3:af:59:a1:f2:d0:40:d6:86:c8:05:0d:d8:88:
cf:66:66:16:3f:c7:ac:62:9d:8a:39:3e:ee:ad:c7:b1:00:19:
81:ac:29:52:81:17:a4:f0:cf:00:25:cb:f7:9c:56:d0:e8:5f:
9b:aa:49:8b:97:7c:6b:7e:37:73:93:f1:80:13:6e:99:35:0d:
31:33:a4:07:10:97:35:81:d8:7b:be:4b:c4:d6:82:8b:f9:12:
f8:c4:30:72:c0:a0:b0:ba:2a:e2:31:53:48:56:da:6f:cc:89:
d4:6b:8f:4e:a2:4a:49:04:d7:73:ee:28:7b:0f:d1:83:6e:51:
c5:a4:22:40:3c:69:82:1d:03:7d:37:b7:ab:32:0a:1c:80:d0:
0e:d1:db:6a:43:30:99:38:eb:3e:bf:4a:ad:a9:6e:3b:f8:04:
03:da:a6:00:46:0d:52:86:97:46:fd:2e:15:f8:bb:14:8f:ca:
f9:11:e6:9b:28:06:e2:12:2c:7f:8b:a2:1e:df:d5:19:78:78:
29:b6:96:cf:1d:b4:66:85:16:93:69:ba:30:9d:5f:13:a3:10:
4d:30:81:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:32 2025 by rpki-client