Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/9NiXAI-nYuVgsP_2goKi-5Ggo8c.roa
File: 9NiXAI-nYuVgsP_2goKi-5Ggo8c.roa (raw, json)
Hash identifier: 0nBJhDWQSFVebanmJrlK2L/hi7bvx+wq+skmm3D4wp4=
Subject key identifier: F4:D8:97:00:8F:A7:62:E5:60:B0:FF:F6:82:82:A2:FB:91:A0:A3:C7
Certificate issuer: /CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Certificate serial: 0190BFFE54300FCD10B770705A916CAC6885
Authority key identifier: 9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/9NiXAI-nYuVgsP_2goKi-5Ggo8c.roa
Signing time: Wed 17 Jul 2024 09:20:34 +0000
ROA not before: Wed 17 Jul 2024 09:20:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56478
IP address blocks: 31.14.248.0/22 maxlen: 22
37.156.72.0/22 maxlen: 22
89.32.120.0/22 maxlen: 22
89.34.164.0/22 maxlen: 22
89.35.196.0/22 maxlen: 22
89.36.64.0/21 maxlen: 21
89.39.136.0/21 maxlen: 21
89.44.40.0/22 maxlen: 22
93.115.192.0/22 maxlen: 22
141.0.144.0/21 maxlen: 21
141.0.152.0/21 maxlen: 21
185.24.120.0/22 maxlen: 22
188.172.144.0/20 maxlen: 20
188.210.208.0/21 maxlen: 21
188.210.208.0/22 maxlen: 22
188.211.160.0/22 maxlen: 22
188.213.136.0/22 maxlen: 22
188.214.8.0/21 maxlen: 21
209.35.64.0/19 maxlen: 19
209.35.72.0/22 maxlen: 22
209.35.76.0/22 maxlen: 22
209.35.80.0/21 maxlen: 21
209.35.80.0/22 maxlen: 22
209.35.84.0/22 maxlen: 22
209.35.88.0/21 maxlen: 21
209.35.88.0/22 maxlen: 22
209.35.92.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 17 Jul 2024 11:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bf:fe:54:30:0f:cd:10:b7:70:70:5a:91:6c:ac:68:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Validity
Not Before: Jul 17 09:20:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4d897008fa762e560b0fff68282a2fb91a0a3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:86:81:3a:53:12:6c:6c:bb:ca:77:04:3c:
da:52:de:58:19:9c:8f:bf:3a:13:0f:d8:07:1f:fd:
3a:62:2a:c4:84:9b:b4:9f:24:bb:5c:97:f1:5e:9f:
4d:62:b4:aa:68:29:dc:2c:e6:c7:20:f4:4a:ba:64:
1c:80:b4:a4:54:93:8a:1f:f9:5e:fd:df:34:d6:51:
3b:64:cf:c5:38:c5:e7:e8:21:7a:31:f9:b9:d2:11:
56:ab:5f:9c:fc:bb:48:2b:77:15:f0:e0:f6:ef:8b:
25:e5:99:2d:16:e4:a6:73:be:25:98:ec:43:6d:1a:
bf:04:b8:ed:fa:96:88:d2:92:2f:da:ff:8a:e0:b1:
1a:0a:4d:04:cd:ff:5a:70:ce:aa:3d:0d:00:1e:bc:
27:bb:a5:6c:7a:77:9a:d9:17:dc:a5:d2:c7:7b:3c:
a7:96:ff:84:1a:ee:c4:f4:2b:5b:27:95:fe:a9:7f:
f6:52:74:8b:dd:35:df:75:73:ed:da:67:02:82:bd:
ff:fe:c7:55:89:4d:20:cb:36:70:9a:09:d6:a6:d9:
6f:1a:17:06:67:7f:9e:2a:4d:b4:5b:23:d6:ef:81:
e4:95:cf:cb:19:94:f3:ef:67:ef:5b:5f:8a:00:c9:
dd:be:85:a1:29:60:c2:98:7a:fc:2f:50:c2:97:40:
40:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D8:97:00:8F:A7:62:E5:60:B0:FF:F6:82:82:A2:FB:91:A0:A3:C7
X509v3 Authority Key Identifier:
keyid:9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/9NiXAI-nYuVgsP_2goKi-5Ggo8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.248.0/22
37.156.72.0/22
89.32.120.0/22
89.34.164.0/22
89.35.196.0/22
89.36.64.0/21
89.39.136.0/21
89.44.40.0/22
93.115.192.0/22
141.0.144.0/20
185.24.120.0/22
188.172.144.0/20
188.210.208.0/21
188.211.160.0/22
188.213.136.0/22
188.214.8.0/21
209.35.64.0/19
Signature Algorithm: sha256WithRSAEncryption
00:8e:22:f6:dd:c0:a5:bf:b5:91:8c:7d:05:72:8c:1a:a5:b2:
94:b6:4c:be:a6:2d:ce:a5:fe:e7:0e:76:a8:19:63:5c:f4:2f:
f5:f2:42:56:0f:6b:3c:04:c1:8a:af:94:a7:b8:92:a5:a6:1c:
9f:19:45:d0:82:95:47:31:4a:77:23:56:ae:84:db:fe:7e:3d:
aa:61:e8:32:b2:7e:f6:41:4b:21:0e:c8:0b:97:b8:10:db:96:
5e:32:b3:83:7f:9f:57:e2:fd:3e:e3:ab:19:ec:15:df:ff:53:
5e:5b:48:e7:2e:0a:05:23:21:02:9e:7c:83:8f:ed:bd:e8:88:
0d:a1:c0:d6:1c:0e:65:9b:82:ea:23:91:10:f2:12:e4:49:2b:
42:6b:85:87:67:cc:34:34:31:94:09:23:34:e3:58:44:2e:d7:
53:b4:e6:60:4c:ee:e5:b9:50:bf:9b:f1:99:80:54:c1:ea:53:
bc:26:74:b2:b6:50:76:9f:0a:db:f5:26:52:d6:8e:0c:5f:eb:
95:eb:d6:33:75:e5:ac:10:7f:57:4a:78:68:89:b2:ee:40:33:
ce:4f:c2:b5:bb:c4:9e:a7:d7:a3:75:96:5d:3b:81:f6:7b:37:
a9:5a:97:45:d8:21:56:26:65:9e:c5:32:54:c9:07:c6:6f:de:
0c:02:ff:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:56:36 2025 by rpki-client