Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/N0RW0vdRwBPOZEpkxDWhYyKfdyI.roa
File: N0RW0vdRwBPOZEpkxDWhYyKfdyI.roa (raw, json)
Hash identifier: oQRdMuNf8V4VHDJXhUjnLofFdOhkZZnzzL1dTSAGmDM=
Subject key identifier: 37:44:56:D2:F7:51:C0:13:CE:64:4A:64:C4:35:A1:63:22:9F:77:22
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0195AA8222767877BF015BCF36176BFD790E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/N0RW0vdRwBPOZEpkxDWhYyKfdyI.roa
Signing time: Tue 18 Mar 2025 18:26:50 +0000
ROA not before: Tue 18 Mar 2025 18:26:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401152
IP address blocks: 64.188.100.0/22 maxlen: 24
64.188.120.0/22 maxlen: 24
64.188.124.0/24 maxlen: 24
64.188.125.0/24 maxlen: 24
64.188.126.0/24 maxlen: 24
64.188.127.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
193.23.192.0/21 maxlen: 24
193.23.218.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 17:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:aa:82:22:76:78:77:bf:01:5b:cf:36:17:6b:fd:79:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 18 18:26:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=374456d2f751c013ce644a64c435a163229f7722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:ed:b6:28:c5:d0:ef:1e:81:2a:ac:dd:2b:
13:01:58:f7:03:f1:35:6f:12:86:98:a1:1a:e6:e9:
81:70:9e:8a:9d:87:19:39:be:52:51:76:50:1b:66:
3b:5d:14:f1:1e:9d:db:15:5e:88:da:67:20:75:0a:
17:2a:db:58:6d:a8:cb:eb:a1:59:00:04:65:46:1d:
bd:81:3d:7b:48:80:25:04:89:70:73:0e:22:ff:53:
3d:95:69:9e:77:de:2a:3e:45:a9:ea:3c:46:d9:41:
97:36:df:7d:20:81:77:c2:c4:1b:7c:34:d8:ec:dc:
ff:93:f8:25:c7:cd:55:34:8b:27:5b:23:5d:02:1c:
8a:05:59:86:83:64:14:88:7c:0b:8c:ef:14:00:64:
a2:e9:ad:e8:ec:44:7c:65:f3:ea:0d:dd:80:d9:c8:
b7:40:21:10:bd:de:8a:2c:81:6f:7e:66:e8:67:19:
94:e5:b3:a2:ee:1c:85:27:ba:2c:5d:92:db:a1:3f:
2f:f8:34:8f:94:51:b9:f7:5a:da:98:d2:ba:43:01:
a6:6c:18:cd:2f:56:33:b2:20:84:61:57:8d:4e:5b:
2d:51:0f:55:95:16:6b:0e:0e:b1:e6:df:c0:68:80:
26:38:b2:f2:d5:ea:73:d9:d3:a2:32:69:53:80:df:
59:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:44:56:D2:F7:51:C0:13:CE:64:4A:64:C4:35:A1:63:22:9F:77:22
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/N0RW0vdRwBPOZEpkxDWhYyKfdyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.100.0/22
64.188.120.0/21
185.216.104.0/22
193.23.192.0/21
193.23.218.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:76:91:f6:62:37:d0:53:92:8f:d8:70:76:a7:c9:74:18:e5:
4a:5b:90:fb:3d:ba:a8:82:71:92:10:12:95:6c:1a:bd:18:d8:
7f:13:71:4d:6f:2b:9c:0b:d1:27:45:26:11:65:3b:42:c9:56:
9f:12:d6:08:ff:86:3b:33:ae:9a:91:00:d5:5e:c0:ec:9f:af:
87:06:b1:c9:70:09:9d:34:1c:b1:cd:7e:fd:e9:ed:cf:ff:e1:
ec:db:65:be:b9:4c:aa:93:53:0f:ed:4d:a8:85:2a:92:9d:d0:
89:46:3b:74:40:5e:44:f2:dd:9e:76:f5:9d:4f:07:ff:6b:61:
af:e1:d5:db:70:d4:ee:ed:6c:da:c6:a6:8c:6a:91:00:63:74:
c9:77:7c:46:61:57:34:fb:cc:16:0d:82:b9:80:76:4d:74:b5:
a3:89:33:4a:ba:44:2c:2a:7b:78:35:64:68:fe:cd:9d:75:22:
fc:80:5c:c1:23:25:5b:ad:da:51:cc:c1:42:32:73:39:7f:a1:
fd:55:45:db:ef:71:4b:a8:34:15:f4:0d:ce:e3:95:1f:23:e4:
27:a2:65:1f:46:d2:ed:a5:dd:6e:6c:be:1d:de:ea:6a:2c:9c:
3a:e5:b0:7c:66:67:ec:82:93:d3:b4:b3:76:77:26:ad:38:1c:
a3:08:ae:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:11 2025 by rpki-client