Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hN9fsJWToyH0pOLtl5yAhYpnQys.roa
File: hN9fsJWToyH0pOLtl5yAhYpnQys.roa (raw, json)
Hash identifier: oNtfx6QOqwvNVTOZL4KfT6fisE9CA3ANaehEE1m/zLo=
Subject key identifier: 84:DF:5F:B0:95:93:A3:21:F4:A4:E2:ED:97:9C:80:85:8A:67:43:2B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824F88C299BAF3707A44960DEACAC7B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hN9fsJWToyH0pOLtl5yAhYpnQys.roa
Signing time: Thu 02 Jan 2025 17:51:39 +0000
ROA not before: Thu 02 Jan 2025 17:51:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198037
IP address blocks: 192.124.189.0/24 maxlen: 24
194.58.41.0/24 maxlen: 24
194.87.25.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
195.133.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 14:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:f8:8c:29:9b:af:37:07:a4:49:60:de:ac:ac:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84df5fb09593a321f4a4e2ed979c80858a67432b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b0:69:55:4b:4d:4d:8c:b3:79:a7:d2:04:6c:
19:20:24:c9:37:1d:a1:50:c7:90:a5:3a:01:0e:25:
db:09:27:6c:7e:18:e0:7f:65:98:c7:f6:54:30:eb:
32:fc:93:b3:4d:26:01:1d:1f:8e:20:c2:6c:79:16:
b3:e2:6e:44:9e:a1:ac:5c:bf:12:53:3f:62:f8:fb:
6e:69:61:e7:c5:d0:28:4e:b3:0d:44:8e:3d:76:99:
c5:53:a4:a3:46:07:fd:70:f2:a7:0c:ee:8f:46:ec:
d7:42:33:fb:da:14:32:89:a3:a5:d6:99:e7:f3:af:
09:fb:82:30:c6:4c:8f:61:a7:67:72:d4:ab:39:86:
74:cf:54:0a:21:68:b4:03:64:29:4e:0b:0a:47:9e:
2b:c9:df:a3:db:da:bc:d4:fe:5d:37:57:72:e6:59:
dd:64:3d:7a:5c:95:0a:cc:42:9c:15:98:2f:68:55:
98:ef:aa:4b:8e:fb:e2:b6:5e:81:b6:d4:7e:43:6c:
5e:4c:0e:e1:0c:4f:92:ae:70:e5:99:52:dc:8c:9d:
fd:55:f2:f1:ce:b4:f7:ff:5b:9e:da:be:23:b9:22:
31:aa:e6:6f:ae:31:22:2f:dd:07:39:52:fa:d2:c2:
96:44:55:1e:7a:31:19:77:06:2d:69:e3:ab:e8:9e:
0f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DF:5F:B0:95:93:A3:21:F4:A4:E2:ED:97:9C:80:85:8A:67:43:2B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hN9fsJWToyH0pOLtl5yAhYpnQys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.189.0/24
194.58.41.0/24
194.87.25.0/24
194.87.73.0/24
195.133.84.0/24
Signature Algorithm: sha256WithRSAEncryption
45:fd:4a:48:dd:6f:cb:94:56:9f:e8:73:4b:ac:eb:34:ae:a2:
5c:b1:06:88:9f:7c:3d:a8:99:27:c2:c2:bf:89:38:4c:e1:de:
ae:cf:4f:e6:3f:69:c9:6f:ef:96:0a:d0:cd:0f:53:f6:d2:a5:
f8:98:b9:58:84:20:6d:6b:bb:6b:d0:5b:b9:b3:22:39:bf:8f:
51:74:70:3f:96:7f:57:87:77:46:1c:89:ab:4e:4b:af:3e:81:
93:c6:91:ab:3f:f9:83:4d:d8:58:89:21:b2:7c:35:f5:9f:37:
f4:06:e4:71:ae:c1:ed:89:39:67:b8:f7:c1:a5:61:b3:8a:76:
65:2f:a1:c4:58:17:61:a6:2c:d6:45:77:28:9c:ff:ab:d1:24:
9f:8d:51:93:20:48:03:56:92:1f:f7:b6:da:34:c0:b8:8c:a8:
cd:87:a8:e5:9f:d0:69:9d:4d:3f:dc:a6:ec:b3:8e:60:b6:61:
94:6b:34:47:1e:ec:14:e1:0f:73:a9:bd:39:2e:0a:8d:25:a2:
39:91:f0:77:09:98:67:8f:03:f5:9a:cb:a0:3e:24:98:e5:ec:
cd:a3:f3:c7:c5:a5:29:1d:49:e4:77:d6:e6:78:5c:bb:8d:6c:
02:2f:b5:42:fd:24:85:bd:bb:5a:81:d4:29:6b:92:6d:0b:dd:
44:6e:17:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:46:54 2025 by rpki-client