Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nL-TXroXmdhTmO5uW-TuQKJrqvI.roa
File: nL-TXroXmdhTmO5uW-TuQKJrqvI.roa (raw, json)
Hash identifier: 7nL/ylawut1D3hJuzd/KWNaHhpwcaePC5opG1ksVqtU=
Subject key identifier: 9C:BF:93:5E:BA:17:99:D8:53:98:EE:6E:5B:E4:EE:40:A2:6B:AA:F2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824F46218CD31F49F24538800541034
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nL-TXroXmdhTmO5uW-TuQKJrqvI.roa
Signing time: Thu 02 Jan 2025 17:51:37 +0000
ROA not before: Thu 02 Jan 2025 17:51:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 62.76.236.0/24 maxlen: 24
62.76.237.0/24 maxlen: 24
62.76.238.0/24 maxlen: 24
193.124.17.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
194.58.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.58.223.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.128.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.255.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 14:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:f4:62:18:cd:31:f4:9f:24:53:88:00:54:10:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cbf935eba1799d85398ee6e5be4ee40a26baaf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dc:1a:a2:e8:db:df:5f:86:fa:ba:40:b9:b8:
86:ac:b3:e9:2d:fd:cc:ad:2f:09:dd:2f:53:95:e3:
f5:ad:dd:6d:c4:c8:fb:1f:ca:8d:19:ce:82:8a:53:
cd:b5:40:ba:b4:2e:b8:72:fa:2f:7b:af:97:23:8b:
2a:2c:60:e2:f6:78:98:2c:51:81:13:f7:33:0e:ef:
7b:f3:1d:94:f9:0d:8c:b0:d3:59:10:1f:44:fc:12:
b5:ab:1b:bd:b9:dc:31:c9:d0:42:87:e5:ec:28:3e:
41:e1:e7:05:86:cd:33:3e:5c:e4:f2:32:e6:14:90:
a1:d4:01:a1:c9:31:e8:05:7d:90:32:0f:59:34:c0:
f4:f0:27:04:f4:3e:d7:36:99:8c:16:0a:b2:12:4b:
97:78:f9:b4:8c:89:65:2f:82:8d:d6:6d:eb:28:98:
63:47:6b:e1:8e:63:98:ea:68:57:06:11:23:2c:ad:
f8:3f:e1:6c:64:5b:67:09:db:12:68:a5:93:c9:59:
60:2d:24:89:2b:1c:a7:60:2f:38:a6:a5:37:a6:54:
6b:a8:88:06:b4:54:1f:28:86:f9:83:1d:f1:7b:50:
fc:ff:88:0e:a0:8e:73:91:23:39:a5:f2:41:c6:a6:
b1:6c:9f:45:ee:f6:a2:bd:d8:64:5c:34:d6:2a:26:
53:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BF:93:5E:BA:17:99:D8:53:98:EE:6E:5B:E4:EE:40:A2:6B:AA:F2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nL-TXroXmdhTmO5uW-TuQKJrqvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.236.0-62.76.238.255
193.124.17.0/24
193.124.204.0/24
194.58.56.0/24
194.58.154.0/23
194.58.223.0/24
194.87.1.0/24
194.87.51.0/24
194.87.122.0/24
194.87.128.0/24
194.87.179.0/24
194.87.233.0/24
194.87.255.0/24
195.133.9.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:2f:5a:54:11:8c:10:e9:0a:8d:48:b2:9f:ae:9b:22:79:0c:
b6:f3:fc:04:65:18:8b:9e:bd:68:2e:a6:ab:10:7b:39:e6:f4:
7f:5c:c3:cc:e6:5b:ea:15:f9:64:0e:7d:a5:76:5c:14:30:e5:
96:e1:b7:8a:75:2a:f2:a4:2e:14:fc:73:97:b4:61:a7:7b:88:
14:33:79:ba:58:15:e2:79:a5:ac:bf:52:b2:76:8d:91:22:90:
76:00:4f:14:6b:38:c0:ea:ea:af:41:91:a4:17:5d:b4:4c:e6:
d7:3f:6f:0c:83:ed:b5:96:ae:fa:37:79:be:ba:64:aa:79:01:
87:c4:40:81:a3:e8:50:39:35:07:31:4c:d4:77:9b:e4:b7:b2:
6e:a2:ea:43:21:c8:df:25:4a:e6:7a:fb:01:b7:17:71:3c:4b:
c9:d7:d9:1d:44:d6:e2:bf:2a:56:b6:8d:93:93:56:a8:cb:66:
4e:a5:57:0e:a3:dc:24:a8:d3:30:2a:0b:99:7b:1d:f7:97:f7:
74:67:95:10:2d:4f:8c:85:09:a0:12:6b:cc:a9:0f:40:ea:d0:
92:0d:76:a7:32:9d:42:ca:4b:79:46:1d:d1:85:6d:d1:8c:ec:
ab:76:e6:4b:d4:24:b7:f0:4a:97:21:61:71:ec:d9:8f:8e:50:
4c:8b:78:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:51:58 2025 by rpki-client