Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/nnUWvm9cQMvXD7pESz1sW4UmKys.roa
File: nnUWvm9cQMvXD7pESz1sW4UmKys.roa (raw, json)
Hash identifier: pKt246Kab1RESzYVmzQgj0DJrS7KI+bpJjWKqysbBF8=
Subject key identifier: 9E:75:16:BE:6F:5C:40:CB:D7:0F:BA:44:4B:3D:6C:5B:85:26:2B:2B
Certificate issuer: /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial: 0190A5E03C573821458F3D37B92A4E0FAE89
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/nnUWvm9cQMvXD7pESz1sW4UmKys.roa
Signing time: Fri 12 Jul 2024 07:37:34 +0000
ROA not before: Fri 12 Jul 2024 07:37:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206892
IP address blocks: 45.95.44.0/22 maxlen: 24
94.199.178.0/23 maxlen: 24
94.199.179.0/24 maxlen: 24
95.140.32.0/24 maxlen: 24
95.140.38.0/23 maxlen: 24
185.161.72.0/22 maxlen: 24
185.199.28.0/22 maxlen: 24
185.234.180.0/22 maxlen: 24
194.39.44.0/22 maxlen: 24
195.200.232.0/23 maxlen: 24
2a07:c280::/32 maxlen: 33
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a5:e0:3c:57:38:21:45:8f:3d:37:b9:2a:4e:0f:ae:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Validity
Not Before: Jul 12 07:37:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e7516be6f5c40cbd70fba444b3d6c5b85262b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d9:2b:9f:9a:0e:28:4a:5a:3f:93:54:02:81:
3c:08:58:5b:05:bd:3d:c1:80:fa:7c:ca:9c:bb:24:
5a:a4:16:60:2b:ea:58:17:ce:96:82:db:51:44:66:
b7:35:c4:87:6c:77:3c:54:e6:a0:ea:35:67:42:53:
26:f4:80:56:6e:a9:be:88:8a:4f:7a:b7:9c:45:e8:
bb:52:e9:91:fd:aa:cb:57:de:17:dd:e0:da:f4:c9:
84:2b:e5:5d:52:90:72:d9:a4:f5:a0:1e:74:9c:9c:
b6:f1:bc:f4:fd:a6:68:6e:af:df:e0:70:f9:48:91:
41:fe:b9:73:0e:55:a5:5d:71:cd:e9:91:e3:36:6e:
45:1a:c6:61:62:c9:90:ef:f9:97:d6:e5:35:5a:c0:
a2:4f:94:0e:0b:4c:c5:c9:5f:b5:b1:55:ab:4b:80:
4e:43:09:63:63:48:0d:bb:a1:ed:5d:5e:b4:43:cd:
51:72:12:f8:12:41:39:7f:db:93:fb:a2:73:70:99:
54:c2:9f:3d:a9:90:30:78:98:77:a1:b1:68:73:d1:
52:5c:26:bb:10:06:15:4a:5b:75:0c:fe:25:94:9e:
2f:07:22:40:b2:b9:0c:d4:f6:b6:d4:75:fb:a5:bc:
8f:36:c2:dc:aa:e8:36:7c:1e:c0:9d:d2:3b:28:98:
06:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:75:16:BE:6F:5C:40:CB:D7:0F:BA:44:4B:3D:6C:5B:85:26:2B:2B
X509v3 Authority Key Identifier:
keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/nnUWvm9cQMvXD7pESz1sW4UmKys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.44.0/22
94.199.178.0/23
95.140.32.0/24
95.140.38.0/23
185.161.72.0/22
185.199.28.0/22
185.234.180.0/22
194.39.44.0/22
195.200.232.0/23
IPv6:
2a07:c280::/32
Signature Algorithm: sha256WithRSAEncryption
eb:2e:ef:df:8d:06:c1:4c:56:2e:62:23:d2:ae:a7:e7:62:46:
15:93:86:93:75:ba:5b:11:35:ae:cf:1c:8c:86:bf:70:dc:e7:
ef:4d:62:4b:d4:9b:40:7e:80:93:ed:60:78:72:a5:4c:0a:9b:
e2:c3:ea:d3:41:8b:7b:df:82:bd:02:20:69:7e:dc:90:83:b4:
bc:3a:cf:ac:6d:98:37:0d:ca:95:b4:08:c8:73:6e:96:dc:5d:
32:07:cd:55:b9:8d:ca:61:60:50:bb:15:16:f3:19:65:c5:41:
2b:94:32:f8:3e:b0:ed:98:59:f2:64:01:69:40:71:60:dd:f8:
1b:15:5e:dc:93:d9:36:3c:f3:31:13:50:0d:36:0b:27:e4:7b:
9b:64:66:c2:bc:98:4d:f5:7e:ce:19:be:97:2c:50:45:db:91:
05:92:f0:76:15:17:bf:fa:36:9b:b3:cf:8f:86:a2:8d:02:09:
74:12:40:97:c8:44:44:51:e2:fb:91:b1:c9:fb:ed:57:29:1c:
ed:8c:64:dd:05:88:07:6a:54:1d:0a:b2:50:85:30:ce:8c:56:
6f:29:44:85:5d:a2:3a:77:83:e8:9f:f6:2f:f1:cf:8f:73:88:
8c:06:2b:a9:64:c0:62:2e:6a:05:df:1b:f8:80:f7:6a:8a:8e:
58:b3:69:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:28:58 2025 by rpki-client