Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/nqUh82Z6HHcIKZHuiIblUCr5iFU.roa
File: nqUh82Z6HHcIKZHuiIblUCr5iFU.roa (raw, json)
Hash identifier: e9ZwDKOtp0lYISwD0r8ZXRZSfRvYwWEY7X7dcSOaw/M=
Subject key identifier: 9E:A5:21:F3:66:7A:1C:77:08:29:91:EE:88:86:E5:50:2A:F9:88:55
Certificate issuer: /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial: 019493AF4C9648DA53456AA1632170DE96B9
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/nqUh82Z6HHcIKZHuiIblUCr5iFU.roa
Signing time: Thu 23 Jan 2025 15:02:06 +0000
ROA not before: Thu 23 Jan 2025 15:02:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 185.234.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 11:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:93:af:4c:96:48:da:53:45:6a:a1:63:21:70:de:96:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Validity
Not Before: Jan 23 15:02:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ea521f3667a1c77082991ee8886e5502af98855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:72:d7:86:30:b3:75:e5:2e:df:8c:af:ec:
85:ce:e2:cd:dd:49:2e:c6:be:a0:a2:e3:3d:bf:4a:
d8:1a:8e:df:e7:44:17:ad:25:9f:96:39:ca:c0:67:
bc:c0:2f:fa:c4:9f:3d:b6:80:cf:0f:06:a4:62:26:
ea:df:51:c5:a3:9a:70:18:51:88:d4:7f:7c:9d:d7:
06:2c:0e:60:35:78:46:18:3e:aa:11:83:9c:9a:e1:
99:f1:61:91:ac:65:0d:cd:06:58:56:6b:7c:8e:81:
ce:11:fa:d1:46:49:62:b0:4a:5d:10:36:d0:13:56:
a8:ef:47:7c:9c:2a:3d:c9:c8:58:cf:5f:81:47:96:
b7:c8:cf:7d:2e:b5:3f:42:8a:0c:92:e5:6f:9e:9d:
07:a9:a4:14:16:6c:16:67:36:e9:cc:bd:b0:61:c6:
b0:55:90:08:61:7b:52:68:63:72:c0:65:6c:5b:37:
30:9e:e4:48:30:a9:12:c6:82:5b:2b:f9:8e:39:d2:
42:27:39:ba:c1:93:91:82:f0:43:40:ce:35:c8:be:
21:ee:a5:c7:e3:24:ae:98:d1:0c:67:f0:42:ca:1e:
3b:bb:c1:96:51:3a:5a:93:ca:e6:40:b4:8a:8e:e8:
13:68:d7:4a:35:35:47:2f:23:2e:7d:d8:bf:f7:63:
10:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A5:21:F3:66:7A:1C:77:08:29:91:EE:88:86:E5:50:2A:F9:88:55
X509v3 Authority Key Identifier:
keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/nqUh82Z6HHcIKZHuiIblUCr5iFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.137.0/24
Signature Algorithm: sha256WithRSAEncryption
01:3d:8a:21:8b:16:d6:6f:fe:2b:a5:7c:17:3e:df:c8:5e:79:
c7:14:eb:04:b3:51:ef:b5:1f:51:e2:40:db:13:86:51:48:cb:
d9:fc:a7:2a:36:e2:80:28:ce:38:47:bf:67:2a:43:4a:c9:ec:
15:a4:c2:e6:11:81:1f:62:d1:cc:40:6f:b0:2f:88:8d:b0:9b:
ca:af:ab:fe:50:dd:38:b3:24:97:69:4c:39:ec:41:df:b2:94:
7e:78:c9:1c:b8:15:33:48:6b:36:a4:06:dd:86:4b:07:e2:60:
04:0a:4e:7a:c0:b6:7b:db:d1:c3:66:6c:10:dd:9c:81:65:34:
e0:2b:0e:47:c5:37:cc:32:60:24:59:9c:90:36:93:db:c3:b7:
ea:40:ad:1b:c8:02:0d:65:d7:0d:19:0e:ba:0f:56:b3:d0:c3:
1e:01:48:c8:ca:8b:94:b3:48:54:16:e3:49:15:54:13:7f:6f:
52:a2:bf:91:0c:71:f0:d2:a1:0b:53:7c:65:69:01:7b:0a:e3:
8f:b1:85:09:b9:4c:90:50:9b:6d:ec:6a:4e:f7:1f:d3:61:89:
4a:11:3a:4a:81:8c:75:97:1c:9f:50:8f:66:3c:03:3a:89:df:
73:50:08:eb:0f:08:3f:c4:db:c4:19:04:46:37:f4:7d:ff:fb:
66:20:f3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:40:53 2025 by rpki-client