Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/nubSprvQK9ak8PO9Q85e8igMubU.roa
File: nubSprvQK9ak8PO9Q85e8igMubU.roa (raw, json)
Hash identifier: ubG8y2B3X+InSrb4A1/MG4EcyNWbCjuAy31rLZdKkiQ=
Subject key identifier: 9E:E6:D2:A6:BB:D0:2B:D6:A4:F0:F3:BD:43:CE:5E:F2:28:0C:B9:B5
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 0196F3562FDA48311CD0A98BFA4570FB182D
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/nubSprvQK9ak8PO9Q85e8igMubU.roa
Signing time: Wed 21 May 2025 14:53:53 +0000
ROA not before: Wed 21 May 2025 14:53:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136787
IP address blocks: 85.254.47.0/24 maxlen: 24
85.254.62.0/24 maxlen: 24
85.254.104.0/24 maxlen: 24
85.254.105.0/24 maxlen: 24
85.254.106.0/24 maxlen: 24
85.254.107.0/24 maxlen: 24
85.254.108.0/24 maxlen: 24
85.254.109.0/24 maxlen: 24
85.254.110.0/24 maxlen: 24
85.254.111.0/24 maxlen: 24
85.254.116.0/24 maxlen: 24
85.254.122.0/24 maxlen: 24
91.190.63.0/24 maxlen: 24
159.148.125.0/24 maxlen: 24
159.148.138.0/24 maxlen: 24
159.148.150.0/24 maxlen: 24
159.148.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 11:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f3:56:2f:da:48:31:1c:d0:a9:8b:fa:45:70:fb:18:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: May 21 14:53:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ee6d2a6bbd02bd6a4f0f3bd43ce5ef2280cb9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:87:1f:8c:03:39:15:8a:1d:77:11:3a:48:
11:96:b9:fb:a7:8f:70:5c:8e:4f:e0:4b:38:dc:bd:
d6:60:2a:38:b4:ac:56:ff:2e:75:6c:5a:9b:0d:06:
fb:9a:26:5a:cb:e8:b2:eb:5c:0a:51:fc:01:2f:ca:
44:5d:ec:36:a2:27:f0:11:37:37:ae:a4:90:c5:96:
22:dd:a7:5e:4d:4b:a8:2a:3c:64:d8:15:18:74:7a:
0c:ca:a4:ec:c7:38:59:be:4a:b5:60:1b:9c:30:c3:
0d:d3:77:51:a8:67:3c:a1:e5:34:4f:91:e4:1c:55:
43:45:0b:fa:ea:e9:8b:d4:5b:62:a8:25:07:90:aa:
d8:5a:3f:2c:39:ec:3c:5d:9c:9b:08:49:17:59:06:
44:32:4f:33:21:4c:0d:42:f6:60:4d:58:04:b9:a2:
6b:29:94:e0:5d:c8:93:0d:52:39:f0:e4:5d:85:f8:
c7:39:cd:3d:71:a4:6e:21:f6:a2:09:c7:cd:d2:ca:
21:cb:2f:35:57:15:3a:b3:ff:b5:d0:d7:63:2b:68:
a3:ce:5e:9b:6a:c9:2e:9f:42:86:c0:d4:ff:7e:3f:
3e:f8:68:af:b0:2e:5c:ce:ea:f0:75:03:52:be:18:
21:a0:0a:64:45:8e:ea:49:96:92:98:a3:d2:65:e3:
2c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E6:D2:A6:BB:D0:2B:D6:A4:F0:F3:BD:43:CE:5E:F2:28:0C:B9:B5
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/nubSprvQK9ak8PO9Q85e8igMubU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.47.0/24
85.254.62.0/24
85.254.104.0/21
85.254.116.0/24
85.254.122.0/24
91.190.63.0/24
159.148.125.0/24
159.148.138.0/24
159.148.150.0/24
159.148.222.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:e7:2e:c2:b5:12:68:bd:c5:12:f4:1d:01:3f:78:bb:14:49:
50:a0:26:b0:62:8e:cb:89:ea:c5:3f:54:47:b6:87:42:71:db:
1d:2a:14:c7:59:0c:d7:7c:97:21:38:4f:94:aa:ef:7c:db:a9:
a6:13:64:17:4e:41:59:a7:1f:55:e4:bb:d2:05:1d:b6:e4:a8:
d6:f5:71:d3:23:68:10:64:22:1a:b3:73:79:d4:6b:41:17:ef:
c8:5a:63:27:d4:ce:10:4a:8f:59:9b:0b:70:31:03:de:74:bf:
98:0a:e5:e4:bb:e2:69:85:9a:72:05:55:cd:3d:e3:1b:0a:9e:
68:a5:ee:1c:8f:ef:18:dd:b0:08:7a:ce:06:50:e1:28:27:17:
de:29:f1:7b:fd:9b:4e:dd:e7:dc:8b:8f:82:32:d9:06:a0:45:
8f:1d:80:ba:79:5c:16:07:3e:51:76:33:a5:0b:13:d0:b0:9e:
2f:d9:e7:c1:7d:b6:1b:c9:01:e9:00:11:1c:21:2e:6c:57:04:
5e:f9:c2:b3:64:b5:23:51:e1:28:d2:b6:7c:e7:71:fb:1b:08:
98:50:ed:d0:8e:85:8e:0d:9a:9d:55:67:37:f1:c5:50:01:aa:
68:3b:08:23:14:1b:59:85:90:c8:09:98:32:cc:51:d4:36:d0:
e1:b4:77:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:51:54 2025 by rpki-client