Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/NFXwcX5zpNFlqkRBvVT-WXGeF-0.roa
File: NFXwcX5zpNFlqkRBvVT-WXGeF-0.roa (raw, json)
Hash identifier: n1gCRXcTM2Y9hy3KavsWj9z00qM0ghQFjvDg75msTtM=
Subject key identifier: 34:55:F0:71:7E:73:A4:D1:65:AA:44:41:BD:54:FE:59:71:9E:17:ED
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 0193736B44D8258BAF5E7B1373C472472968
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/NFXwcX5zpNFlqkRBvVT-WXGeF-0.roa
Signing time: Thu 28 Nov 2024 15:37:10 +0000
ROA not before: Thu 28 Nov 2024 15:37:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202759
IP address blocks: 95.156.206.0/24 maxlen: 24
185.193.49.0/24 maxlen: 24
188.214.32.0/24 maxlen: 24
188.214.36.0/24 maxlen: 24
188.214.37.0/24 maxlen: 24
2a03:f80:372::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 10 Dec 2024 11:13:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:6b:44:d8:25:8b:af:5e:7b:13:73:c4:72:47:29:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Nov 28 15:37:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3455f0717e73a4d165aa4441bd54fe59719e17ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ce:5b:66:3c:d9:33:a1:99:4f:aa:f2:50:9f:
e4:d4:5f:f0:c9:17:3e:bf:9f:9d:23:b5:0d:90:5a:
f0:e6:cb:d9:c2:38:09:cb:24:ef:a3:ea:35:4b:60:
b5:b1:5f:9c:ae:ef:09:f2:77:3d:31:01:14:ac:90:
f6:45:47:d8:e8:b5:fe:50:56:76:c4:92:cc:02:34:
a7:56:4f:20:37:a3:41:20:72:cd:9f:7c:d1:f7:99:
77:1d:0d:46:d5:23:40:2d:79:52:7f:42:e4:27:f7:
a1:2b:44:a0:70:05:c2:e6:50:cb:1f:78:44:5a:98:
ea:19:88:5c:ef:d7:1c:6f:66:27:1e:f7:01:30:b3:
3e:1f:4a:c8:e8:fa:d6:66:84:e5:a1:0b:f8:d4:c3:
03:35:fb:43:c1:87:62:a2:e8:95:69:d7:18:f2:eb:
97:d0:e2:ba:33:77:7b:df:24:5d:a9:90:d3:8e:a3:
b2:15:91:b9:e4:78:77:f7:bb:e0:e8:ed:56:5f:f5:
6c:bc:ed:dc:4b:18:e6:15:3a:a0:1a:5f:af:09:3c:
8c:2c:33:8c:05:d4:4c:b6:5b:6d:43:fa:65:98:22:
6e:00:e7:68:e2:66:a3:4d:56:15:98:06:c8:7c:7c:
85:b9:a5:6a:09:7f:94:ba:bf:7e:c5:da:0c:cd:f3:
fd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:55:F0:71:7E:73:A4:D1:65:AA:44:41:BD:54:FE:59:71:9E:17:ED
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/NFXwcX5zpNFlqkRBvVT-WXGeF-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.156.206.0/24
185.193.49.0/24
188.214.32.0/24
188.214.36.0/23
IPv6:
2a03:f80:372::/48
Signature Algorithm: sha256WithRSAEncryption
76:e9:56:bb:b6:e2:38:3b:1d:ed:b9:7d:f0:66:0d:87:7e:18:
57:44:35:ff:ce:98:90:f9:25:37:91:49:d7:8e:ef:ba:4a:63:
7c:e1:0f:c3:68:37:e2:f6:0f:71:ac:ee:9a:6f:a3:38:42:cc:
02:7d:f7:38:ef:4b:54:fc:ce:c0:05:90:66:87:ee:b6:fb:48:
9f:b0:84:79:52:d3:c8:32:9d:dd:68:41:e1:8e:e5:49:1e:d7:
e2:3b:1b:e2:3b:08:dd:b1:74:2d:83:70:79:4e:3a:ab:82:f4:
de:30:ad:11:a6:30:a8:a7:b1:fd:0c:7b:dd:82:4e:1c:25:0a:
78:d4:b9:aa:da:91:73:e5:9b:a7:61:19:b9:c2:0d:4e:dc:81:
32:f7:99:a6:66:3f:be:01:e9:b6:a8:12:f5:29:ed:26:e3:04:
29:3a:48:60:5f:86:0a:2e:5c:94:1a:ae:b5:e6:20:1a:16:b2:
d4:e4:06:22:cb:1d:ce:77:84:a4:84:17:89:14:f0:31:cc:71:
b7:28:50:5a:22:09:a8:24:0b:8b:4f:8b:6d:69:8c:a4:fb:53:
d1:b2:0b:29:23:32:68:23:a2:45:67:b0:2d:7d:c4:76:be:a8:
7c:65:0d:a4:e9:94:dc:2f:7d:88:c2:5e:ad:4a:b1:f8:ee:17:
9e:00:00:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:39:17 2025 by rpki-client