Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/Nfv759E7I6rLulGdEDsmOr-tQRE.roa
File: Nfv759E7I6rLulGdEDsmOr-tQRE.roa (raw, json)
Hash identifier: s1M4OaTM/HbG5Z9iQglRc/OXe4cgQq2caNpsXmveZBA=
Subject key identifier: 35:FB:FB:E7:D1:3B:23:AA:CB:BA:51:9D:10:3B:26:3A:BF:AD:41:11
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 019422FB226DA9E5ECE9BFC08361CF90384E
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/Nfv759E7I6rLulGdEDsmOr-tQRE.roa
Signing time: Wed 01 Jan 2025 17:47:51 +0000
ROA not before: Wed 01 Jan 2025 17:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44780
IP address blocks: 195.149.92.0/23 maxlen: 24
195.158.238.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Mar 2025 07:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:22:6d:a9:e5:ec:e9:bf:c0:83:61:cf:90:38:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Jan 1 17:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35fbfbe7d13b23aacbba519d103b263abfad4111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:f7:91:42:52:bc:53:6e:6e:17:c7:8c:7d:
a9:76:19:35:00:2d:18:51:f4:d9:39:98:0b:03:4d:
40:d9:13:26:b6:5d:af:cb:c2:79:a2:5e:db:f4:70:
bd:18:b7:e5:bf:36:4e:7d:34:8a:84:86:8e:64:cd:
97:c8:d3:c1:56:eb:a6:d8:a4:b6:fd:74:7c:65:6a:
0d:85:97:ce:ef:7b:12:f5:42:e3:66:63:92:33:32:
76:ca:c4:0d:20:5a:3a:59:c8:fe:08:95:d0:dd:88:
c2:71:8e:d8:ae:f8:c2:6f:64:8e:a8:2c:1a:24:f9:
b8:0d:43:51:ca:db:1d:81:41:e1:e6:ef:37:db:1e:
58:c9:d6:a0:50:2c:94:91:60:38:b3:39:c8:76:c6:
af:6d:57:6b:a4:d0:34:f2:04:e9:31:90:aa:25:5c:
9a:ca:dc:24:ff:51:e1:0a:dc:a3:f7:6e:1c:b7:b3:
ce:12:72:7e:0f:7e:32:e5:2d:19:20:4c:85:e0:99:
c1:b0:a6:47:23:57:d1:78:09:42:e0:19:30:b1:97:
5a:34:76:c2:4d:ba:87:22:13:f4:21:1e:6d:58:d2:
91:28:a9:07:26:bc:d3:ca:6b:f9:01:a0:27:b9:de:
1d:86:9e:3c:34:18:60:36:4a:fe:b8:ba:82:1a:9a:
73:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FB:FB:E7:D1:3B:23:AA:CB:BA:51:9D:10:3B:26:3A:BF:AD:41:11
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/Nfv759E7I6rLulGdEDsmOr-tQRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.92.0/23
195.158.238.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:1e:f2:ad:a7:03:ff:a9:aa:b5:d8:26:67:f4:8e:bd:e7:ad:
6d:29:9a:c9:e9:66:06:80:bf:39:97:30:72:43:ec:06:5c:a6:
17:07:5c:da:4b:74:21:10:bd:7d:41:8b:27:49:72:6a:6a:b0:
5a:58:ff:7b:e7:20:1c:67:1e:c5:f7:f1:b7:c6:18:a1:c6:de:
cd:87:2f:ff:f2:04:8d:51:10:12:90:2e:dc:a6:ea:ec:a0:a3:
46:fa:7e:36:8d:15:d7:3d:57:88:70:77:05:5d:ac:a5:81:01:
00:0c:97:2b:a7:e7:53:ac:1e:87:53:dc:79:d6:71:12:e0:a4:
47:84:4d:bc:9d:ae:02:aa:94:a8:eb:d3:b3:62:00:a8:16:d1:
71:34:95:83:92:45:6e:cd:67:79:88:5d:ab:50:e7:d7:a4:58:
41:9e:28:4f:a5:f0:5b:ca:e3:2b:ee:10:ed:58:3c:37:c3:37:
86:4e:7a:5a:9a:1d:db:9f:0c:60:48:34:12:21:36:23:7c:fa:
01:66:76:72:55:80:d4:d1:4b:31:99:f8:db:a6:03:11:45:bc:
8d:82:43:22:e0:41:b5:bf:77:b8:10:61:49:d0:b3:fa:1b:7e:
b0:28:a8:a2:93:c4:50:39:1c:03:ae:83:f2:e6:ef:b3:09:b1:
9d:01:27:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:33:58 2025 by rpki-client