Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/NlpD70eODSokxszWRYMWVaaZVOA.roa
File: NlpD70eODSokxszWRYMWVaaZVOA.roa (raw, json)
Hash identifier: XlF6I5yjqDwhY3h2BOzOA1tlHCu2HxVixP2Z7MEdihA=
Subject key identifier: 36:5A:43:EF:47:8E:0D:2A:24:C6:CC:D6:45:83:16:55:A6:99:54:E0
Certificate issuer: /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial: 01932A369443F90755AF19B3FD7D0BA37D3C
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/NlpD70eODSokxszWRYMWVaaZVOA.roa
Signing time: Thu 14 Nov 2024 10:27:20 +0000
ROA not before: Thu 14 Nov 2024 10:27:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 185.103.4.0/22 maxlen: 22
185.103.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2a:36:94:43:f9:07:55:af:19:b3:fd:7d:0b:a3:7d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Validity
Not Before: Nov 14 10:27:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=365a43ef478e0d2a24c6ccd645831655a69954e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6a:a5:d3:ac:5f:32:7c:99:19:ee:98:54:33:
48:39:74:ff:2c:18:a3:4c:53:5e:36:8d:12:c9:55:
e2:b4:63:63:53:e7:1f:2f:7f:82:51:fd:13:c2:d0:
f3:f2:8d:7a:45:e2:cd:7d:80:8d:c2:ca:fa:c4:34:
02:48:d0:01:54:97:9f:1a:b6:d3:e4:c2:61:af:6b:
c9:8f:d8:c2:28:cd:dd:02:4e:52:2a:9d:a1:4a:6c:
3e:42:61:21:c1:81:86:bb:55:78:97:0b:00:fc:23:
49:46:3e:e1:6c:be:eb:39:d6:29:a5:76:71:87:e3:
0d:06:0e:8f:c0:82:78:de:1a:1a:51:79:2d:76:0f:
40:c5:fd:e9:fa:53:a5:0d:a8:4c:fa:4c:e5:29:b6:
41:ad:51:17:49:c7:a7:9b:ff:c6:91:7b:55:be:44:
d2:0a:91:5d:12:fe:47:5a:59:0e:1c:4e:a8:bf:9e:
bc:74:bc:b6:14:5b:60:21:87:ef:9d:cb:11:a5:95:
5e:4d:b0:45:4d:10:de:96:da:51:71:46:42:73:b7:
9d:f9:8c:06:4e:ba:2c:aa:9a:40:8e:82:3a:53:35:
06:f5:d5:1f:a3:db:6a:c1:55:04:7d:e9:b1:4c:43:
de:df:73:86:91:1b:cd:7d:e3:bf:00:96:4a:5f:4d:
f4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5A:43:EF:47:8E:0D:2A:24:C6:CC:D6:45:83:16:55:A6:99:54:E0
X509v3 Authority Key Identifier:
keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/NlpD70eODSokxszWRYMWVaaZVOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.4.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:90:d9:37:78:95:24:80:87:1f:9e:a2:55:a3:8d:56:5c:1e:
3b:6f:b4:c0:46:b1:24:c8:e0:b4:38:b9:48:b2:48:95:51:6f:
86:f7:59:9c:92:06:7a:cc:78:ef:c4:b7:9b:eb:0b:e5:88:1b:
14:a1:b9:ec:54:db:4b:43:e9:47:1a:01:90:93:89:f5:02:f2:
01:8a:e9:9b:6b:34:1d:61:ed:e4:fe:f2:09:a1:12:84:49:26:
42:a1:0d:6b:65:54:25:eb:7c:bd:b2:77:84:54:c1:68:4d:2a:
57:6f:64:24:60:5f:b1:32:9b:91:46:cc:5c:8f:fe:8e:bd:4a:
40:28:64:ba:5f:4c:27:07:c2:8e:38:50:38:54:c6:b1:2c:91:
4d:5b:ae:b0:f1:90:65:f6:65:9d:db:b7:8c:66:cf:38:b0:db:
b7:4c:7d:8f:cd:76:80:d2:2b:38:12:64:09:c4:c5:35:49:c0:
60:81:2f:0c:a4:83:fc:3f:62:4f:59:04:1f:10:3e:a0:fa:92:
56:73:80:2f:a2:20:cc:08:4d:5f:3b:82:99:91:91:6b:46:09:
66:c3:62:59:91:3d:6e:f6:e7:dc:3f:c0:65:17:15:5a:a6:4b:
f7:ee:01:c3:96:35:25:7a:00:c8:d1:14:f1:58:ed:30:fe:2e:
64:0a:40:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:07 2025 by rpki-client