Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/N0WkcDulCdk35g3iLpsvOrAhg7g.roa
File: N0WkcDulCdk35g3iLpsvOrAhg7g.roa (raw, json)
Hash identifier: GFQvOEwWxMPN3uD22b27HJN7JhABR7j/uF5RNNFy+pY=
Subject key identifier: 37:45:A4:70:3B:A5:09:D9:37:E6:0D:E2:2E:9B:2F:3A:B0:21:83:B8
Certificate issuer: /CN=d44de659759b0274124a7b481d0976840b7ade06
Certificate serial: 018CC9BC4FBCCB1B5037C1AA88627E678F3B
Authority key identifier: D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/N0WkcDulCdk35g3iLpsvOrAhg7g.roa
Signing time: Tue 02 Jan 2024 10:33:30 +0000
ROA not before: Tue 02 Jan 2024 10:33:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51793
IP address blocks: 37.143.160.0/23 maxlen: 23
2a03:8f87:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:4f:bc:cb:1b:50:37:c1:aa:88:62:7e:67:8f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44de659759b0274124a7b481d0976840b7ade06
Validity
Not Before: Jan 2 10:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3745a4703ba509d937e60de22e9b2f3ab02183b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7d:78:46:56:1a:85:3e:23:1d:27:71:d1:e1:
9e:23:06:e6:2c:a0:4f:91:78:d9:37:9d:e8:c4:4d:
a8:ba:2c:4a:c8:e0:c3:0c:0b:65:e9:24:f1:d7:0b:
05:08:21:bf:5e:06:e1:50:8d:03:a0:95:7b:e9:28:
44:22:7a:5d:91:4c:02:78:b3:1b:79:18:bb:0a:5a:
e1:99:9c:01:4d:83:de:7f:94:ea:71:63:b4:fa:6f:
c9:89:62:30:29:f2:04:f7:64:29:22:c8:2f:fd:95:
44:06:0e:15:fb:08:2e:28:a7:e7:e2:50:7f:f7:fc:
96:7d:66:e2:9a:f2:54:14:0d:9d:64:7b:b9:64:9f:
0e:bd:f9:2b:c9:95:85:74:8b:f8:a2:09:78:6c:61:
ee:a6:2f:ee:57:0b:b6:31:cf:9b:e3:84:b7:12:cc:
08:0b:d6:c5:21:27:33:aa:5e:09:9f:c2:85:1b:b9:
89:65:cf:e0:7f:c9:72:c8:5a:ad:ec:29:3e:73:b8:
38:c8:2f:19:35:8f:95:20:c3:aa:ce:e7:11:d4:cc:
89:fc:93:f7:98:c9:40:ee:21:de:ed:d5:00:3e:09:
8b:44:c9:9b:c4:6c:fe:80:8c:de:a0:fc:fc:bd:8b:
67:e4:da:4f:08:bc:82:93:0d:3c:af:a0:88:ff:3a:
a5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:45:A4:70:3B:A5:09:D9:37:E6:0D:E2:2E:9B:2F:3A:B0:21:83:B8
X509v3 Authority Key Identifier:
keyid:D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/N0WkcDulCdk35g3iLpsvOrAhg7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.160.0/23
IPv6:
2a03:8f87:1::/48
Signature Algorithm: sha256WithRSAEncryption
27:13:2e:f8:f9:a6:21:af:cf:e8:cf:47:fe:52:d8:9f:88:95:
c1:94:9b:ce:e6:3b:8a:53:b1:21:09:86:8c:6d:32:a3:c5:c3:
2e:ca:e5:66:67:93:89:d8:ed:7a:35:cd:a3:f9:24:5b:ee:22:
e6:0f:6d:9c:23:6d:b2:b1:e2:d1:ee:f7:9e:d4:ba:3c:41:98:
47:3e:f1:33:bd:79:8b:6e:ca:11:23:30:0d:6b:a2:39:d8:30:
94:94:06:7b:fa:e8:66:c0:ab:78:93:3f:52:ff:f5:b8:42:a3:
d9:79:d6:0c:2c:9c:9a:97:a1:90:af:d2:0b:26:4f:b2:17:cd:
50:0e:6e:89:62:ea:06:6b:e6:99:da:98:e1:4f:e3:1c:ff:14:
64:5b:0d:41:71:37:d2:25:b6:42:31:a0:4b:e4:ce:f8:ca:e7:
1b:4a:47:43:e0:e9:77:ba:a7:ea:c0:03:de:9e:69:b8:0f:fd:
94:82:48:9f:69:86:cb:04:93:6b:98:3b:f4:fa:a1:79:07:30:
cf:4b:80:a0:85:f7:21:ec:1a:05:32:89:4e:2b:59:44:af:54:
eb:8c:54:72:5c:47:6f:25:00:78:e1:ed:cf:b3:3d:32:84:67:
4b:9f:dc:3d:2e:31:aa:33:63:91:7a:f9:05:76:ba:2c:53:79:
04:ee:09:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:04:16 2025 by rpki-client