Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/6uxNuZF_Kn5GRcwS7ZWuHhJIRsc.roa
File: 6uxNuZF_Kn5GRcwS7ZWuHhJIRsc.roa (raw, json)
Hash identifier: 3YX10sPRyNLMQPbEY1ExHOi6kiq1GuL0mP8un5F+7c4=
Subject key identifier: EA:EC:4D:B9:91:7F:2A:7E:46:45:CC:12:ED:95:AE:1E:12:48:46:C7
Certificate issuer: /CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Certificate serial: 0191B75A6E53F6A3F6E51004D82F57E9EAA2
Authority key identifier: 34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/6uxNuZF_Kn5GRcwS7ZWuHhJIRsc.roa
Signing time: Tue 03 Sep 2024 10:07:22 +0000
ROA not before: Tue 03 Sep 2024 10:07:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216188
IP address blocks: 45.10.24.0/24 maxlen: 24
45.133.9.0/24 maxlen: 24
88.218.227.0/24 maxlen: 24
91.210.224.0/24 maxlen: 24
152.89.239.0/24 maxlen: 24
185.245.96.0/24 maxlen: 24
185.248.140.0/24 maxlen: 24
193.135.10.0/24 maxlen: 24
2a13:fd40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b7:5a:6e:53:f6:a3:f6:e5:10:04:d8:2f:57:e9:ea:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Validity
Not Before: Sep 3 10:07:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaec4db9917f2a7e4645cc12ed95ae1e124846c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:93:d5:09:08:31:5a:60:be:e4:10:10:97:
bf:69:d8:b3:d8:c2:07:0c:4c:fe:74:82:9b:55:ce:
1e:df:bf:e7:6f:85:e4:72:a3:7c:cc:e4:7c:e5:99:
69:02:e7:a5:b2:cf:da:c2:d3:72:f9:b9:77:1a:be:
39:31:a5:5c:fc:1a:ca:43:ea:95:25:06:c0:b7:99:
6e:25:b0:ae:0a:48:d0:fa:71:9d:37:d5:6e:40:3c:
08:e3:2c:a5:5a:95:0b:77:26:54:74:00:34:87:21:
5a:59:bc:8c:97:b9:6c:1d:94:e8:82:ce:41:b3:cd:
8b:7c:df:d0:5d:c1:d7:4b:70:1e:65:2e:6f:6c:3f:
39:91:be:66:ba:1c:d8:31:6b:5a:7f:ab:03:ce:3b:
69:d4:8d:97:c5:f4:5e:0a:ca:d1:57:cb:6e:3a:16:
09:04:22:d3:10:dd:49:30:fb:3e:1e:fb:fa:1f:23:
eb:29:85:23:56:cc:b3:68:85:3a:ef:dd:e6:26:87:
aa:68:d3:6c:1e:69:1b:5c:76:92:46:28:40:9c:a5:
d7:e6:75:40:ee:94:7b:74:99:bf:77:20:22:19:56:
12:55:c2:b4:10:64:3f:a6:69:07:1e:f9:b2:ee:74:
14:86:12:54:40:76:72:8f:04:c0:ab:fd:d6:86:c0:
fb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EC:4D:B9:91:7F:2A:7E:46:45:CC:12:ED:95:AE:1E:12:48:46:C7
X509v3 Authority Key Identifier:
keyid:34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/6uxNuZF_Kn5GRcwS7ZWuHhJIRsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.24.0/24
45.133.9.0/24
88.218.227.0/24
91.210.224.0/24
152.89.239.0/24
185.245.96.0/24
185.248.140.0/24
193.135.10.0/24
IPv6:
2a13:fd40::/29
Signature Algorithm: sha256WithRSAEncryption
6a:19:de:39:fb:cf:13:62:54:67:d2:89:3f:50:01:77:c1:aa:
a7:64:63:bf:60:58:7c:19:e3:ae:61:8a:3b:8c:c6:6b:ee:a6:
61:91:e7:ba:30:07:57:4d:49:7f:ed:41:2c:87:09:bc:10:8f:
c5:3d:a7:02:39:1a:9f:5c:af:dc:1f:1a:01:0f:a3:ff:71:1e:
dd:65:a5:48:28:06:22:c0:9b:ef:d7:a9:43:35:b4:cb:6d:54:
29:eb:88:90:ce:c6:72:a1:8d:7d:73:4b:32:49:26:ec:1f:ac:
68:a4:95:4c:3a:63:7a:d8:98:35:a9:7e:92:61:a2:f9:a4:fb:
85:49:47:6f:ce:60:7c:62:2a:21:ec:a8:5b:79:65:27:4c:d5:
52:ea:ea:3d:02:76:f7:70:ed:03:ee:ab:ac:a9:05:82:1a:87:
92:17:4f:d3:32:d4:97:64:e3:68:9e:09:14:c1:c1:7d:c1:54:
79:17:03:fc:03:05:6e:d5:ec:55:6e:77:a4:94:ce:d9:a6:38:
89:25:fc:bf:5f:4b:a7:cb:57:99:f3:df:b3:04:7d:f4:94:28:
af:b5:7b:8d:d0:b0:51:fa:b8:7d:65:66:73:3c:e0:6c:43:12:
b1:7d:7d:d5:8c:dd:40:c6:6c:71:f0:80:53:a2:9a:4b:82:76:
04:b9:74:5d
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAZG3Wm5T9qP25RAE2C9X6eqiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YjBjNWE0MDNlMmRhZDNjNDdiNzkxZmRhMjA0MmNmNzE1
MDA5Y2YwHhcNMjQwOTAzMTAwNzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWVjNGRiOTkxN2YyYTdlNDY0NWNjMTJlZDk1YWUxZTEyNDg0NmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/6T1QkIMVpgvuQQEJe/adiz2MIH
DEz+dIKbVc4e37/nb4XkcqN8zOR85ZlpAuelss/awtNy+bl3Gr45MaVc/BrKQ+qV
JQbAt5luJbCuCkjQ+nGdN9VuQDwI4yylWpULdyZUdAA0hyFaWbyMl7lsHZTogs5B
s82LfN/QXcHXS3AeZS5vbD85kb5muhzYMWtaf6sDzjtp1I2XxfReCsrRV8tuOhYJ
BCLTEN1JMPs+Hvv6HyPrKYUjVsyzaIU6793mJoeqaNNsHmkbXHaSRihAnKXX5nVA
7pR7dJm/dyAiGVYSVcK0EGQ/pmkHHvmy7nQUhhJUQHZyjwTAq/3WhsD7XwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFOrsTbmRfyp+RkXMEu2Vrh4SSEbHMB8GA1UdIwQY
MBaAFDSwxaQD4trTxHt5H9ogQs9xUAnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkxERnBBUGkydFBFZTNrZjJpQkN6M0ZRQ2M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xNmQ1Y2UtMTg0YS00MzY2LThkNzUt
YWFhYjI1ODk0ZDVlLzEvNnV4TnVaRl9LbjVHUmN3UzdaV3VIaEpJUnNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xNmQ1Y2UtMTg0YS00MzY2LThkNzUtYWFhYjI1ODk0ZDVl
LzEvTkxERnBBUGkydFBFZTNrZjJpQkN6M0ZRQ2M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQALQoYAwQA
LYUJAwQAWNrjAwQAW9LgAwQAmFnvAwQAufVgAwQAufiMAwQAwYcKMA0EAgACMAcD
BQMqE/1AMA0GCSqGSIb3DQEBCwUAA4IBAQBqGd45+88TYlRn0ok/UAF3waqnZGO/
YFh8GeOuYYo7jMZr7qZhkee6MAdXTUl/7UEshwm8EI/FPacCORqfXK/cHxoBD6P/
cR7dZaVIKAYiwJvv16lDNbTLbVQp64iQzsZyoY19c0sySSbsH6xopJVMOmN62Jg1
qX6SYaL5pPuFSUdvzmB8Yioh7KhbeWUnTNVS6uo9Anb3cO0D7qusqQWCGoeSF0/T
MtSXZONongkUwcF9wVR5FwP8AwVu1exVbneklM7ZpjiJJfy/X0uny1eZ89+zBH30
lCivtXuN0LBR+rh9ZWZzPOBsQxKxfX3VjN1Axmxx8IBToppLgnYEuXRd
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:02:45 2025 by rpki-client