Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/nrilUDNEo5btSmLo0XSY1lylxF8.roa
File: nrilUDNEo5btSmLo0XSY1lylxF8.roa (raw, json)
Hash identifier: 8ICoDhdhv1FJNwSqLwUUqPexNCdjKJwzXZ1OZ0lhZQM=
Subject key identifier: 9E:B8:A5:50:33:44:A3:96:ED:4A:62:E8:D1:74:98:D6:5C:A5:C4:5F
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0195DC35369609A4C9E737E2A869939899FB
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/nrilUDNEo5btSmLo0XSY1lylxF8.roa
Signing time: Fri 28 Mar 2025 10:03:49 +0000
ROA not before: Fri 28 Mar 2025 10:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Mar 2025 19:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:35:36:96:09:a4:c9:e7:37:e2:a8:69:93:98:99:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Mar 28 10:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9eb8a5503344a396ed4a62e8d17498d65ca5c45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:fe:e1:a4:32:37:91:fb:05:9d:b7:15:0c:
31:48:77:2e:3d:8c:09:85:d5:8c:5b:2d:96:c5:55:
34:ee:04:b1:33:1d:23:09:de:fc:f5:dc:a3:7c:84:
b1:15:f8:48:b5:f7:9f:b1:4d:c9:ac:7a:06:7b:28:
7e:3d:9f:c5:55:5d:07:38:78:7b:5e:9d:ae:9d:51:
00:04:26:e7:37:4b:2a:5e:ec:16:d0:0b:75:52:8c:
ef:c8:04:cc:ab:0c:43:77:0f:0e:08:cd:77:22:46:
0b:33:34:eb:ad:c2:df:d1:c8:9e:ec:d0:96:13:22:
1d:8d:e8:b3:fe:33:47:1f:b2:df:c9:3e:93:a2:35:
6e:3d:db:1a:c4:cc:9c:e4:3f:5a:05:14:4d:5f:93:
b9:8c:0e:5e:f6:0b:66:bb:4c:70:9f:75:53:f5:ac:
f6:59:d9:6b:26:82:8c:7a:94:15:22:e4:37:b0:0c:
81:3c:3d:98:29:df:89:2b:2b:77:68:59:ea:3f:5c:
00:b0:f2:d1:9e:b1:ce:db:75:fe:d2:5d:ee:7b:96:
f1:70:fb:82:90:cf:e3:b4:10:dc:a1:11:22:89:5c:
81:73:b7:28:f6:00:78:f8:1d:2d:cc:74:9f:6c:05:
ec:75:27:23:01:36:09:2c:4a:9d:ce:6f:c6:b9:81:
82:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B8:A5:50:33:44:A3:96:ED:4A:62:E8:D1:74:98:D6:5C:A5:C4:5F
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/nrilUDNEo5btSmLo0XSY1lylxF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
25:2a:29:85:36:fb:7b:bb:46:04:05:c1:7e:56:1f:ff:87:76:
11:03:9f:ef:11:56:76:6a:1c:bc:5b:43:0a:fe:21:9c:69:a7:
24:71:42:72:34:be:3d:2c:86:0e:ef:90:c2:cb:19:18:91:a6:
08:e4:f2:2e:9a:1b:21:84:39:0e:d8:7f:14:5e:1e:1b:57:cf:
d3:b2:a8:8c:9d:d4:25:2c:62:be:9d:a9:10:93:6d:14:49:14:
e7:58:88:26:72:31:97:a1:a1:c8:72:2b:24:74:3f:66:02:85:
c1:b7:a2:14:79:28:77:f8:01:a1:5d:13:79:f1:45:7a:30:04:
77:f5:b1:0c:32:7f:7f:78:8a:1c:f7:93:29:cb:a1:b5:a3:b3:
db:f0:17:52:de:58:aa:b9:88:a9:8a:52:dd:81:27:df:d4:65:
a4:9c:35:00:a6:fc:b8:eb:8f:5d:a6:ce:b7:dd:de:03:c0:4c:
39:38:a5:8c:42:37:c7:44:ac:06:11:43:90:1f:ee:47:d9:88:
15:b3:84:67:63:8b:59:9d:a2:2b:02:df:fa:c7:43:ee:e6:1d:
d1:a9:fe:a0:2c:8e:53:d7:ce:e5:31:6e:66:57:78:2e:06:06:
f8:da:83:7e:df:9a:c6:a3:c3:07:f3:ab:3c:97:df:43:90:4b:
b2:4f:64:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:54:58 2025 by rpki-client