Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/npmoByQ9-iadaUKXVikvscyn4U0.roa
File: npmoByQ9-iadaUKXVikvscyn4U0.roa (raw, json)
Hash identifier: ApwPVyBFgN+4Jyf1yiVdPiP9PS0u5Z8bibqoXajOB90=
Subject key identifier: 9E:99:A8:07:24:3D:FA:26:9D:69:42:97:56:29:2F:B1:CC:A7:E1:4D
Certificate issuer: /CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Certificate serial: 0194FF241658B8D31F7C98D640846D72C30C
Authority key identifier: F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/npmoByQ9-iadaUKXVikvscyn4U0.roa
Signing time: Thu 13 Feb 2025 11:49:02 +0000
ROA not before: Thu 13 Feb 2025 11:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5539
IP address blocks: 82.118.32.0/19 maxlen: 19
185.54.120.0/22 maxlen: 22
185.54.188.0/22 maxlen: 22
193.149.32.0/19 maxlen: 19
194.97.64.0/19 maxlen: 19
194.97.128.0/19 maxlen: 19
195.24.96.0/19 maxlen: 19
195.30.0.0/16 maxlen: 16
195.30.50.0/24 maxlen: 24
195.30.64.0/24 maxlen: 24
195.30.121.0/24 maxlen: 24
2001:608::/32 maxlen: 32
2001:608:a04::/48 maxlen: 48
2001:67c:158c::/48 maxlen: 48
2001:4150::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 20 Feb 2025 09:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ff:24:16:58:b8:d3:1f:7c:98:d6:40:84:6d:72:c3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Validity
Not Before: Feb 13 11:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e99a807243dfa269d69429756292fb1cca7e14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:6a:8b:23:34:2a:dc:45:20:e8:39:9a:65:
34:1a:b1:c8:76:7d:45:44:cf:fd:75:a8:35:19:4c:
d8:af:d4:31:f8:e4:3e:a9:df:04:04:6b:8b:33:ff:
9f:9e:0b:8d:6e:52:df:f2:26:be:89:59:69:9e:05:
0e:10:03:00:6e:32:bd:85:d0:d3:d1:9e:43:e1:40:
4b:48:b5:58:d9:50:11:c0:6f:46:9d:89:84:f7:c9:
c2:a0:1d:89:87:eb:c5:bb:2b:f4:a3:f1:de:74:91:
0c:84:22:57:d1:2b:2a:c5:5d:66:26:da:6b:ee:6a:
3b:0f:7a:f4:86:4b:ad:3f:91:ed:6b:7c:3a:93:77:
cb:1c:07:c5:d9:fc:27:46:19:4a:17:d3:3a:ed:13:
cb:d1:cf:b2:71:65:0b:05:de:54:57:d8:32:37:9a:
9d:eb:81:59:58:62:f1:6f:ec:6e:db:f3:82:3f:48:
3a:04:ab:28:01:e1:21:94:c8:2b:20:5c:67:9d:cc:
de:34:a7:a7:64:93:23:74:60:f2:94:d5:15:70:fa:
a5:86:df:4e:2a:d6:e6:03:67:68:e3:10:74:da:c0:
ce:55:e5:84:d9:36:f1:bc:99:d7:69:f1:04:20:41:
c7:d0:4d:3b:72:0a:09:1b:bc:ef:44:43:21:9a:e3:
08:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:99:A8:07:24:3D:FA:26:9D:69:42:97:56:29:2F:B1:CC:A7:E1:4D
X509v3 Authority Key Identifier:
keyid:F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/npmoByQ9-iadaUKXVikvscyn4U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.32.0/19
185.54.120.0/22
185.54.188.0/22
193.149.32.0/19
194.97.64.0/19
194.97.128.0/19
195.24.96.0/19
195.30.0.0/16
IPv6:
2001:608::/32
2001:67c:158c::/48
2001:4150::/32
Signature Algorithm: sha256WithRSAEncryption
c8:6c:75:8a:f4:bd:2f:d4:b7:92:dd:64:e5:6a:85:5e:51:86:
82:9c:03:ee:de:6d:ec:5b:5d:77:13:65:9e:3b:22:e4:02:ef:
04:0a:9c:55:f3:b7:81:96:69:f4:8c:49:a0:dc:94:86:5c:d5:
0e:7d:83:87:41:7f:7d:42:5d:c2:8d:e3:bf:a5:fc:8e:7c:56:
05:a1:e6:71:e6:e4:c0:35:25:5c:01:1c:5c:34:80:59:51:94:
05:d2:25:bd:7b:49:c0:1f:07:97:28:f0:5e:08:82:5a:83:50:
ec:86:b4:85:97:1f:6c:86:ba:83:76:0a:a9:a3:1f:22:52:77:
d1:74:9c:e9:62:74:13:f9:c5:bf:5b:81:18:93:a8:03:ff:e4:
6a:97:fd:88:c9:c8:e8:20:ab:07:97:03:e2:30:96:5e:bb:c0:
0b:24:94:82:23:d4:e9:b9:d1:c1:1a:88:22:d8:7d:61:8a:93:
20:f3:e4:cc:1a:8b:a2:e8:37:af:c3:52:35:3f:c2:c7:31:3b:
37:5a:2a:aa:30:1a:b0:fe:51:e4:4c:ee:9b:f2:92:32:e8:8f:
19:48:ab:1d:e1:a5:3f:e2:4e:27:1c:b2:d3:d5:f4:dc:e2:fa:
3c:13:17:6e:0b:02:10:1b:cb:d6:76:dd:fe:0e:50:26:44:19:
b4:4e:0b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:43:15 2025 by rpki-client