Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Nj0CoMERIAMoFsPwu2edrptdYm8.roa
File: Nj0CoMERIAMoFsPwu2edrptdYm8.roa (raw, json)
Hash identifier: WuiQMjqUcJYffzh+1oK/msdq7Yt29M+KtmgabwBsCbk=
Subject key identifier: 36:3D:02:A0:C1:11:20:03:28:16:C3:F0:BB:67:9D:AE:9B:5D:62:6F
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018D1B89CB7958C3DAD908CD9E51CE376C69
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Nj0CoMERIAMoFsPwu2edrptdYm8.roa
Signing time: Thu 18 Jan 2024 07:47:11 +0000
ROA not before: Thu 18 Jan 2024 07:47:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 37.49.151.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
109.203.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 18:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1b:89:cb:79:58:c3:da:d9:08:cd:9e:51:ce:37:6c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 18 07:47:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=363d02a0c11120032816c3f0bb679dae9b5d626f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:9b:7a:d1:91:63:61:78:f0:d3:ee:3c:49:
6b:f6:80:4d:40:f2:e2:00:cc:6d:9d:ee:29:e9:a3:
ef:09:2f:c6:c0:42:14:38:cf:c1:4d:fd:ae:3b:65:
dd:b8:4b:24:81:77:55:83:03:f7:19:4b:3f:e5:0c:
da:51:f8:32:97:58:c8:e6:fc:cb:ce:93:03:04:c9:
42:73:36:f4:a6:65:f4:e1:79:f3:92:ca:17:9b:87:
f9:9b:c7:58:67:b8:ba:3a:97:be:7b:63:00:2d:40:
9b:30:c9:31:a4:d1:63:dc:59:d2:9a:a1:b7:b1:b8:
9d:a7:aa:da:d2:23:52:ed:7b:35:36:83:dc:95:76:
25:2b:9b:ff:ae:aa:3c:20:64:92:32:ea:7a:ba:7b:
71:79:f8:94:55:ca:37:3a:01:2a:e7:39:a1:95:e1:
90:86:2a:a1:b2:23:a0:95:da:60:16:83:4d:90:70:
7a:b4:47:1a:13:13:ad:0b:6a:0f:77:5d:57:2b:5d:
7f:31:0a:30:52:a5:9f:00:b0:86:5e:ec:c0:7e:dd:
7c:2c:d8:78:8a:bd:2e:3e:55:7c:00:2e:65:42:0d:
97:23:b3:00:06:65:dc:a9:18:5c:e7:86:fd:64:d5:
87:a9:5b:af:84:a4:5e:48:dc:73:03:b2:18:c5:de:
91:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3D:02:A0:C1:11:20:03:28:16:C3:F0:BB:67:9D:AE:9B:5D:62:6F
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Nj0CoMERIAMoFsPwu2edrptdYm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.151.0/24
94.74.173.0/24
109.203.166.0/24
Signature Algorithm: sha256WithRSAEncryption
01:00:fd:8f:36:85:de:a3:9a:ca:c0:dc:94:9f:00:d9:e7:6a:
9d:82:58:d8:46:56:59:15:ee:af:bd:6e:2f:bb:09:6b:ca:43:
e4:01:01:47:ec:2c:24:53:5e:b5:91:66:78:e9:49:2a:12:de:
cc:f4:a6:9d:06:c3:b9:1b:4f:c1:b6:3f:ac:a0:c0:33:f4:10:
8a:71:8d:7b:6a:44:36:51:e0:2e:6a:89:1f:12:dd:0d:63:23:
ec:77:24:33:be:ce:88:54:3c:40:6a:e7:14:3f:bf:97:bc:fb:
ed:ef:8d:b5:98:35:f4:57:7e:92:33:db:83:fc:33:04:a0:f4:
71:29:04:75:f4:5f:12:8e:bd:75:ed:0d:b2:e0:a2:15:57:c6:
68:7f:2f:4a:f6:17:92:cc:32:96:26:aa:66:d6:3d:2c:27:14:
e6:8e:4e:fd:db:42:c9:15:6c:45:02:64:3e:4a:e4:0d:3b:4b:
26:b3:14:43:e1:b2:e9:60:c8:51:54:dd:fb:77:73:15:f7:b3:
5f:4b:01:2f:22:d0:70:11:d3:1c:96:31:7a:b6:f4:ff:84:ce:
d9:af:eb:39:2f:5f:17:7f:1a:85:1c:73:ce:b8:45:fe:50:26:
bb:85:48:4e:cc:1d:ac:80:b0:4e:cc:0c:8e:92:73:98:8a:5f:
1e:d2:2d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:54 2025 by rpki-client