Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/ncctB554kVZREAI9T1glMEIDGD0.roa
File: ncctB554kVZREAI9T1glMEIDGD0.roa (raw, json)
Hash identifier: s63Sx3H26BJI1Sy/KqZ+O8K3VoKC4i7cA9Bw5QvydRQ=
Subject key identifier: 9D:C7:2D:07:9E:78:91:56:51:10:02:3D:4F:58:25:30:42:03:18:3D
Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial: 01942521730AC530E635AFE322E470F5C532
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/ncctB554kVZREAI9T1glMEIDGD0.roa
Signing time: Thu 02 Jan 2025 03:48:56 +0000
ROA not before: Thu 02 Jan 2025 03:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50181
IP address blocks: 77.74.204.0/22 maxlen: 22
88.132.224.0/20 maxlen: 20
88.132.240.0/22 maxlen: 22
109.110.128.0/19 maxlen: 19
185.45.196.0/22 maxlen: 22
2a01:7d60::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 06 Jan 2025 13:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:73:0a:c5:30:e6:35:af:e3:22:e4:70:f5:c5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Validity
Not Before: Jan 2 03:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9dc72d079e7891565110023d4f5825304203183d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:d8:bb:aa:b4:f1:91:54:87:1f:96:36:b9:
53:cd:57:32:d7:5c:b6:4d:f7:6a:9e:ba:4f:f9:93:
01:e9:8a:f3:94:7d:4c:4f:44:ef:7f:61:79:42:25:
de:10:52:58:38:53:c2:ae:07:17:8b:a3:7e:2a:4e:
e1:bb:69:f7:d8:71:d2:84:b9:7e:07:9a:91:fe:a9:
97:ef:e5:c6:d3:f9:db:ed:4c:9e:19:99:6e:8a:fb:
94:aa:06:32:44:62:ed:a9:80:53:c5:a8:cb:64:7a:
16:12:f7:85:1b:7a:2d:93:6b:17:03:a4:8a:d0:1a:
29:3e:5e:d8:68:c8:3f:73:e6:20:13:6b:d7:e9:00:
a1:2a:da:2b:39:14:df:e1:1b:45:b5:cf:2b:18:4a:
82:b3:7d:05:0a:62:ac:e8:cc:fd:32:1f:aa:28:ce:
f2:b7:79:d9:50:ff:66:d1:b6:a6:7d:f8:1f:47:3a:
e9:58:b6:26:d1:0f:2f:9c:51:c2:f1:35:aa:4a:c9:
af:a5:8e:ec:53:cd:fb:31:7c:74:28:9f:48:cf:73:
23:cf:76:05:7c:53:91:ec:0a:a4:6b:c5:f4:00:d4:
25:d4:f0:20:4b:3a:ce:f2:7d:2c:a0:d9:4f:de:48:
66:cc:f3:b8:bc:aa:72:be:c3:2c:24:9c:41:e9:cc:
b8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C7:2D:07:9E:78:91:56:51:10:02:3D:4F:58:25:30:42:03:18:3D
X509v3 Authority Key Identifier:
keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/ncctB554kVZREAI9T1glMEIDGD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.204.0/22
88.132.224.0-88.132.243.255
109.110.128.0/19
185.45.196.0/22
IPv6:
2a01:7d60::/32
Signature Algorithm: sha256WithRSAEncryption
56:67:fa:ce:ff:0e:1a:fc:d1:af:74:2b:f7:07:1a:27:85:42:
4d:7d:da:76:98:2a:d7:81:0a:df:84:a6:cc:a8:83:3f:14:6f:
f2:c3:a0:59:d0:39:6f:cc:a0:a5:92:0a:83:72:22:d2:b4:9a:
28:af:67:83:ea:5f:18:58:01:6d:de:f2:4d:58:4b:21:67:e4:
0e:f8:33:e8:86:b3:e5:fa:c9:eb:4e:08:f8:70:ba:e8:fe:35:
20:41:0d:8f:ba:9a:1f:22:32:5b:c7:74:17:1d:c0:7e:f5:4f:
7a:8b:04:1d:73:e9:d8:35:a3:12:48:c2:2a:a0:4f:b2:c1:f2:
46:22:49:5c:6e:86:83:12:0b:5c:58:3e:b0:cb:aa:6d:11:3a:
e7:c9:db:de:47:73:67:d9:a7:c2:e7:51:09:59:cd:db:39:5f:
3a:95:0d:c7:af:7f:76:7e:c7:1b:b2:f0:3f:bf:87:0f:57:d0:
41:c5:4d:20:77:3b:06:11:64:b4:e6:4d:f1:e7:cc:fd:1e:4c:
72:ac:f8:b6:06:96:a9:1d:ff:9d:44:57:45:55:4c:7b:da:9a:
b6:36:c5:d4:ee:5c:ac:42:bc:9a:4b:71:c0:d8:6d:30:ac:7c:
68:0f:bf:7a:b8:9a:db:18:1d:88:a0:64:77:62:2d:1d:fa:2d:
c4:57:9d:9c
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAZQlIXMKxTDmNa/jIuRw9cUyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlY2ExMDVjZTRhZjZjMjFjZDQyOWU5OTJkMDZlYTdkMDZk
OGE1NmQwHhcNMjUwMTAyMDM0ODU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGM3MmQwNzllNzg5MTU2NTExMDAyM2Q0ZjU4MjUzMDQyMDMxODNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZLYu6q08ZFUhx+WNrlTzVcy11y2
TfdqnrpP+ZMB6YrzlH1MT0Tvf2F5QiXeEFJYOFPCrgcXi6N+Kk7hu2n32HHShLl+
B5qR/qmX7+XG0/nb7UyeGZluivuUqgYyRGLtqYBTxajLZHoWEveFG3otk2sXA6SK
0BopPl7YaMg/c+YgE2vX6QChKtorORTf4RtFtc8rGEqCs30FCmKs6Mz9Mh+qKM7y
t3nZUP9m0bamffgfRzrpWLYm0Q8vnFHC8TWqSsmvpY7sU837MXx0KJ9Iz3Mjz3YF
fFOR7Aqka8X0ANQl1PAgSzrO8n0soNlP3khmzPO4vKpyvsMsJJxB6cy4gwIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFJ3HLQeeeJFWURACPU9YJTBCAxg9MB8GA1UdIwQY
MBaAFE7KEFzkr2whzUKemS0G6n0G2KVtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgt
NDZlZTBjZDdmY2JhLzEvbmNjdEI1NTRrVlpSRUFJOVQxZ2xNRUlER0QwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgtNDZlZTBjZDdmY2Jh
LzEvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQCTUrMMAwD
BAVYhOADBAJYhPADBAVtboADBAK5LcQwDQQCAAIwBwMFACoBfWAwDQYJKoZIhvcN
AQELBQADggEBAFZn+s7/Dhr80a90K/cHGieFQk192naYKteBCt+Epsyogz8Ub/LD
oFnQOW/MoKWSCoNyItK0miivZ4PqXxhYAW3e8k1YSyFn5A74M+iGs+X6yetOCPhw
uuj+NSBBDY+6mh8iMlvHdBcdwH71T3qLBB1z6dg1oxJIwiqgT7LB8kYiSVxuhoMS
C1xYPrDLqm0ROufJ295Hc2fZp8LnUQlZzds5XzqVDcevf3Z+xxuy8D+/hw9X0EHF
TSB3OwYRZLTmTfHnzP0eTHKs+LYGlqkd/51EV0VVTHvamrY2xdTuXKxCvJpLccDY
bTCsfGgPv3q4mtsYHYigZHdiLR36LcRXnZw=
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:01:42 2025 by rpki-client