Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/nTZkp8t1Mb1GTQmxuCyGLxbChaQ.roa
File: nTZkp8t1Mb1GTQmxuCyGLxbChaQ.roa (raw, json)
Hash identifier: bx0TwWNo/jFocjvrfvzOeWgBEQYXBCYO0VwP8QutR4c=
Subject key identifier: 9D:36:64:A7:CB:75:31:BD:46:4D:09:B1:B8:2C:86:2F:16:C2:85:A4
Certificate issuer: /CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Certificate serial: 0196E6D5C16C9BC2E23BEA264872D7A7C28A
Authority key identifier: 1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/nTZkp8t1Mb1GTQmxuCyGLxbChaQ.roa
Signing time: Mon 19 May 2025 04:38:10 +0000
ROA not before: Mon 19 May 2025 04:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56755
IP address blocks: 185.237.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 May 2025 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e6:d5:c1:6c:9b:c2:e2:3b:ea:26:48:72:d7:a7:c2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Validity
Not Before: May 19 04:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d3664a7cb7531bd464d09b1b82c862f16c285a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:9b:82:4e:fc:99:77:fd:8b:fe:72:3d:5a:
cf:bb:d3:1a:2a:b8:ee:9f:db:dd:9f:37:79:af:67:
c9:f5:43:bd:f3:73:b3:04:5a:ac:d0:1e:71:b5:75:
8c:82:47:21:7b:c3:03:55:4a:8b:af:53:eb:31:e9:
09:f9:b0:fb:96:61:81:87:8b:1b:b5:3b:50:e9:01:
e1:dd:59:b1:cf:09:47:52:cb:00:a4:c0:77:ad:67:
0f:8a:97:ab:19:79:17:cd:85:79:09:bc:5b:8a:15:
2b:e4:c7:ef:57:71:f5:69:12:38:4a:fd:4d:cd:5a:
e9:cf:da:32:5b:96:73:59:0b:94:16:85:53:18:dd:
6b:63:88:32:ec:a9:be:06:33:8e:a9:e4:26:e8:3c:
db:76:19:f8:59:ef:83:e6:af:5e:a8:96:e8:44:a6:
11:f4:74:5a:32:e1:02:04:5a:68:2b:31:21:77:54:
6c:2b:52:d7:de:86:eb:94:6b:69:5c:10:e0:83:86:
df:57:54:c8:09:78:35:ec:00:db:dc:df:23:90:1c:
e2:ec:24:d3:75:c3:27:52:7f:30:42:23:7b:cc:27:
30:4d:f5:4e:d8:18:a0:fd:00:1f:ed:c9:84:34:be:
81:fa:87:50:8e:86:75:76:14:1a:4b:d5:01:91:d4:
6b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:36:64:A7:CB:75:31:BD:46:4D:09:B1:B8:2C:86:2F:16:C2:85:A4
X509v3 Authority Key Identifier:
keyid:1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/nTZkp8t1Mb1GTQmxuCyGLxbChaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.93.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:07:c8:85:02:a4:ca:a3:d8:24:8c:91:d2:2e:ef:24:d0:48:
fc:51:db:90:18:77:46:3e:5c:ec:c4:ca:a8:87:d0:8b:81:c1:
d9:71:21:9c:b6:b9:84:0f:28:94:80:ed:c7:b8:cd:75:a2:d6:
db:5b:85:74:a3:88:f5:2a:e6:73:47:ae:4b:ab:40:7d:f6:c9:
74:90:3b:38:0f:2b:3e:cb:ce:38:56:56:c8:33:57:4e:4e:aa:
aa:69:c9:9d:1e:fd:4b:ae:a7:93:84:64:9d:8c:6c:e3:89:71:
f4:53:a7:01:5b:77:44:be:6a:f8:32:90:f0:b4:90:fd:10:af:
44:0f:11:eb:f7:ff:b1:43:0c:b1:b3:de:22:f2:5b:8e:fe:db:
80:41:ac:80:e3:16:44:64:0d:bc:08:0e:6e:59:17:8e:a0:2d:
8d:0c:0b:a1:06:72:a0:4f:8c:38:8a:c8:0d:8f:c2:47:37:61:
c7:95:53:8b:cc:b1:b9:79:cf:4a:52:5f:1c:c7:99:64:50:f4:
01:e2:a6:e6:d8:7c:c4:d4:29:e2:17:78:9e:d2:f3:31:57:b2:
8d:a3:58:d2:26:7d:3a:4b:86:1b:67:79:dc:75:82:27:53:c6:
05:c7:28:2f:1f:69:e7:07:39:03:b6:67:89:22:02:f8:0e:38:
77:27:89:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:19:08 2025 by rpki-client