Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/NmUl895V_aEtmS0bS4yx2Yj8lRA.roa
File: NmUl895V_aEtmS0bS4yx2Yj8lRA.roa (raw, json)
Hash identifier: qlnMTt4Kiu5q2YDpkGkhePt/B+AlkBBMkYbXDQ0leok=
Subject key identifier: 36:65:25:F3:DE:55:FD:A1:2D:99:2D:1B:4B:8C:B1:D9:88:FC:95:10
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01951930C9FD8892A180D18B52F1C1C53176
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/NmUl895V_aEtmS0bS4yx2Yj8lRA.roa
Signing time: Tue 18 Feb 2025 13:13:02 +0000
ROA not before: Tue 18 Feb 2025 13:13:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 78.135.97.0/24 maxlen: 24
188.132.188.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
188.132.236.0/24 maxlen: 24
188.132.249.0/24 maxlen: 24
212.68.59.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 11:54:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:30:c9:fd:88:92:a1:80:d1:8b:52:f1:c1:c5:31:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 18 13:13:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=366525f3de55fda12d992d1b4b8cb1d988fc9510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:06:b6:09:2b:06:40:0a:a0:46:99:d5:e5:
a6:a7:50:bd:b3:2e:a6:c2:33:0e:e4:0d:6e:57:20:
be:18:f0:39:d3:f2:74:fb:bc:3c:e0:d0:aa:e3:a5:
e4:49:0d:48:d4:26:05:8c:62:fa:79:87:8e:b5:6c:
da:80:b9:c2:cd:03:0a:7a:7b:13:44:cb:2c:e2:88:
49:8a:49:ee:b8:40:19:40:52:1f:91:d2:02:41:ce:
86:c5:16:0e:8e:32:31:cd:7a:67:22:00:80:82:d9:
c5:57:30:51:90:bb:6c:e6:dc:c2:d9:e1:8a:e2:0b:
62:48:9f:46:43:c0:82:de:1b:1c:f6:d6:dc:e0:d6:
c4:cc:d2:50:2d:b7:35:87:13:a2:4c:15:8e:d4:1e:
35:7f:f3:2f:97:39:2a:ac:e0:f4:9e:d1:c1:86:fa:
d4:af:e5:07:b4:68:71:d3:00:56:f8:17:bc:fb:d8:
6d:1b:ba:65:98:5c:d4:4a:85:91:a6:b3:66:be:e5:
1e:89:9a:15:8e:cd:bd:4e:83:d1:c2:0f:72:6e:c1:
1a:05:ba:73:a0:9e:3d:fd:c8:ae:56:15:2c:af:5c:
4a:cc:ae:71:c3:8b:50:67:d0:52:7c:18:2f:16:a2:
bc:58:85:0a:b2:2f:13:b9:96:da:73:96:9c:8c:3d:
46:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:65:25:F3:DE:55:FD:A1:2D:99:2D:1B:4B:8C:B1:D9:88:FC:95:10
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/NmUl895V_aEtmS0bS4yx2Yj8lRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.97.0/24
188.132.188.0/23
188.132.191.0/24
188.132.236.0/24
188.132.249.0/24
212.68.59.0-212.68.60.255
Signature Algorithm: sha256WithRSAEncryption
3b:34:5b:3c:38:41:9b:b8:7c:6b:4d:5a:e8:f0:73:bf:2f:da:
79:fc:f6:24:11:31:e5:10:ce:a8:1c:4d:6a:72:41:85:a3:98:
25:2e:4d:62:c4:ea:4b:19:e8:8c:20:03:f3:89:89:e2:7b:ea:
2b:f5:9d:67:65:d7:e5:61:12:d6:d1:bd:46:9d:3f:61:4a:84:
5d:8d:7d:2a:4a:57:40:01:02:44:a1:69:ef:2b:f0:46:91:9c:
18:f5:71:8b:67:3f:de:7d:a0:12:9f:1d:75:e3:6c:8a:5a:51:
86:94:54:e7:82:58:ff:ae:99:da:b7:e9:64:57:c4:5c:8c:5f:
7f:df:9d:3d:65:db:6e:6c:7c:8a:de:78:7e:aa:09:3e:4d:19:
9a:5e:f4:07:6e:af:33:b9:80:60:f5:5b:21:9a:ca:a3:20:26:
65:50:2a:42:68:e8:81:37:1b:0f:6a:5e:e6:ed:1f:c2:07:6c:
09:1b:81:c7:05:8b:1c:09:39:ef:d0:1f:86:21:dd:dc:00:8e:
60:2a:11:22:c7:16:fa:31:1d:2e:3e:98:09:5b:15:ba:b5:5a:
a5:ca:fd:c7:3b:9a:ec:c2:b0:78:ac:07:a4:95:6a:41:53:57:
de:58:03:c6:16:55:6c:c2:cc:29:b7:30:e8:dd:1e:17:07:f3:
c1:bc:f7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:11:18 2025 by rpki-client