Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/na0eTKlrRjXQp-041HQbfnQ_h5w.roa
File: na0eTKlrRjXQp-041HQbfnQ_h5w.roa (raw, json)
Hash identifier: RrgHszkb5qGMG/z4dleXM0fBqUA1swkMInUx61RPN24=
Subject key identifier: 9D:AD:1E:4C:A9:6B:46:35:D0:A7:ED:38:D4:74:1B:7E:74:3F:87:9C
Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial: 01942444C6AF56226A4912B5675F511B4E3B
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/na0eTKlrRjXQp-041HQbfnQ_h5w.roa
Signing time: Wed 01 Jan 2025 23:47:54 +0000
ROA not before: Wed 01 Jan 2025 23:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 132.64.1.0/24 maxlen: 24
132.64.2.0/24 maxlen: 24
132.64.3.0/24 maxlen: 24
132.64.5.0/24 maxlen: 24
132.64.6.0/24 maxlen: 24
132.64.7.0/24 maxlen: 24
132.64.16.0/24 maxlen: 24
132.64.17.0/24 maxlen: 24
132.64.40.0/24 maxlen: 24
132.64.43.0/24 maxlen: 24
132.64.44.0/24 maxlen: 24
132.64.45.0/24 maxlen: 24
132.64.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 13:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c6:af:56:22:6a:49:12:b5:67:5f:51:1b:4e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
Validity
Not Before: Jan 1 23:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9dad1e4ca96b4635d0a7ed38d4741b7e743f879c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:84:e4:65:85:5c:09:02:52:42:94:3f:57:a9:
b7:58:75:f0:0c:7e:f1:95:e6:69:b6:ce:61:89:bc:
0f:99:e8:6b:27:6f:16:cd:91:ea:dd:0c:3d:3d:71:
f9:b2:61:fd:73:5f:6f:e8:9b:34:1e:31:e5:ff:7a:
2a:2a:07:56:5e:89:22:6b:5c:6f:f1:eb:e2:b4:0d:
d0:98:b0:af:3b:a1:b4:1b:00:79:90:ad:74:a3:d3:
a8:a5:37:97:8c:df:2c:47:d0:15:f5:0d:29:08:a0:
07:6a:5e:3e:ad:f6:da:c6:4a:7b:0b:a8:0c:cb:79:
3d:41:57:df:47:f1:b6:2c:9e:75:61:51:63:9c:dc:
29:5f:6c:2a:98:ee:9b:f7:0b:cc:29:9f:8b:87:f7:
0a:ca:7a:5b:7a:ca:b1:1f:36:5a:ad:cf:78:5f:66:
8a:ab:20:88:99:93:72:b5:9f:ea:f1:f2:76:5e:49:
5c:08:13:d6:03:f3:35:ef:2d:c9:ae:da:ef:52:c6:
91:9b:a1:64:a8:01:09:7c:92:f2:97:9c:ad:60:ba:
ca:31:0b:fb:11:b4:8b:84:63:10:43:8e:bc:68:ad:
e2:9b:e5:7b:7b:be:5b:0c:c9:3d:3b:d4:b5:8d:27:
6f:01:62:d5:f6:24:67:a9:47:2d:18:af:43:5c:63:
9e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AD:1E:4C:A9:6B:46:35:D0:A7:ED:38:D4:74:1B:7E:74:3F:87:9C
X509v3 Authority Key Identifier:
keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/na0eTKlrRjXQp-041HQbfnQ_h5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.64.1.0-132.64.3.255
132.64.5.0-132.64.7.255
132.64.16.0/23
132.64.40.0/24
132.64.43.0-132.64.45.255
132.64.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:97:69:d6:1f:87:62:d9:d1:7b:6a:25:e8:5d:fd:14:58:6e:
8b:90:e9:4a:38:05:91:36:cb:53:a4:c8:92:e7:40:3a:ef:b0:
0f:e7:39:fe:18:03:3d:31:4f:b1:b0:66:f7:83:15:1a:bc:7e:
24:19:62:8e:6c:e4:0b:ed:80:bc:cb:34:1d:2b:6a:5c:e4:4e:
c9:6c:cd:d2:2d:52:64:a1:35:12:fc:8d:9c:2b:65:ee:36:10:
78:b7:db:7a:cd:16:9b:6c:a6:9e:f4:5a:e2:10:87:a7:bf:c6:
01:fe:1f:32:9f:a9:b7:3a:ab:dd:b0:9b:b8:0f:bb:49:f5:53:
2f:0c:46:70:4b:a6:1c:44:68:53:62:22:bf:55:ba:84:ae:10:
73:0a:ff:06:a6:e2:88:e7:fe:04:c0:ad:64:09:f3:b5:c6:bb:
7e:22:35:ef:d6:c8:a0:86:9a:1e:4c:0f:c0:e5:64:8d:a2:64:
99:b1:38:af:0d:f3:ba:70:4d:00:0b:0a:4c:00:91:61:48:cb:
9d:12:fd:76:b7:ab:4d:f0:83:14:58:e3:a7:97:88:83:84:13:
9b:bb:34:2b:1c:cc:64:dc:99:b4:e2:f6:37:c9:c0:38:e7:12:
e8:54:11:2d:c7:63:c7:32:1a:54:6c:f5:14:24:f1:59:5e:0f:
8f:29:42:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:12:35 2025 by rpki-client