Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nrZ2FJfy7W_2bc5JjGjhWtggvgA.roa
File: nrZ2FJfy7W_2bc5JjGjhWtggvgA.roa (raw, json)
Hash identifier: 6DaoHZ0zMIh9+QokJ5OpNSrKTMCRHibH5hOjruMvc5w=
Subject key identifier: 9E:B6:76:14:97:F2:ED:6F:F6:6D:CE:49:8C:68:E1:5A:D8:20:BE:00
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FB59733124AAEADE51617906D3D50
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nrZ2FJfy7W_2bc5JjGjhWtggvgA.roa
Signing time: Thu 02 Jan 2025 05:49:22 +0000
ROA not before: Thu 02 Jan 2025 05:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49711
IP address blocks: 92.38.56.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 16:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b5:97:33:12:4a:ae:ad:e5:16:17:90:6d:3d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9eb6761497f2ed6ff66dce498c68e15ad820be00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:95:18:a8:2a:7b:04:e0:e5:63:3c:8c:ef:
52:a9:00:79:ca:0c:61:16:a3:40:11:9d:30:70:21:
11:65:2b:c4:fe:8d:b5:50:6b:9b:17:d3:e2:2b:4f:
74:8f:d9:f0:e0:0b:75:c1:c9:e5:ad:3f:bd:2a:aa:
09:99:6f:44:70:74:08:aa:2c:6b:7f:7b:13:49:be:
ee:53:b6:ba:e9:4d:a4:3b:90:14:31:1a:f2:10:9c:
5a:ee:f3:2d:8d:bd:fe:3f:c6:c2:c7:77:1b:26:ad:
70:c0:63:af:82:c0:fb:29:fd:61:93:ef:d8:0b:3a:
c5:1e:04:42:7d:da:c0:b8:ea:ee:10:c1:c1:4c:89:
7e:9d:4f:7e:32:a5:63:ac:fe:07:f3:7e:25:59:22:
bc:c4:6b:69:56:d7:52:b0:b8:4b:27:43:c8:82:62:
7a:c9:00:12:34:e3:60:a3:6a:da:05:f2:25:28:88:
65:99:ef:59:57:0a:17:f4:96:ee:ec:7d:28:e7:58:
91:74:d7:ad:11:e4:08:72:04:20:7c:7b:9f:27:93:
4a:5b:f1:55:71:f5:0e:ab:0c:eb:d4:c8:ea:22:01:
09:2a:f0:fb:6e:fd:be:3d:d7:3f:de:1f:8c:a8:a4:
bd:19:7c:29:b9:4b:91:d2:e8:04:a5:c6:0b:1f:26:
b2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B6:76:14:97:F2:ED:6F:F6:6D:CE:49:8C:68:E1:5A:D8:20:BE:00
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nrZ2FJfy7W_2bc5JjGjhWtggvgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.56.0/21
Signature Algorithm: sha256WithRSAEncryption
48:fe:75:50:d3:f4:a1:61:00:e6:40:84:62:53:e7:41:5a:14:
14:3b:eb:46:0c:26:63:0b:8d:78:35:cf:0a:82:43:18:13:7b:
02:19:3e:7d:8f:1d:81:72:5d:92:a8:eb:c0:32:fc:2d:b1:7e:
ab:2f:89:d6:3b:12:b3:1c:8c:fa:17:3f:5b:d4:71:20:82:45:
b1:62:fd:79:74:d3:20:18:ab:d7:c3:bd:4d:7b:09:0a:58:bf:
42:4e:b3:dc:a2:03:04:5f:5e:cf:34:b3:a4:b2:89:9f:72:a8:
9d:51:90:05:3f:4b:ef:4a:7e:35:58:e0:90:e5:b8:d7:29:c4:
ba:ce:46:e4:3e:c0:9c:46:1f:00:7d:d3:8b:69:9a:80:9c:e5:
a5:cb:d4:22:87:e5:37:81:fd:65:af:ab:b1:d3:a0:8d:f6:10:
18:00:97:11:2d:f1:49:e0:2b:02:89:65:2d:ce:38:9f:df:21:
b0:0b:a5:53:e0:a4:6d:ba:84:4b:4f:6c:95:d6:53:ae:98:12:
bb:de:b7:3c:6e:f6:ae:df:81:ad:dc:44:61:79:92:86:d9:82:
3a:b4:ba:bc:d3:8e:1f:c1:e3:69:46:21:ea:6c:aa:d2:b4:4e:
36:f5:7e:d2:4b:88:b2:2d:3d:84:2a:26:53:df:7a:f2:6c:6e:
aa:62:eb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:42:24 2025 by rpki-client