Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/Nga4VotVhRYu5am0KHSllWs9qsA.roa
File: Nga4VotVhRYu5am0KHSllWs9qsA.roa (raw, json)
Hash identifier: XDIwnwr3CISWis6KlFQCt0fSAezhY5TjNyCy8kBwX0c=
Subject key identifier: 36:06:B8:56:8B:55:85:16:2E:E5:A9:B4:28:74:A5:95:6B:3D:AA:C0
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 0196F6958011A6475541BB1B76C2650812D9
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/Nga4VotVhRYu5am0KHSllWs9qsA.roa
Signing time: Thu 22 May 2025 06:01:54 +0000
ROA not before: Thu 22 May 2025 06:01:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 84.37.0.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 May 2025 08:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f6:95:80:11:a6:47:55:41:bb:1b:76:c2:65:08:12:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: May 22 06:01:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3606b8568b5585162ee5a9b42874a5956b3daac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:56:61:ac:67:b2:74:91:49:39:4c:eb:b9:
c0:7f:5f:3e:db:78:e4:a7:cb:2a:f8:c7:2d:91:ca:
9f:92:ab:08:22:50:c8:04:de:64:0e:3f:6c:cb:a8:
09:9d:04:17:39:39:db:ad:6c:8b:33:88:03:75:6b:
6e:f7:b9:e9:0d:70:de:a1:1c:f3:d1:58:53:26:d0:
ce:8f:0f:4a:f4:f1:b3:cf:f6:9f:fb:f2:f1:e9:65:
39:58:ee:67:02:33:be:6a:15:e5:34:a2:2b:07:9f:
dd:9c:7e:47:d6:05:ce:91:1a:f1:dc:63:ac:b5:0b:
fc:d7:aa:1e:ad:07:20:63:88:8d:2b:35:72:c4:cd:
74:45:3d:b2:98:f1:9c:65:62:b4:06:6c:fe:9c:a9:
1c:6f:c9:5d:3b:4a:93:3c:f7:ef:76:27:2e:70:17:
b4:55:1f:8c:c7:4a:b2:bb:ff:2b:2f:50:ff:6d:e4:
b1:5b:53:1a:d2:73:33:42:6e:57:d2:f1:d6:b1:a9:
b5:33:2c:dc:f2:88:2a:ab:3b:83:02:a3:2c:74:01:
b3:e9:bf:dd:67:8c:26:6b:dc:b7:00:98:1e:0c:14:
15:1f:aa:80:4f:49:36:a0:9b:9a:d8:2d:51:f5:58:
82:5d:a8:37:fb:be:56:f2:25:8c:de:af:f9:88:fb:
3c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:06:B8:56:8B:55:85:16:2E:E5:A9:B4:28:74:A5:95:6B:3D:AA:C0
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/Nga4VotVhRYu5am0KHSllWs9qsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.37.0.0/23
Signature Algorithm: sha256WithRSAEncryption
73:79:4f:44:dd:a0:21:67:54:5a:26:91:da:20:7f:ab:da:40:
32:c0:a3:a5:68:91:90:e7:9b:4d:7c:93:d1:4b:a6:78:1f:3e:
a5:08:fb:98:e9:ca:00:81:bf:80:b7:9c:1e:94:ce:a9:6d:c6:
3c:08:0f:b3:a6:03:b2:46:c5:d5:e6:3f:99:6c:2a:e7:d0:aa:
7e:22:f0:1a:e6:68:64:dd:de:29:c5:cc:bd:97:03:4b:16:ff:
19:6a:df:41:fc:37:3b:2d:2e:46:f9:20:f9:2d:ca:ee:6d:12:
c0:fc:ec:65:38:71:7f:39:71:68:fc:23:4c:d1:cb:b9:89:26:
84:c5:98:bf:48:b3:9f:a3:dd:60:c7:c4:9b:f2:72:dc:03:5d:
f3:e6:f8:df:39:8d:88:64:e9:b3:cd:70:48:75:c1:4e:4f:d4:
98:46:3b:93:5d:93:06:5b:7a:4e:44:69:25:10:38:b2:98:4d:
76:36:6f:44:a6:61:db:0b:39:1e:91:c2:2a:21:ac:fb:a7:0a:
8e:7b:84:3f:19:76:47:52:b0:f5:6c:44:19:d8:7f:54:b9:ed:
71:c7:0f:d5:4d:74:00:66:79:df:2d:cf:48:ff:68:e9:63:68:
38:33:b5:3d:d5:55:a5:0b:52:ef:94:72:e2:f3:bf:9e:71:1b:
ee:b3:bf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:38:29 2025 by rpki-client