Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/nJ0bWKVrXxw5nUMWLmYiB1K-vxU.roa
File: nJ0bWKVrXxw5nUMWLmYiB1K-vxU.roa (raw, json)
Hash identifier: z65/wMbb8QII0TkFCp2W0v/0qxprK0mocJ7aL+QpjB4=
Subject key identifier: 9C:9D:1B:58:A5:6B:5F:1C:39:9D:43:16:2E:66:22:07:52:BE:BF:15
Certificate issuer: /CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
Certificate serial: 0192F8414A9E3BA80A85D28681129B3C7A4F
Authority key identifier: CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/nJ0bWKVrXxw5nUMWLmYiB1K-vxU.roa
Signing time: Mon 04 Nov 2024 17:38:01 +0000
ROA not before: Mon 04 Nov 2024 17:38:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15774
IP address blocks: 37.49.192.0/19 maxlen: 32
37.205.48.0/21 maxlen: 32
37.205.64.0/19 maxlen: 32
46.50.128.0/17 maxlen: 32
46.241.0.0/17 maxlen: 32
91.105.128.0/18 maxlen: 32
109.171.0.0/17 maxlen: 32
109.197.128.0/21 maxlen: 32
188.44.96.0/19 maxlen: 32
188.168.0.0/16 maxlen: 32
188.244.128.0/17 maxlen: 32
194.187.29.0/24 maxlen: 32
195.238.100.0/22 maxlen: 32
2a02:618::/32 maxlen: 96
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f8:41:4a:9e:3b:a8:0a:85:d2:86:81:12:9b:3c:7a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
Validity
Not Before: Nov 4 17:38:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c9d1b58a56b5f1c399d43162e66220752bebf15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:28:ce:d0:60:62:06:75:9e:21:63:ec:7c:
09:8f:83:63:0e:a1:45:80:60:d6:8d:a4:37:d7:f3:
e8:34:9f:01:d5:ff:61:c5:30:b6:b4:1b:09:cd:13:
3e:d0:ff:69:94:d7:d0:ec:00:ff:bf:ad:52:a2:56:
6a:7a:b9:82:e8:be:4e:53:d1:44:07:08:ab:86:e7:
cc:4a:bb:4d:9c:99:0b:99:2e:3e:cf:1d:4f:53:e1:
d3:43:b4:30:8c:cb:68:1f:7a:1c:4f:dd:a7:4c:19:
e5:bd:fe:77:25:a1:d1:08:bd:30:f3:9a:b6:d6:6f:
0f:87:46:58:24:02:35:7e:1d:43:8d:fd:1b:d0:58:
fc:36:de:57:99:40:44:27:51:91:fa:85:46:d1:d5:
e6:5d:1a:71:7f:23:ea:63:95:fb:5c:40:25:4b:bc:
c0:d1:0b:dd:d1:ea:74:56:05:c3:e3:0e:9c:a2:a1:
11:d5:fc:da:0d:4d:1a:2d:08:c0:cf:f7:4c:66:f7:
a0:e3:7d:a5:39:78:f8:13:b2:60:93:07:71:93:50:
55:4f:e0:2b:61:9c:6a:be:c6:2a:70:d8:27:05:f8:
4e:b9:a3:10:31:0d:75:9c:3e:e3:73:59:b9:f7:79:
89:4e:46:88:8e:2b:8e:a2:6d:1b:37:84:2e:ca:40:
64:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9D:1B:58:A5:6B:5F:1C:39:9D:43:16:2E:66:22:07:52:BE:BF:15
X509v3 Authority Key Identifier:
keyid:CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/nJ0bWKVrXxw5nUMWLmYiB1K-vxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.192.0/19
37.205.48.0/21
37.205.64.0/19
46.50.128.0/17
46.241.0.0/17
91.105.128.0/18
109.171.0.0/17
109.197.128.0/21
188.44.96.0/19
188.168.0.0/16
188.244.128.0/17
194.187.29.0/24
195.238.100.0/22
IPv6:
2a02:618::/32
Signature Algorithm: sha256WithRSAEncryption
66:6e:98:59:9b:2d:1b:98:1f:db:15:c1:aa:5b:73:6d:e4:59:
0c:a5:d9:37:98:52:f4:ed:0a:50:3f:e4:79:8e:79:85:0e:2a:
54:a1:55:84:ad:c1:c8:5c:ab:b1:61:ad:b1:83:5e:0a:7d:ef:
1b:ac:b5:af:61:8a:83:36:97:96:a2:e1:d4:fa:8d:b7:21:8c:
54:8c:ab:a0:83:d7:d2:2f:11:12:33:2b:d9:07:92:93:c3:be:
88:46:3b:fc:72:b9:43:3f:24:ef:b5:75:01:74:a8:3c:88:39:
ca:e4:fb:1b:01:27:4b:ab:08:0b:5f:e7:1a:21:d5:30:2c:1b:
4a:a6:42:a7:d3:2b:bc:c1:44:03:05:bd:18:df:c3:06:cc:f4:
63:22:13:80:31:f0:0c:78:35:cc:48:1f:92:d1:96:a6:91:bc:
69:d7:80:bf:e7:49:da:cb:c2:f8:3b:5e:4a:b2:26:84:99:bb:
9f:8b:46:6d:56:a5:c3:52:29:cf:a7:49:d9:cc:47:fe:3d:ae:
7f:df:4c:93:3a:e1:3b:46:92:e6:1a:a6:ee:f2:5e:e2:7f:e4:
ea:ce:68:49:d0:8b:48:98:ad:dd:83:9f:b6:24:63:58:b9:7c:
d2:78:04:c0:e0:9b:d0:5b:9d:fa:2f:c0:dd:66:e0:3c:74:e7:
6f:b8:82:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:04 2025 by rpki-client