Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/NIgOOsWZ_RoxFFT9vJCbwFnZsCM.roa
File: NIgOOsWZ_RoxFFT9vJCbwFnZsCM.roa (raw, json)
Hash identifier: SGzY87pmisE8wFs6+QKFsJ0hsKTEdW5d6naw7a4I9fY=
Subject key identifier: 34:88:0E:3A:C5:99:FD:1A:31:14:54:FD:BC:90:9B:C0:59:D9:B0:23
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 0194A70B0BA51D460EBDA813B9CD2F6C98D6
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/NIgOOsWZ_RoxFFT9vJCbwFnZsCM.roa
Signing time: Mon 27 Jan 2025 09:15:06 +0000
ROA not before: Mon 27 Jan 2025 09:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211557
IP address blocks: 185.211.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 13:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:0b:0b:a5:1d:46:0e:bd:a8:13:b9:cd:2f:6c:98:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Jan 27 09:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34880e3ac599fd1a311454fdbc909bc059d9b023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:16:61:74:ec:7a:ae:37:86:9c:3b:2f:e5:
e2:c9:65:e3:97:3e:cd:fb:70:2d:57:af:53:2f:a2:
9a:d0:6e:f1:a8:22:75:00:bf:f7:79:07:ad:86:34:
14:9e:de:8b:08:ec:94:a3:77:b7:02:fa:10:0d:e0:
fa:61:19:c2:42:32:9a:44:be:d2:d5:4d:23:eb:d0:
6b:96:14:a2:0e:4a:46:c1:ce:94:8c:68:50:bc:3a:
17:30:9d:c1:bb:ad:69:4a:8d:8e:7c:75:42:87:02:
c0:59:e6:4b:e0:cb:d7:b4:f0:1d:eb:d7:21:38:bc:
2e:5e:58:02:c5:62:2b:f8:33:ad:87:05:72:d6:ec:
52:da:ea:ab:c2:3c:28:f8:c6:77:3d:f6:9f:97:ef:
97:0b:ab:0a:eb:2a:de:0c:87:4a:30:36:8c:d5:49:
83:d1:48:6d:4f:71:ba:a0:e2:2c:d5:32:12:51:6a:
a9:0e:15:3d:60:9c:49:a6:79:22:d8:9e:57:97:50:
3c:ed:b1:96:f9:4d:d8:33:d6:54:52:df:4e:d0:42:
62:4e:4e:36:66:dc:5d:d0:4b:12:85:62:5c:66:30:
63:1f:bd:0a:72:6e:23:82:ec:16:8f:a4:d1:f2:43:
26:89:e0:2e:68:46:d3:8e:43:1b:ec:d8:50:3d:18:
8b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:88:0E:3A:C5:99:FD:1A:31:14:54:FD:BC:90:9B:C0:59:D9:B0:23
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/NIgOOsWZ_RoxFFT9vJCbwFnZsCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.100.0/24
Signature Algorithm: sha256WithRSAEncryption
83:41:75:7f:89:cb:ee:9d:51:26:58:31:c2:4f:a8:3c:09:c2:
49:a8:f8:3a:a4:db:e0:d1:26:ba:68:82:ac:3d:94:8c:7b:9f:
70:6b:dd:6c:c8:bc:0f:27:b5:d9:d5:11:5f:41:57:8b:57:45:
ff:15:85:4f:37:ff:9b:bb:ee:fd:3b:f8:86:16:3f:01:85:97:
97:f6:d2:31:1b:2c:44:47:70:53:d9:45:5f:5f:e9:f3:03:40:
6e:fa:75:32:06:08:10:a5:b4:8f:6f:00:2b:46:9b:42:9e:0a:
93:71:cf:06:cd:8d:ef:34:19:98:48:f9:90:79:3e:fc:c3:79:
05:85:e5:4a:f7:a9:20:7a:02:35:98:4a:b9:98:f2:c0:61:0c:
d2:49:27:95:ec:a7:2f:fa:5f:29:ea:d7:d9:df:35:95:de:20:
ba:ec:b2:b0:2c:76:41:51:ae:80:8f:31:17:43:94:63:b3:19:
7a:99:50:11:49:c3:d3:69:cf:2c:62:d0:64:c1:77:cc:47:42:
99:34:a3:6d:b8:83:6a:85:e5:4a:05:b8:62:21:42:c0:0b:33:
a0:49:1f:61:da:0a:ee:78:b9:97:15:00:bf:3c:d7:fd:81:1f:
3a:d1:9d:56:4c:53:df:da:d6:b9:e1:53:5f:9b:e1:9e:bf:fa:
a4:55:e1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 20:57:20 2025 by rpki-client