Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NkVubc3UM8nsEEoa-a_mboMQAsU.roa
File: NkVubc3UM8nsEEoa-a_mboMQAsU.roa (raw, json)
Hash identifier: ktZZD4/x+krlZ2Qmrhr78IidMZtmnUdWteBNMCLmfiI=
Subject key identifier: 36:45:6E:6D:CD:D4:33:C9:EC:10:4A:1A:F9:AF:E6:6E:83:10:02:C5
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01942827793275449E5279D4E12F4208FF61
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NkVubc3UM8nsEEoa-a_mboMQAsU.roa
Signing time: Thu 02 Jan 2025 17:54:23 +0000
ROA not before: Thu 02 Jan 2025 17:54:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216300
IP address blocks: 45.87.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Jan 2025 10:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:79:32:75:44:9e:52:79:d4:e1:2f:42:08:ff:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36456e6dcdd433c9ec104a1af9afe66e831002c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bd:d3:a7:91:63:c2:5d:13:34:da:73:48:f4:
72:f1:d5:55:d8:2f:b3:58:5a:7b:b0:21:9a:7a:8b:
33:91:3f:f2:76:f2:97:7a:37:a7:71:54:13:e9:9f:
00:18:77:ca:f8:4f:a5:a1:66:f8:b9:da:b9:87:87:
69:63:bc:d3:d2:3d:ef:b0:dc:03:06:e4:49:a3:81:
fe:8d:eb:5a:f6:d8:78:d9:63:c7:68:b7:53:1a:e8:
6c:18:6d:33:3d:88:e1:85:3a:4b:ef:54:0f:a1:4f:
00:07:3a:19:0a:bd:76:ac:01:c5:e9:df:ab:83:57:
c4:6a:28:d1:39:5d:9b:23:16:10:1b:e3:70:d1:bf:
b1:3c:3f:22:e7:75:12:e7:06:5c:1c:8b:b6:d0:43:
35:08:ea:b1:c2:45:27:da:c9:08:88:20:fb:34:05:
40:ec:7f:aa:5c:76:14:12:5d:46:3b:94:36:34:cb:
fd:a8:8f:c3:fd:5c:fb:e4:41:24:ec:9f:9a:ee:1b:
4d:42:df:f3:e5:9f:9e:35:c5:b8:8e:34:1d:f0:17:
83:23:58:84:68:d0:c0:ce:61:c9:e8:77:39:89:b0:
29:7d:37:6a:bf:8b:de:a7:86:e5:6f:12:5c:e6:cc:
10:7f:e0:33:0c:7b:d9:11:bb:f5:86:52:d1:31:5b:
af:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:45:6E:6D:CD:D4:33:C9:EC:10:4A:1A:F9:AF:E6:6E:83:10:02:C5
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NkVubc3UM8nsEEoa-a_mboMQAsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.121.0/24
Signature Algorithm: sha256WithRSAEncryption
71:37:b1:63:35:5f:2a:2d:56:ef:3e:d0:6b:92:d2:65:aa:03:
90:61:7c:19:a6:13:33:6a:e9:2d:80:18:a8:24:28:4e:fc:38:
da:62:ee:5a:96:2a:41:32:81:ca:76:3d:af:4b:af:fb:14:c0:
2a:6a:48:1f:d1:f5:02:62:c3:2a:4c:42:66:55:e3:8e:21:76:
02:f9:da:88:6d:19:58:99:75:09:03:6f:4a:53:5b:fc:bc:82:
35:82:c8:6b:64:23:ab:f8:93:1a:98:11:ff:45:b7:f8:4b:2f:
26:b5:ee:99:29:e3:46:ca:e2:ff:38:ac:82:0a:5b:76:59:31:
5c:a1:e8:6d:89:8e:fc:53:fd:b5:b6:54:af:6c:71:7c:94:7e:
4f:11:c4:c0:db:85:ea:8a:a2:62:7e:7d:24:d4:3a:3b:89:c1:
c7:3d:99:13:43:30:90:9b:58:c6:d6:dd:27:b9:2d:5a:68:3f:
67:4a:bd:ac:d4:e0:6e:54:9a:65:d1:a4:5f:cb:a1:f0:45:e3:
a1:14:bb:28:43:0b:5c:49:78:95:34:8f:71:bf:dd:03:7a:18:
b6:6c:53:21:1a:53:44:0c:23:9a:b9:4d:b8:b8:d8:83:41:d3:
d5:bf:38:8a:68:51:c3:55:9a:bc:18:61:1d:a1:9d:c5:16:31:
24:4e:d4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:41 2025 by rpki-client