Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/NgyKVbNB5q2v-G6es_WLQVElTJA.roa
File: NgyKVbNB5q2v-G6es_WLQVElTJA.roa (raw, json)
Hash identifier: 64wDCOPqgqhgv11OMm5QUEYAN+gNMet7XB1UfsLRxPw=
Subject key identifier: 36:0C:8A:55:B3:41:E6:AD:AF:F8:6E:9E:B3:F5:8B:41:51:25:4C:90
Certificate issuer: /CN=d8ee90d342d865ea67f2b0d2fb74c039f83e4a48
Certificate serial: 0193D53B22CA51735E3EF8526C59F319A49C
Authority key identifier: D8:EE:90:D3:42:D8:65:EA:67:F2:B0:D2:FB:74:C0:39:F8:3E:4A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6Q00LYZepn8rDS-3TAOfg-Skg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/NgyKVbNB5q2v-G6es_WLQVElTJA.roa
Signing time: Tue 17 Dec 2024 15:27:22 +0000
ROA not before: Tue 17 Dec 2024 15:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25464
IP address blocks: 195.43.45.0/24 maxlen: 24
195.43.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d5:3b:22:ca:51:73:5e:3e:f8:52:6c:59:f3:19:a4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ee90d342d865ea67f2b0d2fb74c039f83e4a48
Validity
Not Before: Dec 17 15:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=360c8a55b341e6adaff86e9eb3f58b4151254c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5f:b2:fc:46:d2:3e:97:37:66:d9:85:58:8f:
dc:39:76:2a:bf:c3:16:81:63:8d:d7:74:eb:c1:84:
1a:9d:55:de:e1:66:cb:89:ca:bc:36:0c:7a:6a:0d:
cb:c4:bc:15:ba:c6:40:1e:3c:f9:3d:3b:c4:4c:e6:
36:d2:a0:81:a4:0f:1d:a2:a6:db:e9:41:34:13:db:
ff:9f:4c:aa:ec:f2:45:72:b8:2a:94:c5:60:bb:d2:
c3:7e:24:4d:22:f0:e3:a7:f4:76:92:10:1e:ec:0f:
24:0b:e3:77:aa:1c:ee:1c:90:26:d7:22:26:ec:3a:
cf:9b:04:49:d8:27:61:65:f5:aa:da:fc:07:44:3f:
b3:66:7f:29:6d:6b:0f:88:27:93:30:41:78:8d:ee:
4e:64:7d:02:33:88:69:64:a5:62:f4:6a:31:ad:25:
94:38:81:3a:0c:8f:7a:c7:db:c8:6f:61:d8:da:16:
e7:e4:f6:55:a3:76:13:74:91:7a:87:62:ac:cf:99:
41:cf:78:e4:37:ba:e9:36:4f:fd:cc:91:92:89:c9:
6f:5f:e4:c7:9b:f6:5f:2f:2a:44:04:5a:b1:bc:b5:
1d:36:b3:71:7d:e5:b9:c5:c6:39:c8:56:2c:bf:5e:
ce:01:e7:e8:c0:42:f6:63:11:54:d0:5f:5d:a6:c4:
a6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0C:8A:55:B3:41:E6:AD:AF:F8:6E:9E:B3:F5:8B:41:51:25:4C:90
X509v3 Authority Key Identifier:
keyid:D8:EE:90:D3:42:D8:65:EA:67:F2:B0:D2:FB:74:C0:39:F8:3E:4A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6Q00LYZepn8rDS-3TAOfg-Skg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/NgyKVbNB5q2v-G6es_WLQVElTJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/2O6Q00LYZepn8rDS-3TAOfg-Skg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.45.0/24
195.43.47.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:89:de:a6:f5:d2:61:f0:19:c9:e7:9c:cd:15:64:eb:40:42:
df:32:99:fc:6e:57:5c:ff:25:a2:05:67:b7:05:bd:7b:a1:49:
09:7d:77:b0:13:eb:b7:f8:4d:15:f8:d6:f2:e0:7a:b7:fa:b9:
24:b5:b4:33:a6:39:24:9d:c0:18:e0:30:57:01:ea:9a:ba:06:
58:9a:d3:74:9c:d2:35:d6:a7:c8:71:4a:0e:05:76:c1:68:7a:
56:ba:c6:ce:71:38:e2:bd:cd:d8:e5:3c:6b:b7:db:a0:79:91:
65:11:2d:ae:04:63:f2:e8:a8:c0:bc:e7:eb:c5:fe:76:03:7d:
f9:cc:f6:f0:07:79:fd:60:df:c9:8f:9e:39:1f:10:06:4e:65:
57:0a:a3:9a:1f:01:20:cb:8e:5f:87:f7:ac:e8:8f:4a:d2:40:
3d:41:0a:28:8a:b7:2b:f1:e9:28:0a:1f:b2:9e:69:38:2f:22:
1c:ae:c4:a6:40:93:02:b6:76:20:1b:17:f0:78:91:ee:2f:9a:
34:48:24:10:05:db:b6:87:59:9c:b3:d0:07:88:5f:f2:20:44:
91:1a:f3:c4:0e:ae:a1:c4:ae:a8:46:60:75:da:e0:13:09:2f:
97:8c:68:4e:f7:56:ab:81:1e:1f:f8:42:5b:cb:37:e9:05:c7:
f0:0f:fe:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:21:53 2025 by rpki-client