Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/nf1t_w0ZO2n6RSXYAmlR5K5pJys.roa
File: nf1t_w0ZO2n6RSXYAmlR5K5pJys.roa (raw, json)
Hash identifier: pDB87bFGmZjfTtE1DmjLQzE6IpznfjXV0Kd0cGvE0UY=
Subject key identifier: 9D:FD:6D:FF:0D:19:3B:69:FA:45:25:D8:02:69:51:E4:AE:69:27:2B
Certificate issuer: /CN=494d0eaf80250ab8248989be71a4039718d6935a
Certificate serial: 018CC64B5D89FFF58FA46A9259AB3A87C168
Authority key identifier: 49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/nf1t_w0ZO2n6RSXYAmlR5K5pJys.roa
Signing time: Mon 01 Jan 2024 18:31:17 +0000
ROA not before: Mon 01 Jan 2024 18:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42275
IP address blocks: 85.208.68.0/22 maxlen: 24
2a09:8340::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:5d:89:ff:f5:8f:a4:6a:92:59:ab:3a:87:c1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d0eaf80250ab8248989be71a4039718d6935a
Validity
Not Before: Jan 1 18:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dfd6dff0d193b69fa4525d8026951e4ae69272b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:97:29:cf:f5:b2:2f:13:e0:ae:4c:32:ef:02:
77:38:31:3e:c3:68:91:3c:db:e4:b6:77:30:98:e8:
be:bb:07:2d:02:02:1e:e9:73:25:04:f3:2b:5b:d5:
68:54:64:5f:62:ff:68:a2:30:d2:e2:c3:92:9b:11:
36:cb:5f:52:1b:df:06:14:de:af:34:38:b5:41:cc:
c2:e4:e7:ea:37:e9:f3:aa:9d:c3:67:63:6c:74:12:
4a:f5:ec:33:67:94:44:5e:ac:a8:69:dc:63:13:3b:
e4:e2:74:25:0c:d8:56:f4:1a:ae:2a:ba:86:a7:33:
53:d4:01:cd:13:ba:c5:63:24:16:b7:5b:14:9d:45:
72:32:6d:39:d0:0d:97:c6:01:6a:15:74:66:48:d0:
73:e0:75:64:5b:f7:58:16:78:da:3c:76:c7:0b:32:
dc:a1:02:5c:71:10:6d:43:25:22:54:8c:07:c2:e9:
5e:09:14:7e:03:ff:ca:7e:2d:c9:98:b3:01:af:ee:
c8:ee:bb:28:ae:bb:1a:61:de:12:b7:ce:f8:9f:91:
6a:98:37:bc:3c:67:1f:97:c3:29:27:a9:cb:e9:2f:
14:2b:8f:fa:55:2e:a5:e7:d3:e9:79:8e:5a:a5:c6:
72:76:fe:d0:09:08:b6:47:59:33:1e:09:9f:9f:ff:
6e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FD:6D:FF:0D:19:3B:69:FA:45:25:D8:02:69:51:E4:AE:69:27:2B
X509v3 Authority Key Identifier:
keyid:49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/nf1t_w0ZO2n6RSXYAmlR5K5pJys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.68.0/22
IPv6:
2a09:8340::/29
Signature Algorithm: sha256WithRSAEncryption
73:58:9b:db:23:ae:e7:09:ed:d9:07:53:18:65:a6:88:ec:59:
f9:98:37:0a:92:bb:be:c5:bc:a0:e3:db:b3:08:c7:32:df:9e:
75:37:bf:ca:07:70:94:7a:ef:0b:f6:0a:15:f3:fd:af:4d:22:
d3:c3:68:e4:be:68:9d:11:d3:c0:21:51:0e:f6:6e:9c:22:5e:
48:ba:dd:ac:fc:8d:79:49:0d:99:39:49:a6:0d:0d:71:88:6b:
0b:09:53:ca:38:48:f5:a1:63:17:83:ad:9d:69:6b:a2:c8:af:
35:9a:ad:78:12:e8:5c:4a:0a:7a:79:8b:98:b8:0d:45:63:b0:
71:31:d4:40:d5:8a:1f:c8:38:c0:20:99:b2:4f:23:2d:88:9f:
47:eb:12:24:e3:0e:c9:20:7d:63:72:25:70:9d:a1:80:ec:7f:
63:88:3c:83:ce:c2:4d:5f:70:f8:83:4f:f3:cc:7c:c1:aa:91:
85:d6:57:58:b8:6e:e5:9c:6e:dd:2f:43:05:d9:4a:6c:14:ca:
83:39:7c:e3:48:7b:36:4d:bd:23:ff:fb:ab:61:61:55:6b:d6:
8b:3b:3f:78:c1:aa:80:72:e3:fe:0b:be:64:9f:f0:83:b0:db:
61:2f:ad:7e:94:a4:bb:7b:ad:ef:47:c5:f9:5c:5d:75:fc:16:
41:4c:8f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:50:52 2025 by rpki-client