Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/nSKnmoxSxapHOKmYrKBvURDB5xU.roa
File: nSKnmoxSxapHOKmYrKBvURDB5xU.roa (raw, json)
Hash identifier: 4J0owExutHKkapGk1qhx8pNFpheAZgM+jk5oENqqkCA=
Subject key identifier: 9D:22:A7:9A:8C:52:C5:AA:47:38:A9:98:AC:A0:6F:51:10:C1:E7:15
Certificate issuer: /CN=ba6c1d958ff094caf1346cc66f716cceb6dc5009
Certificate serial: 018CC870C2D6E970BDFD3E62832E663CF05C
Authority key identifier: BA:6C:1D:95:8F:F0:94:CA:F1:34:6C:C6:6F:71:6C:CE:B6:DC:50:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umwdlY_wlMrxNGzGb3FszrbcUAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/nSKnmoxSxapHOKmYrKBvURDB5xU.roa
Signing time: Tue 02 Jan 2024 04:31:22 +0000
ROA not before: Tue 02 Jan 2024 04:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49995
IP address blocks: 195.178.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:c2:d6:e9:70:bd:fd:3e:62:83:2e:66:3c:f0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6c1d958ff094caf1346cc66f716cceb6dc5009
Validity
Not Before: Jan 2 04:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d22a79a8c52c5aa4738a998aca06f5110c1e715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4a:e6:b1:6b:f0:d3:26:2e:dd:29:47:d2:78:
a9:5b:87:d1:cd:86:68:5a:53:40:34:bb:38:6e:53:
b3:5e:6f:a3:bc:4d:fd:d5:cb:0b:ad:af:0a:50:bb:
55:66:bd:69:3d:c4:6e:01:c2:85:2c:f5:0c:57:24:
4d:ed:32:08:d4:cf:1e:d9:ea:e8:b2:e9:13:6e:b2:
85:39:b4:81:70:ad:02:54:6e:85:8d:5b:f5:76:fd:
f6:cd:cb:7c:a8:38:72:1b:b6:72:62:3f:9e:a9:37:
ed:f7:24:74:66:10:f9:86:a1:21:b0:35:37:e2:71:
e2:26:e6:57:7d:47:f5:69:93:a2:94:5e:37:ee:a6:
6f:d0:7a:e5:ca:1f:02:e2:95:3d:6e:18:ba:c5:fb:
5c:f6:d3:f1:9b:9a:db:e9:b9:84:5f:fc:8c:3a:30:
4b:c3:93:63:e7:2e:89:85:3a:37:12:ec:54:a3:34:
ba:7b:43:b4:1c:a2:ef:7e:40:3e:08:b7:bf:0a:93:
eb:ee:4d:45:5a:05:f9:1f:ab:be:c5:0e:35:fe:85:
3a:3c:ef:e9:30:13:e2:9b:b6:dd:10:ec:02:f6:d6:
b6:70:ac:d8:c4:ec:a3:de:53:e1:45:d4:a4:b5:71:
14:ff:a4:64:6d:16:97:68:02:d6:86:59:4b:ac:4f:
69:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:22:A7:9A:8C:52:C5:AA:47:38:A9:98:AC:A0:6F:51:10:C1:E7:15
X509v3 Authority Key Identifier:
keyid:BA:6C:1D:95:8F:F0:94:CA:F1:34:6C:C6:6F:71:6C:CE:B6:DC:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umwdlY_wlMrxNGzGb3FszrbcUAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/nSKnmoxSxapHOKmYrKBvURDB5xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.10.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:73:f5:5d:22:35:e3:ce:ef:9f:f4:60:7d:a0:f7:c7:0e:90:
71:86:80:5d:32:8a:b4:e9:16:40:7b:ba:bd:2f:82:c2:f3:6a:
be:b6:39:5c:85:13:19:6f:eb:b2:1a:ea:aa:b5:02:62:5c:7a:
8e:9d:c1:98:1a:e9:9a:2f:30:4a:0f:91:5a:d4:2e:15:f9:83:
96:65:bf:74:7c:97:d4:14:0b:ed:c8:bc:47:7d:b0:77:f5:d1:
7a:0c:33:a5:1c:76:80:78:52:dd:54:30:d1:52:df:95:65:cc:
c3:78:9d:09:7a:ac:64:fa:99:0b:25:75:14:39:2e:c3:45:31:
71:da:5a:2c:25:bc:57:af:1b:3b:dd:85:35:bb:4a:8b:7e:d7:
b9:af:08:4a:d4:00:04:8b:eb:f2:dd:f7:44:5a:82:fb:6b:11:
9c:65:7b:1e:db:cb:4d:30:fd:85:70:36:7d:b0:86:27:4c:cb:
7d:02:89:a0:5a:b9:ba:48:d4:c8:80:43:0f:36:68:e3:fa:bc:
ac:4d:01:71:4a:ac:1e:9d:81:45:b2:4e:9c:67:b6:c0:e4:70:
a0:a7:0a:1c:1d:85:62:aa:e6:1e:62:07:50:e4:79:ef:3c:44:
ac:dd:90:1f:ca:ef:06:a0:d8:8d:c5:36:de:88:3e:ea:27:c2:
bd:61:f5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:13 2025 by rpki-client