Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NXcpRAVuPaGH3AoqtAhQWQpHOyM.roa
File: NXcpRAVuPaGH3AoqtAhQWQpHOyM.roa (raw, json)
Hash identifier: WjZzU27PB0a+Y74cH9kEwO1GAUpQ/uiPzZaXKHY8p1k=
Subject key identifier: 35:77:29:44:05:6E:3D:A1:87:DC:0A:2A:B4:08:50:59:0A:47:3B:23
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190359FAA404D2C086FF6B2DA474C007342
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NXcpRAVuPaGH3AoqtAhQWQpHOyM.roa
Signing time: Thu 20 Jun 2024 12:29:34 +0000
ROA not before: Thu 20 Jun 2024 12:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.252.27.0/24 maxlen: 24
81.168.50.0/24 maxlen: 24
82.152.6.0/24 maxlen: 24
82.152.7.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.35.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
89.213.97.0/24 maxlen: 24
89.213.134.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.202.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jun 2024 14:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:35:9f:aa:40:4d:2c:08:6f:f6:b2:da:47:4c:00:73:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 20 12:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35772944056e3da187dc0a2ab40850590a473b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1e:c3:9e:17:b6:3c:f8:b9:87:4e:a0:da:4c:
2b:d0:8c:eb:94:ca:62:9d:1f:5d:d4:7c:69:19:f4:
5e:be:89:99:c1:54:6d:4d:6e:25:7d:7d:e0:39:10:
24:5d:ff:16:6e:a1:8c:9f:29:c2:20:de:46:cf:4b:
ac:7f:75:68:d3:1c:c8:8e:ea:a6:de:9c:09:d7:c6:
6b:d5:4f:33:08:52:b6:66:5e:a9:c5:e8:24:79:8e:
b7:c4:53:01:f6:fd:54:58:d8:dc:7a:d0:58:47:60:
e3:f0:92:6d:ce:59:ff:cd:57:ce:b5:ca:ed:92:4e:
f5:b3:85:d4:46:6e:86:b1:78:51:5b:92:a3:90:47:
32:ea:d9:57:34:87:f6:53:74:4b:3a:1f:83:ec:a5:
a9:ef:9b:9f:2c:dc:6d:d1:02:28:15:65:3f:2b:d8:
00:9c:c2:65:2d:60:93:a6:62:30:5a:77:cd:19:4d:
7b:20:ae:8a:af:86:c7:9a:af:d1:e0:5e:2d:ae:9c:
be:6c:9a:62:b8:cd:c2:35:89:c7:44:4e:0d:c6:bc:
3f:a1:98:75:bc:09:87:b2:99:5e:e5:1b:a5:0f:f2:
95:d8:71:6f:b1:aa:22:00:77:81:46:86:cf:bf:17:
3e:3b:d6:ac:29:02:77:6e:98:8e:af:ac:4d:27:00:
e2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:77:29:44:05:6E:3D:A1:87:DC:0A:2A:B4:08:50:59:0A:47:3B:23
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NXcpRAVuPaGH3AoqtAhQWQpHOyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.27.0/24
81.168.50.0/24
82.152.6.0/23
82.152.176.0/23
82.153.35.0/24
82.153.136.0/22
89.213.97.0/24
89.213.134.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.232.0/21
109.176.16.0/21
109.176.202.0/24
109.176.204.0/22
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.210.0/23
Signature Algorithm: sha256WithRSAEncryption
83:84:f9:b8:de:56:fa:58:95:7b:e2:22:b5:e4:91:8b:a3:94:
14:af:50:72:78:d4:f1:9b:93:c3:e4:b4:96:50:4c:3f:ac:43:
a2:aa:44:d2:7d:12:94:ff:48:02:f8:92:e9:c1:2b:bf:b2:8b:
6d:fa:59:fa:99:7b:77:6f:bd:a4:8e:04:a0:a5:91:f0:42:46:
e1:af:7d:1e:3d:12:5b:d3:cf:27:c3:cc:88:35:d4:88:5e:24:
07:f1:ae:5e:73:95:92:02:71:89:e7:c7:7b:ca:fe:8d:9b:6c:
f4:cb:aa:53:8e:17:7a:59:ff:fa:6e:48:4e:2d:20:0f:8b:18:
df:3a:fc:b8:6f:8b:8e:38:4e:fb:59:db:cc:d0:8c:50:7d:12:
14:09:1c:d8:a1:ff:f7:d6:c9:a3:07:d1:1e:16:03:99:6f:52:
c8:58:4f:c6:ca:c9:e9:a8:ff:58:9f:cf:cc:d8:ed:4e:10:1c:
e6:1f:b6:5e:1e:b2:9f:e8:f8:4b:b4:01:17:27:e5:18:d2:11:
89:78:ae:bd:8e:9b:98:c9:82:ea:ac:eb:86:c8:ac:2c:7e:a9:
02:5a:3e:47:5f:2d:81:e6:f4:54:16:1d:dc:06:f7:d9:ce:d2:
8e:a6:50:b6:f0:08:f2:08:02:c4:b7:9c:ec:3b:d3:7a:64:94:
88:33:57:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:12:02 2025 by rpki-client