Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/NbjPyVO7Icv4mC7fS38MPM9DTkU.roa
File: NbjPyVO7Icv4mC7fS38MPM9DTkU.roa (raw, json)
Hash identifier: hpzdL6L4OahXQCa3sq+U6yPbcj9HmSVfbrxLG+2ym6o=
Subject key identifier: 35:B8:CF:C9:53:BB:21:CB:F8:98:2E:DF:4B:7F:0C:3C:CF:43:4E:45
Certificate issuer: /CN=d6ce49255f406a725593c62e1c408779586d56ef
Certificate serial: 01934DFC71FAB998B4406EBB883828ADBFA5
Authority key identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/NbjPyVO7Icv4mC7fS38MPM9DTkU.roa
Signing time: Thu 21 Nov 2024 09:10:10 +0000
ROA not before: Thu 21 Nov 2024 09:10:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50988
IP address blocks: 193.200.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4d:fc:71:fa:b9:98:b4:40:6e:bb:88:38:28:ad:bf:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce49255f406a725593c62e1c408779586d56ef
Validity
Not Before: Nov 21 09:10:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35b8cfc953bb21cbf8982edf4b7f0c3ccf434e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:05:75:c0:e6:47:a5:d7:7b:6a:27:90:a0:43:
a4:48:bc:b5:bb:40:bf:7b:50:a0:f6:f4:8d:9b:d7:
c1:ae:11:85:e2:b2:ae:a8:6b:45:88:74:ea:53:f5:
6e:9b:27:60:22:d0:61:a4:eb:e0:d1:8b:44:4b:8b:
6b:f4:3d:81:e0:4a:36:76:e8:6f:cb:24:30:83:11:
3b:57:bc:8c:26:ee:d1:4e:e4:a8:2e:e8:a9:96:4d:
c9:82:ee:10:00:77:b4:90:80:b0:c9:01:46:70:fc:
2f:5e:f3:bd:3b:59:50:10:87:4d:1a:f2:80:ae:02:
e7:59:75:72:0a:60:bc:57:04:6a:63:6b:e6:39:96:
71:ea:5f:e8:e6:93:46:e5:f7:8d:5c:2c:f6:1b:cf:
fa:c5:13:57:43:fc:4a:b0:d3:9c:86:64:de:08:97:
e0:7c:27:3f:0b:ec:b9:c8:9c:2c:08:72:37:23:d1:
a1:35:e7:8b:2d:eb:18:cb:6e:ef:54:c5:e2:ae:c0:
f9:f3:b8:74:f0:1c:97:4c:63:53:3c:32:f8:f3:20:
4e:60:52:a6:91:0b:0e:cc:99:a8:e2:4d:71:5e:6e:
ff:07:00:41:27:9c:33:c8:6d:5b:95:aa:51:9b:0f:
74:62:78:7d:06:5c:e6:f0:55:0f:a7:da:9b:dd:f8:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B8:CF:C9:53:BB:21:CB:F8:98:2E:DF:4B:7F:0C:3C:CF:43:4E:45
X509v3 Authority Key Identifier:
keyid:D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/NbjPyVO7Icv4mC7fS38MPM9DTkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.232.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b7:92:f4:36:44:fe:33:0b:2d:4e:3b:a8:54:3a:b6:de:5d:
ed:bc:3d:1d:fa:02:3b:92:20:80:4d:52:44:ab:df:67:78:44:
5d:3e:8c:79:f2:36:ec:3d:0b:fb:55:3d:f4:b0:27:5c:c4:ea:
39:79:e9:ed:d2:d4:56:90:29:6d:dd:47:87:34:a5:aa:5f:40:
2b:84:5a:82:5c:19:b1:19:3b:e0:9e:86:14:d1:05:6f:7d:97:
95:68:00:a2:7b:12:69:5b:59:e5:c2:a5:26:d6:30:3c:3d:66:
1a:c6:bb:11:b2:33:ad:e4:2c:8a:18:e8:e1:5b:21:18:b1:31:
57:ee:f2:49:81:41:e5:fa:4e:94:eb:c1:e4:f0:30:f3:16:fc:
af:57:c9:56:10:97:33:6d:c9:9d:6e:bc:55:ed:06:93:04:0f:
1b:06:7c:a9:1b:01:83:eb:29:4f:7e:2b:98:43:9f:b7:38:bf:
e9:0e:a4:46:cf:15:a3:63:14:b7:b9:a4:90:cc:cd:5b:75:86:
e3:a0:5c:ad:ce:48:49:56:a2:5a:f3:96:81:54:15:97:21:6f:
a0:31:8b:d6:4e:2b:a0:ff:0b:78:59:c0:ef:4e:43:38:46:4f:
1d:9a:e9:57:41:8e:ba:04:79:57:f5:eb:42:49:41:05:55:0a:
fa:7b:ae:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:39:15 2025 by rpki-client