Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/nskkCe5F7VEiPwWhEfYvY8Gye3k.roa
File: nskkCe5F7VEiPwWhEfYvY8Gye3k.roa (raw, json)
Hash identifier: MwYoRRMzc4od9isTWMPF1Zad4IlyQ7klTVwFj+SKCx8=
Subject key identifier: 9E:C9:24:09:EE:45:ED:51:22:3F:05:A1:11:F6:2F:63:C1:B2:7B:79
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 01966CAF007367C7F12F2EFA000E7C25FF6B
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/nskkCe5F7VEiPwWhEfYvY8Gye3k.roa
Signing time: Fri 25 Apr 2025 11:22:10 +0000
ROA not before: Fri 25 Apr 2025 11:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48031
IP address blocks: 91.232.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Apr 2025 11:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6c:af:00:73:67:c7:f1:2f:2e:fa:00:0e:7c:25:ff:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Apr 25 11:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ec92409ee45ed51223f05a111f62f63c1b27b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6b:a6:9d:9d:1e:a9:4b:21:d8:79:da:d9:21:
0f:df:d4:b0:fb:c8:ae:83:9d:f5:04:4c:5f:83:5a:
44:9a:09:58:8d:71:64:29:d0:e5:1e:7f:a9:9f:89:
53:7e:d7:6c:6d:53:54:f2:49:a0:5d:f5:d0:c6:67:
8f:f7:e8:69:53:7d:5a:c3:28:fd:57:49:29:74:99:
dd:fd:9f:ef:97:56:23:2a:64:7b:5f:44:dc:79:ce:
b9:af:00:ca:3c:40:bd:94:bf:68:74:43:24:51:fa:
0d:dc:8e:e9:a2:47:44:42:60:c4:c5:39:30:31:c9:
99:7f:59:a2:2a:fa:d6:a1:8c:ec:b8:1a:6d:83:bc:
2d:6c:7a:4b:7f:2a:71:40:c9:ff:57:30:03:d4:ef:
af:ad:67:10:b8:38:6c:7d:12:1b:f6:c5:93:9b:02:
3e:cf:0f:bd:97:68:c7:1d:56:65:59:e0:69:9d:d0:
35:9b:2d:1d:a9:ea:23:6f:b2:83:6e:4e:2b:38:ed:
15:72:c1:87:92:51:ca:53:07:e5:83:a3:6f:a7:4a:
69:7c:d2:13:d7:e3:ab:b0:cb:4e:96:24:4c:70:98:
eb:a3:f9:1c:b8:07:2a:d1:ed:ab:be:3d:db:a6:5d:
51:f3:ff:8b:6c:df:a5:ae:a4:b9:c2:93:62:70:d4:
d9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C9:24:09:EE:45:ED:51:22:3F:05:A1:11:F6:2F:63:C1:B2:7B:79
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/nskkCe5F7VEiPwWhEfYvY8Gye3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.8.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:2b:1b:2f:41:7e:26:c3:51:9c:5e:ef:5c:bb:7e:2b:59:46:
61:ac:04:ec:90:45:61:6b:8e:6f:2b:59:29:be:53:f1:6d:5e:
5c:2f:4d:75:91:18:30:c0:fc:46:af:9e:83:dd:b5:5b:94:30:
02:9a:c9:13:b2:ce:68:db:15:27:f3:bd:be:af:33:0e:97:2e:
e3:07:56:8a:d4:e1:bb:d5:de:3d:c9:da:15:e0:73:20:de:1f:
25:3c:f8:e8:30:06:a3:42:6d:94:95:91:42:55:4b:c4:32:af:
da:65:c2:fc:9a:dc:06:61:63:ba:b4:87:a2:37:53:eb:97:06:
ed:53:8e:c5:9a:ee:c4:04:80:fd:b1:3c:5d:da:38:b7:33:c8:
06:85:ef:70:47:d3:b9:3f:8e:52:d2:fd:97:24:45:6e:df:64:
80:09:13:f5:b9:0c:3c:88:e5:f6:1e:71:f3:ef:fe:17:2a:ff:
c0:4d:e4:02:3b:e6:d5:b1:90:73:7d:3c:b4:35:aa:e7:5e:51:
9c:23:3e:1c:22:d6:93:3c:48:f1:9d:f4:ad:eb:48:3d:7a:a6:
ba:65:fe:b9:9c:d6:ad:ce:c3:a5:5d:78:cb:70:fd:94:57:05:
4d:de:f4:c4:f1:35:4b:d1:e9:79:52:3a:77:29:89:84:85:bc:
e9:0e:7a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:27:25 2025 by rpki-client