Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/NI8nRWRzbY8kxlsAc0U-lF61dbQ.roa
File: NI8nRWRzbY8kxlsAc0U-lF61dbQ.roa (raw, json)
Hash identifier: ztCvsDFGdU97JTV0GnJGy6HICbUhyjxpt7xz4jRlY0Q=
Subject key identifier: 34:8F:27:45:64:73:6D:8F:24:C6:5B:00:73:45:3E:94:5E:B5:75:B4
Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Certificate serial: 019478B48EB5503319337316E8458787003B
Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/NI8nRWRzbY8kxlsAc0U-lF61dbQ.roa
Signing time: Sat 18 Jan 2025 09:18:06 +0000
ROA not before: Sat 18 Jan 2025 09:18:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.153.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 12:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:78:b4:8e:b5:50:33:19:33:73:16:e8:45:87:87:00:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Validity
Not Before: Jan 18 09:18:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=348f274564736d8f24c65b0073453e945eb575b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:68:b1:87:ad:50:9a:63:8a:fb:3e:d1:28:
f7:85:11:fd:2c:6f:64:8a:04:c8:58:04:41:cc:3c:
c4:ca:ae:1c:91:5a:43:c7:01:93:b8:05:02:e8:92:
5e:18:04:fe:12:5f:bd:56:d0:65:eb:76:74:b2:de:
37:36:51:4c:41:3d:c5:8a:c9:c0:3e:3e:6a:72:bd:
ba:14:ca:22:be:8f:77:8a:d0:5d:ee:d9:e5:5b:a5:
91:08:90:d1:44:7c:0b:80:9a:cd:ed:10:7f:08:93:
ab:7e:ff:97:4f:e2:fa:34:c8:6f:aa:e5:78:60:59:
11:f2:14:44:81:85:1a:22:20:29:d0:cc:9b:c2:1e:
6b:2e:f2:f6:e6:da:b6:93:83:f3:14:67:11:b2:49:
a5:07:a6:79:a2:7c:40:49:cb:a2:8f:97:ba:f5:75:
0c:d0:ec:0f:69:7c:64:53:69:71:da:89:bc:52:fa:
4d:9a:ee:2d:66:e7:d7:47:f0:2d:14:64:76:13:d3:
a4:44:d1:75:22:81:b5:3c:b3:d7:57:e6:73:d0:9b:
39:d8:f0:7e:6a:98:4d:50:42:2d:e2:63:68:e7:ac:
ec:90:20:e1:e4:36:e1:1c:7e:b3:da:d0:69:5b:2f:
9f:b8:b1:94:88:15:d7:df:9d:16:86:b6:d0:11:c5:
fb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8F:27:45:64:73:6D:8F:24:C6:5B:00:73:45:3E:94:5E:B5:75:B4
X509v3 Authority Key Identifier:
keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/NI8nRWRzbY8kxlsAc0U-lF61dbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.152.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d6:1b:2a:cc:2b:93:19:e1:7e:cd:50:92:68:22:21:f8:17:
95:00:73:fe:28:86:26:7d:44:ab:bd:71:d0:33:9e:be:9c:bd:
1f:8c:d9:a6:95:da:90:de:d5:5e:cf:be:c0:fe:6d:66:f3:e3:
91:90:9e:fa:5f:3e:49:3f:fc:12:cf:54:e3:b5:48:34:6c:ed:
02:b6:69:94:50:5d:73:9b:81:c0:a0:e4:28:41:15:a1:ac:b1:
f7:f4:22:c7:30:ea:78:a7:87:c8:ec:92:d3:c4:ae:58:7d:77:
71:82:ca:27:cb:dc:d8:41:5e:95:5a:5d:e3:d4:e6:b9:08:c5:
e3:c4:b8:7b:8f:19:c5:09:5f:c5:89:63:ad:ca:d6:29:ca:17:
66:2c:61:f2:8a:42:59:f9:e0:ee:c5:99:2a:71:a0:52:5a:ed:
58:df:50:af:f6:b3:75:a6:33:ba:b0:9b:bf:60:2e:f7:df:2a:
99:c7:bd:fb:32:dd:ac:fb:2a:13:68:af:17:19:59:d1:4e:50:
89:e1:2f:38:d9:42:fc:6d:f6:ba:03:3d:d9:25:1b:39:57:56:
21:f9:68:18:24:09:0a:23:c0:a9:c2:c5:6c:c9:e3:be:b2:b7:
20:c3:6a:3e:b5:5a:3b:83:3f:c2:de:bb:e3:06:c3:bb:49:df:
ec:4d:a4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:34 2025 by rpki-client