Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nFBZNvW7OPh1QK2akKTX0EGehSE.roa
File: nFBZNvW7OPh1QK2akKTX0EGehSE.roa (raw, json)
Hash identifier: u8Wht/uFNIcHlKZkXB6ULlZmIKRglqOPJMg8pslxRDE=
Subject key identifier: 9C:50:59:36:F5:BB:38:F8:75:40:AD:9A:90:A4:D7:D0:41:9E:85:21
Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial: 018CC3B66D2BCD9DA04884150D8F1FF83079
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nFBZNvW7OPh1QK2akKTX0EGehSE.roa
Signing time: Mon 01 Jan 2024 06:29:21 +0000
ROA not before: Mon 01 Jan 2024 06:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57692
IP address blocks: 194.146.111.0/24 maxlen: 24
91.232.154.0/24 maxlen: 24
91.232.155.0/24 maxlen: 24
91.232.156.0/24 maxlen: 24
2001:67c:1be8::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:6d:2b:cd:9d:a0:48:84:15:0d:8f:1f:f8:30:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Validity
Not Before: Jan 1 06:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c505936f5bb38f87540ad9a90a4d7d0419e8521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:10:f6:45:a0:6a:c5:37:51:96:47:5b:3b:
49:82:ee:0a:b9:59:e3:fe:dc:59:7e:17:24:3d:75:
57:f3:c6:0a:48:60:16:08:5d:b8:09:fd:96:eb:e1:
5b:ce:8f:50:65:08:a3:fb:b7:23:00:aa:0b:e9:19:
42:1d:2b:d3:91:b4:89:b7:32:7b:0d:e2:94:2a:72:
f1:22:a2:2c:05:16:ac:1f:d1:95:3d:6d:06:8d:cd:
5e:61:3c:d2:2d:a9:40:8f:7d:99:00:28:26:57:cc:
13:1c:d7:b6:37:b2:e8:81:25:53:a7:d0:24:69:d2:
69:c0:db:a2:f7:3e:46:88:47:bb:03:2a:93:6d:6c:
5b:77:25:76:aa:27:87:32:28:fc:da:d3:8e:8c:c1:
ee:a5:fc:e1:72:f9:f2:f2:7e:00:f5:b5:f4:4c:9f:
db:b7:9f:84:a2:fa:7b:4c:c1:da:9f:44:68:9f:f4:
e4:e4:1a:83:66:aa:9f:f8:a4:64:1f:cb:31:a7:d8:
98:33:1f:9d:d6:68:dc:4d:e5:a3:e8:36:ff:81:26:
5c:34:de:25:de:5f:1e:7a:53:56:3f:63:64:df:65:
3f:ca:0e:60:ee:5c:a2:62:30:97:25:21:28:f1:1b:
e3:1e:1f:00:75:92:27:68:5e:32:3d:b8:51:f6:4b:
6f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:50:59:36:F5:BB:38:F8:75:40:AD:9A:90:A4:D7:D0:41:9E:85:21
X509v3 Authority Key Identifier:
keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nFBZNvW7OPh1QK2akKTX0EGehSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.154.0-91.232.156.255
194.146.111.0/24
IPv6:
2001:67c:1be8::/48
Signature Algorithm: sha256WithRSAEncryption
8a:e2:96:b2:f9:a0:15:9e:06:fb:1c:18:a7:1e:aa:2f:f1:c7:
d1:86:b8:52:ad:1b:cc:32:02:c9:16:3e:68:be:5a:3e:e8:39:
f6:2c:ff:a2:b6:6e:8b:99:8a:08:b0:0f:9b:ef:eb:a0:18:d9:
85:03:ba:13:cd:af:eb:79:0c:fd:62:d2:95:0d:47:d7:90:7f:
59:00:9b:89:8c:32:72:85:9e:6b:c8:b8:1c:15:94:05:40:e3:
52:86:63:9b:09:c6:a4:36:42:21:25:1a:2f:0f:88:4e:a4:ec:
58:b1:88:64:df:7a:e1:1c:21:4b:ee:f0:f5:aa:d7:0e:a7:d4:
44:25:4f:b7:bf:0d:e0:43:6d:ca:0b:78:4d:36:bc:e4:11:d4:
58:c3:5c:e1:ec:00:57:71:9f:18:d7:60:8e:3d:2b:61:72:a4:
2c:46:d1:ab:b4:cd:db:50:c7:59:42:51:07:a1:81:1e:4e:4b:
fc:11:43:24:c4:64:d5:f7:c9:a8:37:ab:9c:59:16:2f:00:8f:
b4:2b:61:df:92:1b:23:18:bd:12:b0:cc:45:e7:a7:d1:51:df:
0d:10:ab:9e:ff:f8:8c:c9:37:78:06:fc:01:85:e8:34:d8:6d:
46:fa:9c:c6:82:e6:3c:47:e4:04:14:89:e6:ad:b4:dc:f4:b0:
10:d6:4b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:00 2025 by rpki-client