Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/nNCBPaYfCi-WIlfN6Gq7qX3akz8.roa
File: nNCBPaYfCi-WIlfN6Gq7qX3akz8.roa (raw, json)
Hash identifier: R6bFLFZswPcJtbo1/J1cVXyX+zeyPUHKeJ4144lkLYA=
Subject key identifier: 9C:D0:81:3D:A6:1F:0A:2F:96:22:57:CD:E8:6A:BB:A9:7D:DA:93:3F
Certificate issuer: /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial: 0193B65FF6EDAB653B899924B16EC4EA298D
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/nNCBPaYfCi-WIlfN6Gq7qX3akz8.roa
Signing time: Wed 11 Dec 2024 15:39:22 +0000
ROA not before: Wed 11 Dec 2024 15:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61087
IP address blocks: 94.141.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b6:5f:f6:ed:ab:65:3b:89:99:24:b1:6e:c4:ea:29:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
Validity
Not Before: Dec 11 15:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cd0813da61f0a2f962257cde86abba97dda933f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:96:1a:fa:3a:78:7b:25:0a:ab:f9:d4:46:
5f:b0:7d:d8:2f:d7:23:f7:66:50:f7:29:ff:da:d6:
6c:61:23:90:85:80:ac:c0:f4:5f:6c:3a:27:43:e0:
54:03:c1:3c:24:06:f0:20:20:93:52:1d:15:8a:d0:
19:83:04:2d:1d:f1:43:1a:da:80:25:9a:70:a8:81:
b9:d4:c7:1b:4e:6d:d1:f3:ef:6d:42:ea:7c:34:e6:
4f:3c:5a:2f:df:9b:88:80:db:d3:b8:9c:c2:63:28:
28:f9:34:f7:de:a2:9f:4c:49:0b:06:9a:34:4b:29:
6e:1b:2a:51:16:87:c7:b6:36:26:dc:a8:9e:ab:81:
ed:f4:72:61:bc:f8:24:51:80:92:01:9d:2c:d1:77:
d9:2f:8f:5a:f5:06:0a:af:46:c3:34:cf:19:fe:40:
66:15:c9:70:88:53:6d:63:71:df:d4:42:08:80:39:
d6:4b:df:8d:97:b4:2e:85:10:c4:6e:16:1c:c8:c5:
76:dd:db:f9:73:89:66:c2:00:5d:90:33:6b:76:d2:
1b:6c:a9:85:57:d7:c8:02:a4:a2:21:ae:8f:b2:a1:
a5:8c:d4:28:93:1e:fa:ae:97:b9:8c:26:04:cc:23:
a6:dc:3a:ca:7f:75:72:93:21:68:c3:98:ac:1e:ae:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D0:81:3D:A6:1F:0A:2F:96:22:57:CD:E8:6A:BB:A9:7D:DA:93:3F
X509v3 Authority Key Identifier:
keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/nNCBPaYfCi-WIlfN6Gq7qX3akz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:34:7f:a0:63:f0:d8:eb:e9:fc:e8:8d:b1:1c:0e:48:92:bb:
23:10:83:f0:d3:b8:4e:7b:20:f8:5b:4b:ff:74:59:7a:84:af:
e0:86:03:98:cc:69:59:52:b5:97:42:ed:27:0a:50:5d:0b:68:
06:29:ec:39:36:30:da:60:46:2c:23:50:58:20:1a:b8:bc:eb:
9f:08:57:67:bf:2b:d8:a7:8c:7f:ca:15:88:8c:f2:7c:82:f4:
ff:07:67:38:94:8b:e2:13:d5:06:91:fa:57:d3:df:ba:ad:b6:
6e:87:1e:93:99:df:10:86:96:96:2f:0d:b7:b1:65:40:11:3a:
04:23:7e:57:9b:fe:cd:79:93:85:34:7d:4e:dc:70:a6:b3:12:
a2:14:6a:84:fd:6a:e1:be:cd:b8:2e:fc:25:30:d3:42:b7:6b:
60:f7:2a:ce:d6:81:0d:ff:2a:ac:ef:95:9d:95:6d:53:b1:f4:
77:99:62:aa:3c:f4:82:ea:81:f0:5c:23:44:f9:01:a2:ef:25:
1d:2b:3f:f5:39:a0:d8:36:bd:09:99:b7:c4:7a:eb:49:f7:14:
2f:9a:aa:4a:e5:67:55:19:d0:d2:e5:0d:21:f5:b5:7f:87:0a:
c7:fb:ba:e9:dc:7b:71:7b:fa:b4:7d:bb:0d:c3:7b:c5:a5:f2:
9f:94:c0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:35:38 2025 by rpki-client