Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/NA0trVDP3IfIOrtlvb9lgC3R-yE.roa
File: NA0trVDP3IfIOrtlvb9lgC3R-yE.roa (raw, json)
Hash identifier: ESnKqvhcd8RRpPRGfijRBHm6LGBNOfvPLl3iN2vbV6I=
Subject key identifier: 34:0D:2D:AD:50:CF:DC:87:C8:3A:BB:65:BD:BF:65:80:2D:D1:FB:21
Certificate issuer: /CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Certificate serial: 018EEB9D6B66961E7B6281400F15D3AD23B9
Authority key identifier: 53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/NA0trVDP3IfIOrtlvb9lgC3R-yE.roa
Signing time: Wed 17 Apr 2024 10:32:26 +0000
ROA not before: Wed 17 Apr 2024 10:32:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34162
IP address blocks: 194.0.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:eb:9d:6b:66:96:1e:7b:62:81:40:0f:15:d3:ad:23:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Validity
Not Before: Apr 17 10:32:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=340d2dad50cfdc87c83abb65bdbf65802dd1fb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:dc:9b:99:8f:a9:bd:1f:57:8a:12:dc:23:c0:
1b:cf:51:30:ab:ac:49:e6:13:9b:87:b8:e4:34:27:
4d:92:27:0d:79:7e:e2:c1:be:f8:f3:6f:38:4b:50:
c4:7a:82:56:05:8c:7e:c8:f5:d1:2b:bf:01:fa:74:
37:90:6b:f2:54:21:6d:1a:13:67:d6:bf:67:80:34:
4e:09:bc:bd:36:ae:7f:ac:9e:9c:ac:fa:36:c1:c8:
81:d6:04:bb:c1:29:60:b3:c7:7a:ab:6e:f1:72:3e:
36:64:08:d5:1a:f1:27:1c:56:15:d2:fc:f7:d9:59:
48:29:de:5b:9c:81:96:b9:5f:4d:46:b3:2f:d9:c9:
28:5f:43:f3:83:c4:2e:bd:40:f1:53:19:f6:77:02:
14:f9:75:3c:d5:53:9e:c3:42:71:c8:90:5e:d3:20:
c4:ba:d7:1e:52:22:42:ef:46:0f:d0:b2:f4:27:e2:
17:ae:2e:94:64:5a:a8:13:55:90:38:e2:0d:57:47:
ca:3c:44:04:b3:04:1f:57:dd:26:11:ce:3d:ca:8c:
c5:53:2b:b8:5b:e9:c9:83:35:ce:bc:f9:d0:74:2d:
cc:62:f9:1b:96:85:f9:2a:7b:09:20:74:90:ff:07:
6e:fa:3b:11:a2:90:81:13:01:81:f1:94:be:03:49:
16:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0D:2D:AD:50:CF:DC:87:C8:3A:BB:65:BD:BF:65:80:2D:D1:FB:21
X509v3 Authority Key Identifier:
keyid:53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/NA0trVDP3IfIOrtlvb9lgC3R-yE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.130.0/24
Signature Algorithm: sha256WithRSAEncryption
01:38:00:71:21:69:c7:ee:8e:13:38:74:c6:e7:cf:66:6b:3a:
5e:03:d6:8d:11:0c:e8:14:4d:ce:5a:fe:ef:c4:71:50:d0:94:
ce:a8:e3:00:7e:b5:3d:be:dd:ca:e2:ba:d8:d6:b5:eb:f5:20:
57:37:1e:3a:14:36:ac:cb:e9:69:da:77:31:aa:37:42:b6:ec:
26:23:2d:85:ff:8c:a9:38:d4:b3:ee:d7:a3:dc:1e:45:3b:12:
85:76:da:2f:2e:fb:bf:e4:6e:5c:f0:e1:0d:24:5c:49:00:cc:
e0:b8:b9:84:b8:1c:45:ff:df:b7:d2:a4:f6:9e:cf:a8:5d:25:
1b:63:9b:d5:9f:a1:5f:15:2a:85:ce:4c:99:7c:1a:3f:a1:97:
88:47:f0:dd:42:64:c7:de:3f:b1:d5:03:0f:49:d3:02:09:a7:
7e:1f:e6:07:2b:8e:20:7d:ab:6d:b3:f9:93:38:0b:34:af:ba:
d9:77:c1:5f:94:96:53:57:13:e7:c6:16:6c:4d:86:c6:82:04:
64:dc:30:05:29:42:63:74:78:0b:34:04:a9:18:97:44:f0:f5:
71:99:44:25:90:5e:b7:81:8c:aa:20:67:55:27:a8:79:4e:b9:
54:0e:05:ea:69:ad:3f:29:61:14:59:34:40:c1:1c:d5:07:35:
a2:ba:11:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:17:25 2025 by rpki-client