Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/NLPYqUVptJzhL5o3IWxK9bMrqSU.roa
File: NLPYqUVptJzhL5o3IWxK9bMrqSU.roa (raw, json)
Hash identifier: rSofX5ip0H1ZUCuHGjAHkYB1qbk0Sq+nWtOaMDlj6FM=
Subject key identifier: 34:B3:D8:A9:45:69:B4:9C:E1:2F:9A:37:21:6C:4A:F5:B3:2B:A9:25
Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Certificate serial: 0192E8279883E94F9D920AB2161D2B4DF4D2
Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/NLPYqUVptJzhL5o3IWxK9bMrqSU.roa
Signing time: Fri 01 Nov 2024 14:36:01 +0000
ROA not before: Fri 01 Nov 2024 14:36:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199402
IP address blocks: 46.28.235.0/24 maxlen: 24
185.123.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Nov 2024 06:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e8:27:98:83:e9:4f:9d:92:0a:b2:16:1d:2b:4d:f4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Validity
Not Before: Nov 1 14:36:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34b3d8a94569b49ce12f9a37216c4af5b32ba925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0f:9a:c5:9c:67:b1:8e:a1:49:80:bd:ed:25:
8b:6f:dc:da:68:42:e7:aa:bf:e6:f2:16:2e:ae:2f:
72:b0:66:cd:78:23:34:18:43:6e:c9:00:c2:12:31:
f4:ea:40:79:44:6e:b0:b6:23:c6:50:bb:c1:94:75:
6d:3c:3a:aa:82:1e:2a:3e:ad:65:26:4e:9f:bf:42:
98:e3:e4:b1:1b:43:ac:46:80:0f:a7:b3:5f:19:1a:
7c:01:34:e8:07:79:f9:d7:0c:3d:86:db:c0:37:2b:
4a:f1:dc:6c:5e:ce:e1:34:9b:6b:1c:14:d4:3e:ff:
0f:48:aa:46:5b:67:79:01:6c:9d:37:92:ee:5f:18:
0e:06:4f:4e:a0:48:e1:c4:7e:28:48:33:56:a0:3f:
97:a8:80:f3:0b:15:e2:0d:e2:4f:ce:66:ae:f8:b4:
ad:c7:7a:1a:86:af:a0:ea:f8:52:4a:13:76:8f:ac:
71:d9:03:b6:a3:5e:27:f9:20:86:6b:5c:90:04:54:
48:f2:17:0d:bc:f1:99:4e:24:0c:1e:b8:2f:4f:a5:
d3:c4:7e:da:70:9c:fd:a8:2e:df:4c:9e:5a:f1:66:
0b:92:fb:ab:36:d8:fc:9c:ff:a2:3c:62:fe:5f:a8:
2b:65:49:8b:d9:0b:3f:a1:3a:24:00:a8:37:c8:f1:
c3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B3:D8:A9:45:69:B4:9C:E1:2F:9A:37:21:6C:4A:F5:B3:2B:A9:25
X509v3 Authority Key Identifier:
keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/NLPYqUVptJzhL5o3IWxK9bMrqSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.235.0/24
185.123.103.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:28:8c:6c:57:85:9b:31:72:26:4e:59:11:d7:7e:24:19:5d:
6d:7e:89:fa:a7:d7:d0:ae:5c:37:2a:d3:d5:db:cf:55:86:d0:
9a:53:4e:f2:48:35:68:b2:db:3d:7d:54:5d:d4:53:c8:53:d2:
1e:49:20:c9:3d:49:cb:82:58:da:2d:0f:71:e2:51:7a:23:26:
20:37:a3:37:57:7d:32:85:c1:ff:b6:be:b6:4d:3a:30:c8:68:
27:8d:a9:a1:4d:67:bf:c8:be:ec:13:34:da:07:40:61:9a:a9:
8a:80:cb:88:7f:f8:98:d4:ec:d0:82:39:e8:62:f3:f6:76:82:
2c:c3:ca:5d:01:63:6a:92:70:5e:1f:99:47:15:1b:12:35:da:
70:67:cf:68:2a:1d:93:53:38:65:c6:45:09:46:77:5a:3c:cc:
ad:c6:39:0e:c7:35:49:1b:74:07:02:b4:c1:3d:78:ef:ad:39:
6f:3c:a5:73:99:11:a3:43:42:f1:1c:62:92:26:67:71:11:eb:
37:da:83:af:46:ad:46:78:fd:24:7c:8e:74:69:12:f0:f1:a2:
3d:26:cc:58:87:a7:c9:e7:7b:3d:06:ab:7a:2a:41:5c:67:49:
82:6b:cf:82:fc:3e:37:2b:09:af:6d:3f:28:6b:46:71:61:f3:
e8:a8:ab:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:13 2025 by rpki-client