Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/NL94F7dczYLoD7qj8Mx-0cL7aa8.roa
File: NL94F7dczYLoD7qj8Mx-0cL7aa8.roa (raw, json)
Hash identifier: 6CsY4+o9eJCDu7k4+kLQ878eWpqTZmC8xeGdJ1yxFJI=
Subject key identifier: 34:BF:78:17:B7:5C:CD:82:E8:0F:BA:A3:F0:CC:7E:D1:C2:FB:69:AF
Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial: 01945F3B54E2523594A95E7E015F723A8BF4
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/NL94F7dczYLoD7qj8Mx-0cL7aa8.roa
Signing time: Mon 13 Jan 2025 10:35:11 +0000
ROA not before: Mon 13 Jan 2025 10:35:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197075
IP address blocks: 5.183.111.0/24 maxlen: 24
185.25.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jan 2025 11:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:3b:54:e2:52:35:94:a9:5e:7e:01:5f:72:3a:8b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Validity
Not Before: Jan 13 10:35:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34bf7817b75ccd82e80fbaa3f0cc7ed1c2fb69af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:b1:b6:16:8e:f7:56:cb:79:31:43:45:b1:
60:a8:bb:4f:cb:e6:67:b1:c4:dd:2a:15:8a:19:59:
2a:75:f9:9a:3c:d1:fb:33:38:3d:0b:f2:c7:88:8c:
30:42:4b:ca:24:50:73:36:b7:82:da:9b:4e:6e:d7:
3f:f2:30:5e:68:31:a3:cc:f7:58:7e:e0:91:d5:80:
55:4d:87:90:85:83:2f:61:b9:32:a0:64:ff:25:81:
da:e5:19:27:9d:28:3f:e5:45:b0:30:e8:a0:b9:69:
10:97:b0:f3:d1:4b:4c:22:6c:95:f8:1f:0e:99:89:
5e:48:fe:19:fa:53:0b:e1:ed:9b:09:00:c8:11:ec:
c6:03:41:d7:5d:9f:4b:a9:77:79:6d:30:5c:62:13:
f6:1a:d5:11:e0:ef:9e:6a:ff:7a:06:a8:cb:56:22:
b8:24:7a:76:ed:57:8d:85:74:74:59:36:97:b2:bc:
de:d3:45:b1:11:10:17:88:78:cd:f2:dd:5b:8b:e7:
69:f7:a5:69:2f:df:a3:9f:f1:18:72:9c:03:19:11:
b2:20:b7:7a:dc:a0:1e:5b:02:95:9b:7e:55:1e:e0:
44:36:f5:de:b7:79:87:a2:3e:d7:a3:c0:c5:c5:eb:
46:6d:f1:78:57:8c:12:cb:61:a9:19:61:b6:05:d5:
6f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BF:78:17:B7:5C:CD:82:E8:0F:BA:A3:F0:CC:7E:D1:C2:FB:69:AF
X509v3 Authority Key Identifier:
keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/NL94F7dczYLoD7qj8Mx-0cL7aa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.111.0/24
185.25.233.0/24
Signature Algorithm: sha256WithRSAEncryption
50:f5:39:5e:a0:f9:a3:f9:c6:45:3a:bb:5a:51:9b:5d:51:36:
3f:c1:f4:37:d8:f9:92:a2:83:f2:a0:6d:00:df:17:53:6e:cb:
f4:65:4a:83:11:03:94:21:f7:2f:53:cc:12:fe:10:07:33:bd:
42:2f:4d:bf:c9:86:b6:85:a0:b0:7e:f5:b7:84:d7:be:74:94:
03:84:f6:99:18:ee:82:17:fa:87:fd:8e:5e:9d:dc:3b:84:09:
db:02:4e:60:a7:16:a4:56:c4:6e:6a:73:bc:f5:1c:7f:13:f8:
61:33:f9:34:ea:88:33:03:1c:0c:0c:13:ee:e5:3a:3e:e4:33:
51:d4:67:3b:53:96:2e:53:b4:d1:68:da:94:8a:33:a2:57:a7:
df:fe:21:9b:d5:61:92:fd:8f:9f:53:35:af:67:f1:b0:06:3d:
c6:e0:db:f1:82:44:3c:98:9f:b0:ce:48:7a:42:5a:ff:12:d1:
fc:a5:c1:9e:50:de:9d:4c:e8:1b:6a:3c:87:e5:05:8b:db:d4:
f1:97:10:ca:51:5f:ef:d6:f4:2a:11:68:13:84:bb:a1:34:da:
0b:9f:c0:3d:f8:92:a2:41:42:10:88:ca:17:8d:92:07:81:eb:
ab:37:30:c8:3c:ed:26:6d:d6:21:3b:6c:36:ff:e0:a4:eb:f5:
90:dc:f2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:00:51 2025 by rpki-client