Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NsSKk-oxpeALlLvnNcUGNvWJgj0.roa
File: NsSKk-oxpeALlLvnNcUGNvWJgj0.roa (raw, json)
Hash identifier: dGOfEAOVDLz+ARR4w1EHUBW/m8D19XNMCB1IAym1SVQ=
Subject key identifier: 36:C4:8A:93:EA:31:A5:E0:0B:94:BB:E7:35:C5:06:36:F5:89:82:3D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0190D93F664A85A57E410676809642F8A07F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NsSKk-oxpeALlLvnNcUGNvWJgj0.roa
Signing time: Mon 22 Jul 2024 07:02:09 +0000
ROA not before: Mon 22 Jul 2024 07:02:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395954
IP address blocks: 45.145.58.0/24 maxlen: 24
45.147.100.0/24 maxlen: 24
45.147.101.0/24 maxlen: 24
45.147.102.0/24 maxlen: 24
45.147.103.0/24 maxlen: 24
45.152.201.0/24 maxlen: 24
45.155.200.0/24 maxlen: 24
45.155.201.0/24 maxlen: 24
45.155.202.0/24 maxlen: 24
45.155.203.0/24 maxlen: 24
193.8.8.0/24 maxlen: 24
194.41.56.0/24 maxlen: 24
2a0f:e1c5::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 05 Sep 2024 14:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d9:3f:66:4a:85:a5:7e:41:06:76:80:96:42:f8:a0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 22 07:02:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36c48a93ea31a5e00b94bbe735c50636f589823d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:a0:40:f8:08:18:a4:38:55:f3:54:ee:f9:
b8:fa:64:b7:04:d4:47:4f:ec:42:30:a7:d0:e6:88:
74:f5:2c:51:46:84:2a:b0:09:84:96:01:50:09:bc:
82:89:0e:8e:35:76:ce:69:b0:83:4b:80:eb:ff:c3:
54:a1:13:db:28:68:70:89:3e:c5:46:64:ed:92:c7:
46:89:c3:3e:18:6a:71:45:a6:48:f9:69:fb:85:e4:
69:ce:20:0b:b3:58:26:81:b0:1d:65:ec:a8:3e:e5:
10:1c:1b:1c:1f:63:41:3d:27:54:24:2f:a0:ab:71:
40:77:77:a0:7d:13:68:7f:48:60:01:4c:75:bd:78:
40:2f:21:c2:a3:48:86:e9:d0:b1:78:7c:83:92:ea:
21:54:74:cb:e7:4a:c6:ff:a7:32:09:48:3e:78:9d:
bf:35:38:bc:ed:a5:65:01:bb:7d:62:7b:f9:49:05:
74:68:d0:15:22:85:ec:c4:bd:6e:87:3f:4b:6d:50:
3a:d5:31:38:55:63:47:80:7d:a6:4e:06:97:5a:f9:
cd:a6:50:35:21:19:28:52:3a:2e:45:79:7c:27:2d:
5f:44:91:dd:96:12:04:e2:92:9c:a5:0d:bc:ef:d7:
af:ef:6e:1a:ad:63:9c:10:4a:26:97:e8:67:97:ab:
12:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C4:8A:93:EA:31:A5:E0:0B:94:BB:E7:35:C5:06:36:F5:89:82:3D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NsSKk-oxpeALlLvnNcUGNvWJgj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.58.0/24
45.147.100.0/22
45.152.201.0/24
45.155.200.0/22
193.8.8.0/24
194.41.56.0/24
IPv6:
2a0f:e1c5::/32
Signature Algorithm: sha256WithRSAEncryption
39:a5:59:cf:50:9e:42:ee:b5:44:72:72:2e:5e:1e:a7:08:86:
b6:5f:cc:bf:c8:de:ac:93:bd:32:43:ee:24:8a:05:6f:a4:09:
4e:12:d6:32:dd:d9:8f:c3:e2:01:43:3c:11:ed:15:d5:6f:fe:
09:d2:9f:58:4a:92:9d:ed:10:07:aa:b0:9a:31:2f:a4:41:e4:
c4:23:98:c1:eb:0d:ca:52:ca:99:09:83:a4:73:95:72:d3:45:
66:1e:ea:aa:36:c8:40:59:29:d1:7a:9e:ce:49:c6:cc:3b:c7:
35:35:69:d5:f3:e2:ff:d0:b0:2b:6b:e3:61:dd:32:d1:ca:90:
aa:c8:c2:c6:b2:f9:7e:a1:42:1f:bf:a5:4d:54:b4:1c:87:06:
16:2c:8d:9f:8e:50:b9:24:0b:6a:07:d5:11:73:c8:2f:a1:f2:
7a:61:a1:8e:57:fa:a6:ad:2c:84:28:d2:35:7f:4e:5d:cf:e3:
bf:6d:fd:89:34:a3:20:79:70:c7:f3:a2:c4:31:2d:9f:6d:e3:
87:f0:a5:60:af:9f:37:6f:be:7b:2e:98:31:ce:5e:5e:0a:f0:
24:4c:7d:a9:c7:cd:8d:75:b1:05:6c:80:3d:8c:44:52:ad:9e:
ee:36:a9:fb:29:d6:10:f4:61:68:48:5a:11:06:27:7d:9f:d7:
97:a4:0d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:15 2025 by rpki-client