Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/N3E-5Zyi8euO3dTcUymx5CobBRk.roa
File: N3E-5Zyi8euO3dTcUymx5CobBRk.roa (raw, json)
Hash identifier: G6VfsVxaCMc02yuwaUJ5OkN2UGEI1mDuV8m7ZNiKRUc=
Subject key identifier: 37:71:3E:E5:9C:A2:F1:EB:8E:DD:D4:DC:53:29:B1:E4:2A:1B:05:19
Certificate issuer: /CN=525b705a91dbc30ed10eb7222b7797b834e01863
Certificate serial: 018CC5002C85A6D9E3EB61D52892136F6557
Authority key identifier: 52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/N3E-5Zyi8euO3dTcUymx5CobBRk.roa
Signing time: Mon 01 Jan 2024 12:29:32 +0000
ROA not before: Mon 01 Jan 2024 12:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204880
IP address blocks: 185.236.240.0/23 maxlen: 24
185.236.242.0/23 maxlen: 24
2a0d:eb00::/32 maxlen: 32
2a0d:eb01::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:2c:85:a6:d9:e3:eb:61:d5:28:92:13:6f:65:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525b705a91dbc30ed10eb7222b7797b834e01863
Validity
Not Before: Jan 1 12:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37713ee59ca2f1eb8eddd4dc5329b1e42a1b0519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6b:97:91:df:88:c0:c0:49:68:8b:5a:b2:cc:
80:d5:fb:9f:aa:40:b5:85:55:04:98:b3:44:b1:0a:
bc:1a:6c:86:70:38:be:d1:11:90:8c:e0:56:6b:d9:
ad:6a:4f:20:5d:41:72:51:a6:85:73:4e:8e:22:52:
d8:56:7b:4e:20:bc:82:c8:45:45:29:0a:45:49:36:
13:b2:20:66:48:6e:51:48:d0:1f:6d:ab:3a:1d:0b:
47:4b:99:9c:e0:99:36:ef:5c:49:6a:36:3e:42:9b:
b7:d0:e4:25:f6:9c:5c:a1:fd:fe:d6:9e:ba:6d:be:
d4:cc:27:f0:d4:e4:dd:06:42:44:da:53:70:55:c4:
a3:90:99:90:8a:6f:39:33:6a:a7:20:e8:06:b6:58:
cc:e6:8b:01:ae:c3:09:0f:84:06:39:9d:05:a4:de:
ae:d4:db:5f:db:c0:a1:b1:d1:8c:da:48:fc:a5:f5:
88:d9:44:9b:3f:ab:b8:46:a3:a6:f5:f0:e1:04:a0:
5e:72:1e:25:da:ad:9d:e6:aa:b4:3f:e9:5c:c1:70:
e7:59:ec:61:f3:55:b1:a7:f1:44:c8:f2:96:34:f8:
30:c9:74:00:c6:48:4d:68:6e:99:7b:1d:7e:29:a1:
50:fb:a3:cc:14:b9:18:6e:c6:61:9f:d9:17:01:5d:
8c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:71:3E:E5:9C:A2:F1:EB:8E:DD:D4:DC:53:29:B1:E4:2A:1B:05:19
X509v3 Authority Key Identifier:
keyid:52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/N3E-5Zyi8euO3dTcUymx5CobBRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.240.0/22
IPv6:
2a0d:eb00::-2a0d:eb01:ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
82:f6:87:5d:49:02:b4:64:51:3a:9a:34:1b:c7:69:35:a8:23:
df:b4:22:da:6f:8b:e5:51:7d:c6:41:d6:5c:51:24:a6:b8:e5:
0e:fa:bc:ac:e5:1b:30:75:9d:56:c3:40:e9:09:b5:fb:17:2b:
90:00:00:3e:dc:8d:aa:16:03:19:5d:ab:f0:b2:7a:7d:f8:3b:
cc:d8:97:35:de:5d:e7:ee:5f:82:aa:c4:2b:55:5b:19:3d:1a:
c8:cb:a6:29:df:18:5f:db:3b:87:a1:9d:10:ab:86:0e:55:cc:
b6:5e:d8:ea:24:07:5d:7d:7c:bf:ed:e4:e4:92:fe:b1:a2:95:
01:d8:84:fe:6e:a3:48:6a:f7:0e:27:2b:5d:3f:7d:66:ff:3b:
28:79:68:a2:ad:55:40:61:d1:15:2a:dc:d3:97:69:ff:f7:a8:
ac:e8:ac:eb:ad:fd:82:e8:69:15:26:db:4c:42:dd:df:1a:b0:
f6:2e:3c:e4:1b:83:fb:7d:41:3b:63:b5:74:90:74:d1:a8:f7:
d2:0c:30:d8:af:74:41:73:b8:99:6f:6b:b0:2e:7a:64:87:fb:
87:99:9a:69:e2:6d:4e:97:1e:fd:2f:32:0e:1d:67:74:a4:11:
ab:3c:b3:d7:30:a4:ac:b0:66:c0:b6:fc:5d:8d:e8:8a:ef:a2:
a3:9d:2b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:41:32 2025 by rpki-client