Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/NcopDDryY4T39PrWiq6zQdksmas.roa
File: NcopDDryY4T39PrWiq6zQdksmas.roa (raw, json)
Hash identifier: RoNBClIYI+b5e6N9z1ZI/AZnoF0me9luK3BMigpMP1g=
Subject key identifier: 35:CA:29:0C:3A:F2:63:84:F7:F4:FA:D6:8A:AE:B3:41:D9:2C:99:AB
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 019509DB03380B04563C7ED96148F59E2B3B
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/NcopDDryY4T39PrWiq6zQdksmas.roa
Signing time: Sat 15 Feb 2025 13:45:02 +0000
ROA not before: Sat 15 Feb 2025 13:45:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208046
IP address blocks: 193.142.146.0/24 maxlen: 24
2a0f:ca80::/48 maxlen: 48
2a0f:ca80:1::/48 maxlen: 48
2a0f:ca80:617::/48 maxlen: 48
2a0f:ca80:618::/48 maxlen: 48
2a0f:ca80:619::/48 maxlen: 48
2a0f:ca80:1100::/40 maxlen: 40
2a0f:ca80:1200::/40 maxlen: 40
2a0f:ca80:1337::/48 maxlen: 48
2a0f:ca80:1338::/48 maxlen: 48
2a0f:ca83:1337::/48 maxlen: 48
2a0f:ca84::/40 maxlen: 40
Validation: Failed, certificate revoked on Sun 16 Feb 2025 12:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:09:db:03:38:0b:04:56:3c:7e:d9:61:48:f5:9e:2b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Feb 15 13:45:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35ca290c3af26384f7f4fad68aaeb341d92c99ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:bb:06:aa:8b:ee:58:59:dc:24:74:71:f2:
b6:3b:8d:c5:ff:af:e7:bc:90:b6:29:4e:3c:d4:a2:
54:26:ee:56:66:2a:d0:2b:16:66:0f:34:2a:1f:2c:
44:ea:27:ad:68:32:f4:dd:a3:71:64:c5:f2:c7:4a:
54:c6:f1:b2:71:fb:ed:1b:67:19:c6:0c:4a:48:81:
0b:f4:7a:a4:9d:11:e2:b0:58:17:0b:22:0e:59:37:
1c:d3:dc:46:eb:10:2b:f1:f1:7a:56:7e:95:06:c5:
c8:61:e9:4c:52:67:77:19:1a:db:cc:07:2a:04:c0:
af:c6:02:b3:5a:94:f8:44:80:b2:b8:67:b3:73:c6:
b1:60:56:dd:b3:ea:cd:6a:b2:f6:87:45:46:75:19:
b0:ed:7d:f8:d8:1f:df:31:1d:04:be:93:0e:26:fd:
11:97:7c:c2:07:8a:28:fc:8e:2c:30:cd:36:8b:28:
39:14:95:20:ca:1b:e3:7e:43:1c:d7:34:7a:e3:fd:
bc:e1:2b:39:1a:63:c9:e0:38:f8:40:87:61:3c:75:
bf:52:47:b2:aa:60:ed:fa:08:2c:3c:81:b2:23:42:
c4:9d:6a:fb:af:52:f0:77:5d:48:b1:e5:75:1b:1c:
93:34:8d:66:da:68:53:d3:51:1f:ff:49:c3:fa:98:
3b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CA:29:0C:3A:F2:63:84:F7:F4:FA:D6:8A:AE:B3:41:D9:2C:99:AB
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/NcopDDryY4T39PrWiq6zQdksmas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.146.0/24
IPv6:
2a0f:ca80::/47
2a0f:ca80:617::-2a0f:ca80:619:ffff:ffff:ffff:ffff:ffff
2a0f:ca80:1100::-2a0f:ca80:12ff:ffff:ffff:ffff:ffff:ffff
2a0f:ca80:1337::-2a0f:ca80:1338:ffff:ffff:ffff:ffff:ffff
2a0f:ca83:1337::/48
2a0f:ca84::/40
Signature Algorithm: sha256WithRSAEncryption
47:a9:e0:ba:12:22:d9:fd:be:0a:e3:26:34:40:a1:90:4b:03:
9d:16:74:8d:5e:36:13:29:7c:8b:3d:73:de:5f:8f:0f:a4:af:
16:3a:77:17:0b:4c:9d:da:4e:d0:be:79:5e:48:3f:11:93:28:
dc:78:a5:ca:13:ad:fd:5a:41:6d:31:41:e7:34:61:59:05:82:
60:ec:d1:06:ca:8d:4a:b6:2b:b3:9b:7e:5c:21:60:38:a3:82:
e2:b5:e7:7e:22:6f:7c:6c:e0:4f:59:a1:41:80:94:2a:83:b3:
21:b1:9a:ed:f6:55:42:a0:7f:10:c0:b2:04:ad:7c:34:02:21:
b7:f7:b3:98:b9:09:22:c9:93:ce:e0:f1:f8:53:a5:19:cd:e0:
70:93:ec:23:18:da:4e:49:b3:f0:ac:e5:ef:19:e4:79:01:d2:
8d:59:dd:e6:b7:be:01:8d:36:53:ae:9e:fa:58:e5:40:b6:2d:
f1:51:f9:5e:12:92:78:ee:8c:a1:56:67:c9:c1:23:55:4a:7c:
a2:f5:c2:22:f5:73:cc:b7:1f:7e:2e:65:5e:b2:69:d4:b3:95:
01:fb:3b:49:e2:44:ce:ee:80:16:68:dd:36:79:70:33:f7:12:
db:1b:e0:0e:6e:19:e2:37:64:d3:72:42:44:41:52:99:ed:42:
0a:5c:6d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:25:55 2025 by rpki-client