Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/NEyDTqlcX5OCEhlMkSGLk38XcaA.roa
File: NEyDTqlcX5OCEhlMkSGLk38XcaA.roa (raw, json)
Hash identifier: 7WujgbjKtPDl4LQ5qeE/+lNldq0PYtaOD+dsUKWxhso=
Subject key identifier: 34:4C:83:4E:A9:5C:5F:93:82:12:19:4C:91:21:8B:93:7F:17:71:A0
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 019422FB9EE390044E2F6ADF8902886C2AD7
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/NEyDTqlcX5OCEhlMkSGLk38XcaA.roa
Signing time: Wed 01 Jan 2025 17:48:23 +0000
ROA not before: Wed 01 Jan 2025 17:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213176
IP address blocks: 209.35.224.0/24 maxlen: 24
209.35.225.0/24 maxlen: 24
209.35.226.0/24 maxlen: 24
209.35.227.0/24 maxlen: 24
209.35.228.0/24 maxlen: 24
209.35.229.0/24 maxlen: 24
209.35.230.0/24 maxlen: 24
209.35.231.0/24 maxlen: 24
209.35.233.0/24 maxlen: 24
209.35.234.0/24 maxlen: 24
209.35.235.0/24 maxlen: 24
209.35.236.0/24 maxlen: 24
212.59.64.0/24 maxlen: 24
212.59.65.0/24 maxlen: 24
212.59.66.0/24 maxlen: 24
212.59.67.0/24 maxlen: 24
212.59.68.0/24 maxlen: 24
212.59.69.0/24 maxlen: 24
212.59.70.0/24 maxlen: 24
212.59.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 12:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:9e:e3:90:04:4e:2f:6a:df:89:02:88:6c:2a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Jan 1 17:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=344c834ea95c5f938212194c91218b937f1771a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:65:7e:b7:fd:7c:4a:b5:99:de:5e:7a:f7:
24:b5:cb:f7:23:cd:59:6a:4b:d8:ef:84:84:28:8b:
88:5e:75:ad:60:c8:46:24:aa:a1:c9:1a:40:75:9d:
d4:5d:41:b1:6c:ec:7b:46:59:c4:c0:3a:74:32:94:
4f:2a:a9:19:17:f2:df:15:9f:e4:be:85:82:7f:10:
91:05:9d:3d:08:52:14:47:61:f8:db:e1:b9:56:a3:
78:c8:bc:a2:8c:bc:bc:d2:dc:2b:dc:fb:b5:c4:9f:
f2:a6:61:72:45:ce:89:7e:73:ef:ff:34:b6:13:10:
be:29:ff:5a:c4:03:33:f5:a4:e4:76:43:56:7f:9d:
05:bb:ff:ec:3b:b6:7f:53:21:a7:7d:70:45:19:16:
ed:ad:e8:a0:67:5f:7f:e2:08:09:8a:d0:ed:b6:d5:
33:36:bc:dc:40:b2:64:e7:ae:32:dc:5a:aa:5c:6f:
6e:7a:e8:a4:e3:65:a7:d6:c7:c6:9e:d9:77:12:5d:
b3:4d:ec:07:c2:ce:e8:6f:f2:1f:f8:f9:83:32:08:
fc:db:da:37:d3:3c:ff:16:c3:24:c3:7f:2b:2a:1f:
cc:26:10:e7:07:77:59:ea:a1:96:41:61:a0:18:87:
98:22:71:f4:00:d2:5c:84:00:f0:a3:a3:eb:49:20:
60:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4C:83:4E:A9:5C:5F:93:82:12:19:4C:91:21:8B:93:7F:17:71:A0
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/NEyDTqlcX5OCEhlMkSGLk38XcaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.35.224.0/21
209.35.233.0-209.35.236.255
212.59.64.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:cd:22:6d:46:83:9c:60:ca:4a:2b:45:f3:a5:63:4e:90:eb:
e5:cc:b6:07:78:9d:71:35:05:67:e4:34:a2:28:85:0d:0e:01:
50:51:9c:92:95:f4:da:4f:98:5f:0e:89:fd:87:61:81:dd:e7:
af:64:cd:0d:3c:21:2f:27:25:fd:59:74:ca:2f:2a:26:ba:b6:
71:42:3e:51:0b:a9:fd:44:a8:25:2e:1b:a6:19:e0:91:64:4d:
3f:91:86:ff:e2:48:61:cf:7c:2c:1c:8d:2c:d3:80:27:43:6d:
6a:81:fd:d6:d5:08:89:d6:ba:d1:ad:1c:a2:a0:c2:a2:6a:e1:
19:bc:83:5b:75:36:1d:13:90:88:bb:bf:3f:a4:eb:19:f1:c1:
56:ae:77:39:3c:59:63:e7:0d:dc:ee:ff:d8:95:de:22:03:26:
82:80:36:87:07:d7:71:ce:d0:05:54:97:10:12:83:84:05:9d:
e2:3c:c0:34:08:3f:24:7e:3d:23:d1:2c:34:33:3b:81:51:3e:
61:d4:eb:26:3a:ba:94:24:27:fc:77:41:28:e9:7b:bb:1a:33:
c3:b9:67:51:3f:ba:25:3b:15:22:f5:49:54:30:19:3b:09:1d:
8c:19:c7:ed:30:d8:68:0c:63:7e:94:ab:82:97:c0:33:c6:4a:
0c:7e:59:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:59:37 2025 by rpki-client