Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/NROO7J_LwmfZTllH-eZEW4rFTEY.roa
File: NROO7J_LwmfZTllH-eZEW4rFTEY.roa (raw, json)
Hash identifier: OcW9BM/BL2ED9pd2tfjsZwvHZg3/oyRt6+6k6wt0/e4=
Subject key identifier: 35:13:8E:EC:9F:CB:C2:67:D9:4E:59:47:F9:E6:44:5B:8A:C5:4C:46
Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Certificate serial: 01929ED2F035BAD2CE912794D8197863BD11
Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/NROO7J_LwmfZTllH-eZEW4rFTEY.roa
Signing time: Fri 18 Oct 2024 08:51:17 +0000
ROA not before: Fri 18 Oct 2024 08:51:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57935
IP address blocks: 92.119.56.0/24 maxlen: 24
92.119.59.0/24 maxlen: 24
185.73.113.0/24 maxlen: 24
185.73.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 13:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9e:d2:f0:35:ba:d2:ce:91:27:94:d8:19:78:63:bd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Validity
Not Before: Oct 18 08:51:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35138eec9fcbc267d94e5947f9e6445b8ac54c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:85:85:8e:9f:ad:be:fc:42:9b:e5:5e:8a:bc:
cf:50:79:3a:4a:16:ff:73:a0:24:73:4e:00:a6:ec:
5b:b7:a6:7a:75:25:1d:2c:c6:70:08:a8:04:9d:66:
ed:ea:4e:db:b2:7a:d3:b0:b3:a5:52:1a:37:b9:31:
c9:5e:ff:35:af:af:a3:39:80:1c:a6:df:3b:b1:dc:
1b:a0:f9:03:25:eb:fc:d6:f1:1a:f5:58:19:f9:4e:
82:d8:b7:25:c6:77:b6:9e:2f:b9:86:e1:de:9a:68:
ea:ee:fb:19:bf:4b:ed:2f:65:54:eb:47:48:76:bd:
9c:86:2e:3b:d7:bd:9a:37:c1:46:03:96:21:88:6b:
8f:e7:69:b9:02:aa:ef:13:36:b4:3c:5c:cb:9e:fd:
0c:93:c6:90:bf:d6:f8:ce:88:b2:e0:a6:a6:cd:ac:
dc:a6:84:87:cd:57:c0:1d:c4:1e:6f:89:62:e5:91:
2b:c3:d1:f5:a9:6a:02:2f:7a:7b:67:f1:61:f5:02:
2f:9e:7a:7f:60:bb:94:ac:90:b2:a9:fd:2a:0d:d0:
8a:c8:31:dc:b3:46:b9:92:7b:23:91:27:c2:39:42:
d5:ea:8c:7b:a5:2b:c0:41:87:87:4b:83:1c:c4:1e:
f4:6c:af:8c:d1:91:7b:2b:35:ba:55:bd:12:43:32:
bb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:13:8E:EC:9F:CB:C2:67:D9:4E:59:47:F9:E6:44:5B:8A:C5:4C:46
X509v3 Authority Key Identifier:
keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/NROO7J_LwmfZTllH-eZEW4rFTEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.56.0/24
92.119.59.0/24
185.73.113.0/24
185.73.115.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ce:6b:52:1a:05:e0:09:a2:a6:f5:0c:b1:cf:e8:b2:39:0f:
70:05:b1:38:0f:70:dd:3a:0c:3f:2b:2d:d1:29:2e:1b:1e:76:
1f:a0:64:cf:8e:d0:4b:c8:9d:35:87:4e:ab:52:f6:df:f3:3b:
5f:e6:02:7d:41:99:c3:c4:02:42:0b:d1:30:b3:a0:8f:c5:36:
ee:a1:8e:54:33:97:01:3c:35:2b:3f:e8:04:8d:46:6c:f2:84:
7b:f5:95:12:36:0c:b4:fe:e3:af:cb:fd:6a:0c:7c:ba:ae:78:
4b:2b:a7:3b:dc:3b:4b:45:30:3b:86:0d:14:9b:76:29:24:13:
68:77:3b:14:fb:27:03:dd:56:bc:55:2f:a4:e2:3f:9a:d3:e0:
8c:61:37:38:a3:65:63:3c:a9:cc:64:9f:a8:f7:79:50:63:6a:
6f:b4:f5:5a:2e:ea:00:78:f3:57:a2:82:41:a5:c1:6a:28:8b:
72:dd:5f:f9:90:55:36:71:c9:28:df:bb:3a:45:2a:6e:fd:32:
c1:9a:60:41:24:cb:9b:fc:3b:1e:55:a4:a7:01:8c:d0:2e:bc:
cc:68:6c:1a:94:ac:00:8a:62:d5:e1:d6:fa:0a:34:bd:ad:92:
da:42:29:80:87:5c:a9:03:14:f7:b5:b1:17:5b:e3:71:e5:20:
ee:06:ac:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:07:09 2025 by rpki-client