Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NctvEi17cdNdFBt_SwZgrKtjfvU.roa
File: NctvEi17cdNdFBt_SwZgrKtjfvU.roa (raw, json)
Hash identifier: 6K+C5JCo8sUalrFWI2qIcqcsueszmymNf5mJutDFXeg=
Subject key identifier: 35:CB:6F:12:2D:7B:71:D3:5D:14:1B:7F:4B:06:60:AC:AB:63:7E:F5
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0196E21A82DC906F747B68EAE2847CA5CCCB
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NctvEi17cdNdFBt_SwZgrKtjfvU.roa
Signing time: Sun 18 May 2025 06:35:10 +0000
ROA not before: Sun 18 May 2025 06:35:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Jun 2025 22:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e2:1a:82:dc:90:6f:74:7b:68:ea:e2:84:7c:a5:cc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: May 18 06:35:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35cb6f122d7b71d35d141b7f4b0660acab637ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:90:a7:fd:b5:35:c9:44:81:66:65:fd:33:
85:a9:08:ef:f1:ed:b5:99:c3:e3:9b:b4:fa:29:18:
d1:44:fc:52:20:24:b4:fe:a0:56:54:ca:44:a1:2b:
1e:40:65:54:c6:0d:bc:e3:42:cb:be:57:d4:0f:bc:
9e:f8:fe:f8:f6:22:36:4d:08:9f:6f:fa:98:63:c8:
12:2c:95:a7:fb:d9:67:ae:15:61:94:69:e9:8b:af:
4a:89:2a:aa:69:3d:06:f2:c9:26:11:21:45:38:be:
94:e7:36:15:62:d4:5b:9f:d5:b8:2a:f0:e6:af:76:
c6:96:44:82:68:9c:0f:02:ef:7e:d9:d0:02:0e:a7:
69:36:79:b5:89:c6:ce:03:ef:a2:66:4f:41:45:ba:
34:5c:6a:9d:7a:80:2c:2b:5c:93:a5:0c:60:6c:62:
25:19:5f:14:91:37:11:85:6b:dd:31:16:23:e6:22:
0c:c2:54:46:7a:f3:87:86:20:14:8b:12:d4:95:4c:
6c:91:c9:da:83:2f:4b:e9:fa:41:50:c1:9b:44:b6:
bb:25:9e:79:39:0e:bd:ab:40:cf:6f:1e:f3:e4:8b:
be:8b:80:a6:ae:09:67:a9:7b:5d:11:95:11:3f:31:
b1:46:b8:f0:a1:e5:e6:b1:5f:64:6d:70:86:38:c1:
94:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CB:6F:12:2D:7B:71:D3:5D:14:1B:7F:4B:06:60:AC:AB:63:7E:F5
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NctvEi17cdNdFBt_SwZgrKtjfvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
Signature Algorithm: sha256WithRSAEncryption
45:21:4a:46:30:1f:01:36:46:ae:79:b1:e0:23:d9:4b:ba:51:
30:58:b1:a4:07:42:3d:a2:cf:ce:58:09:fb:22:9a:4a:60:8b:
d9:89:64:93:44:d6:97:73:dd:4f:91:d4:38:7c:29:de:51:fe:
1f:62:8e:b6:be:54:24:dc:e4:3a:64:01:7c:52:38:98:2e:30:
02:24:e0:a3:e5:6e:c1:73:ac:61:05:4a:5c:22:89:95:65:72:
da:ba:96:0b:e0:77:cf:3a:4b:bc:66:07:d0:8c:f9:9a:e0:7d:
c8:3e:22:24:23:c5:0d:98:68:85:25:93:0a:50:e9:f9:e2:96:
70:68:03:09:3d:f4:c9:7d:a2:4e:4b:4a:c9:9a:c3:a1:53:ff:
f5:14:7d:f6:89:9c:1b:01:0f:6e:45:32:f5:47:5a:be:44:cb:
42:06:33:ab:77:e8:32:3c:dd:86:41:99:0b:27:81:9f:b0:e8:
2d:4a:47:38:15:c8:b2:48:49:42:bb:95:4b:4b:4c:e2:c5:72:
05:63:e4:9c:15:d8:c3:72:c8:8d:3b:fd:53:b2:4e:41:9b:28:
c2:05:44:13:f2:62:48:9a:8f:4d:d4:0a:1a:d8:36:7d:63:27:
1c:07:7f:ff:6a:cc:47:24:2d:a7:b7:08:eb:7d:6c:ec:25:db:
f1:0d:bd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:03:54 2025 by rpki-client