Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/Nc_KlLJD6PZVFuMZbOF4Sp6fd0Q.roa
File: Nc_KlLJD6PZVFuMZbOF4Sp6fd0Q.roa (raw, json)
Hash identifier: KxbxWGl1PTQJUOuVxteROju+PnSNLz0wB23lC8RfnpE=
Subject key identifier: 35:CF:CA:94:B2:43:E8:F6:55:16:E3:19:6C:E1:78:4A:9E:9F:77:44
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0193D13614BE3A9239BC8A9F01CCF98BA68C
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/Nc_KlLJD6PZVFuMZbOF4Sp6fd0Q.roa
Signing time: Mon 16 Dec 2024 20:43:22 +0000
ROA not before: Mon 16 Dec 2024 20:43:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 195.114.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d1:36:14:be:3a:92:39:bc:8a:9f:01:cc:f9:8b:a6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Dec 16 20:43:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35cfca94b243e8f65516e3196ce1784a9e9f7744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:c3:ad:37:09:08:98:7a:ea:5e:de:85:3c:
42:49:5e:91:27:aa:e9:25:65:82:ac:e0:8f:35:ed:
97:46:ae:82:c4:71:c1:3f:0c:74:e6:35:6e:0c:24:
13:ce:a6:7c:43:d1:36:5f:10:11:4f:60:06:03:8b:
d5:08:4f:66:31:53:c9:56:4f:4f:c6:41:f8:76:4f:
ee:e5:d4:3d:ea:fe:1b:a3:e6:ac:23:f8:44:6e:bb:
32:6d:a9:dd:5e:b2:41:48:0b:4c:75:f8:f7:c0:1e:
1b:c0:86:17:c9:b1:5f:76:ed:86:ad:22:20:76:0d:
b2:84:50:db:2d:b1:5e:74:98:b7:02:9b:07:f2:51:
b3:2c:48:12:8d:6b:10:23:26:ca:f0:9c:30:9b:d6:
18:19:8b:61:a5:94:5c:96:cd:75:1d:5c:52:b5:69:
bc:79:5a:00:2f:a3:6a:7b:f3:5f:a3:5a:37:43:88:
e2:2f:4b:fb:2e:ec:10:ca:bf:40:e1:87:5c:06:8e:
ca:23:e1:a4:b9:1c:e3:86:c3:ff:8b:5c:d4:a1:d9:
9c:e7:f2:22:a5:51:b5:db:35:93:62:2f:63:b7:3f:
43:64:67:ad:48:d0:cf:57:f7:ab:e3:b8:27:d5:99:
eb:37:81:dd:af:c6:07:00:a4:89:8c:78:a0:62:0c:
8c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CF:CA:94:B2:43:E8:F6:55:16:E3:19:6C:E1:78:4A:9E:9F:77:44
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/Nc_KlLJD6PZVFuMZbOF4Sp6fd0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.202.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:3f:2d:f9:9d:68:54:be:7b:c4:7e:14:c7:cd:04:e5:48:64:
71:ae:06:96:60:6f:e6:b4:c7:39:4c:88:be:8b:ee:0e:04:a8:
d1:bf:79:a5:4a:db:4d:d9:9d:3a:bc:94:ac:85:55:ca:a4:cf:
59:7f:46:cb:6a:44:59:c4:ba:fd:ce:2f:2c:85:38:b1:90:43:
e0:29:3a:95:e3:55:0b:ce:43:81:cc:1e:7a:53:8e:5d:16:cf:
19:04:9e:70:c7:72:f8:35:89:0d:e4:1d:67:cd:80:5c:05:bf:
35:34:09:2a:1e:72:20:7d:bb:95:6a:c7:fc:06:59:f5:bb:d1:
e4:2e:43:a2:ce:6f:1f:74:b4:55:72:23:85:b0:eb:84:c2:bb:
c9:3b:8d:5c:02:4a:4c:09:06:64:a3:75:d6:ef:48:8a:a1:b0:
83:6c:e5:d7:cf:c1:37:27:f5:26:c1:c1:ae:b5:9d:e9:0f:f9:
ae:36:cf:95:07:ed:ac:66:9a:5c:58:43:16:f3:e8:4a:f1:14:
f7:f9:d7:2b:9f:a5:14:0c:dd:e2:6e:8e:e8:f3:a1:7b:21:74:
bd:fc:3a:3d:9d:e8:08:b8:2f:80:ca:7e:cc:16:91:95:87:e5:
37:44:73:c8:14:dc:b5:f3:22:6c:c2:2a:3e:6a:fe:df:65:c4:
ac:63:ae:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:08:53 2025 by rpki-client