Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NofIq_dvf-I5YNmhp9j59RfW1ow.roa
File: NofIq_dvf-I5YNmhp9j59RfW1ow.roa (raw, json)
Hash identifier: BCEyJOG/DqxThYO9WQxmrUz0oUw9aLYFe+FuBXjUHrc=
Subject key identifier: 36:87:C8:AB:F7:6F:7F:E2:39:60:D9:A1:A7:D8:F9:F5:17:D6:D6:8C
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0194FB507A08C762D67DFB88F5FD4ECC5098
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NofIq_dvf-I5YNmhp9j59RfW1ow.roa
Signing time: Wed 12 Feb 2025 17:59:02 +0000
ROA not before: Wed 12 Feb 2025 17:59:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/23 maxlen: 24
14.102.231.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
85.208.10.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
194.36.32.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Feb 2025 16:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fb:50:7a:08:c7:62:d6:7d:fb:88:f5:fd:4e:cc:50:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 12 17:59:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3687c8abf76f7fe23960d9a1a7d8f9f517d6d68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:c9:76:9f:71:87:00:94:36:bb:c1:f6:67:
87:ac:ec:e9:e7:da:f0:cb:d3:ec:09:67:99:f7:8c:
cf:d2:b2:b0:3f:02:55:6e:b3:d8:c4:19:25:6f:de:
aa:ea:a6:6c:34:1b:cc:a0:da:f8:e2:eb:45:30:6c:
ab:a4:7a:1b:03:b0:d3:17:20:2b:f0:77:09:6e:cc:
a2:ef:0a:55:a0:f2:63:a7:96:cc:5c:f8:a4:5e:34:
12:d8:26:17:ae:38:34:03:e7:95:88:36:54:a6:c7:
ad:e6:b7:48:8c:1d:34:9b:f2:b0:85:6d:8b:5b:6b:
4e:c6:26:f3:88:53:61:91:af:03:c3:26:e7:b8:53:
65:f1:c9:1f:10:d1:e0:ed:fc:97:8b:b3:df:ca:0d:
63:06:2c:42:eb:17:32:7b:30:cf:80:ae:fd:f5:c5:
ee:01:82:bf:04:32:93:10:0c:7f:ac:57:3b:cd:79:
74:88:30:23:6b:1c:17:17:a2:b4:46:b2:5b:da:d8:
38:3d:3d:d2:56:df:c7:a7:43:9d:bf:37:36:f2:6f:
cb:65:fc:e2:cb:0a:ad:d1:88:14:af:a8:2a:c9:cb:
7b:01:5f:b0:d7:50:31:0b:ee:88:c2:ad:1f:6b:05:
6d:ee:cb:6c:61:60:e8:a3:1d:81:4e:44:92:a3:69:
98:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:87:C8:AB:F7:6F:7F:E2:39:60:D9:A1:A7:D8:F9:F5:17:D6:D6:8C
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NofIq_dvf-I5YNmhp9j59RfW1ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
14.102.231.0/24
77.111.96.0/22
85.208.10.0/24
94.229.212.0/24
194.36.32.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:64:23:ba:65:9a:ef:8d:41:cf:cc:04:dd:ce:94:9a:c1:e4:
12:4d:57:8e:68:e9:bc:fb:39:53:18:3c:d0:8b:ee:1f:2e:d8:
a2:6a:f8:cd:6a:e7:a3:f9:66:8c:27:4c:24:c1:b2:77:6d:a4:
8f:f7:1e:50:c1:57:95:3b:ca:ca:cc:1b:ea:24:bf:ef:78:c2:
1a:43:83:c8:99:bc:b3:af:02:bd:39:34:ab:41:43:e7:fe:a5:
81:7b:6d:52:34:10:62:bf:36:16:d7:7e:16:25:f1:17:20:42:
dd:56:2f:2f:21:e4:33:77:3c:36:0d:bb:1e:1f:ea:82:73:10:
e7:a6:a4:44:5d:3c:42:84:59:0a:d7:37:ff:e4:ae:9c:69:9f:
83:d6:43:a2:4e:71:32:a9:c6:42:90:35:72:96:67:d8:27:d4:
34:7a:92:e7:79:0c:89:d2:f6:52:3d:cd:55:32:67:18:fa:b2:
9b:8a:d1:af:88:b2:3b:25:5f:7a:52:59:70:7b:0a:a5:f7:ef:
6d:b7:e5:59:9c:51:dd:72:10:b5:15:ae:d8:bd:c4:ca:b3:9b:
9f:fb:0a:eb:f4:1a:a7:ba:a4:08:91:c4:c3:51:d3:e2:c8:4b:
a9:30:22:a7:28:11:76:57:a9:4f:77:ae:05:7d:9f:9b:ed:70:
a4:60:0f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:58 2025 by rpki-client