Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/naXm5FbrBwSI3OMYmlwrfWnFTH4.roa
File: naXm5FbrBwSI3OMYmlwrfWnFTH4.roa (raw, json)
Hash identifier: uktC45euP+3Qu4nsrsuoSEF2235ILwhjF89QOcBBFG0=
Subject key identifier: 9D:A5:E6:E4:56:EB:07:04:88:DC:E3:18:9A:5C:2B:7D:69:C5:4C:7E
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01915223BE53FF4EB1CCCC8D145FCDFCCBF6
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/naXm5FbrBwSI3OMYmlwrfWnFTH4.roa
Signing time: Wed 14 Aug 2024 18:25:59 +0000
ROA not before: Wed 14 Aug 2024 18:25:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55410
IP address blocks: 45.151.140.0/24 maxlen: 24
45.151.141.0/24 maxlen: 24
45.151.142.0/24 maxlen: 24
45.151.143.0/24 maxlen: 24
85.208.8.0/24 maxlen: 24
85.208.9.0/24 maxlen: 24
85.208.10.0/24 maxlen: 24
85.208.11.0/24 maxlen: 24
94.229.208.0/24 maxlen: 24
94.229.209.0/24 maxlen: 24
94.229.210.0/24 maxlen: 24
94.229.211.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
94.229.213.0/24 maxlen: 24
94.229.214.0/24 maxlen: 24
94.229.215.0/24 maxlen: 24
94.229.216.0/24 maxlen: 24
94.229.217.0/24 maxlen: 24
94.229.218.0/24 maxlen: 24
94.229.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 21:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:52:23:be:53:ff:4e:b1:cc:cc:8d:14:5f:cd:fc:cb:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 14 18:25:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9da5e6e456eb070488dce3189a5c2b7d69c54c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:06:8f:2a:0a:0d:3f:1c:93:84:67:bc:0d:af:
8f:9b:3c:f6:f2:1d:89:c0:b8:82:9b:0f:c6:d7:db:
87:36:96:51:f1:46:88:82:1e:36:2a:fc:32:c2:6c:
1e:44:3b:49:16:cb:f7:ce:5b:cc:56:e2:b5:8f:c1:
d7:bc:eb:ed:a4:80:84:77:ba:f0:13:62:a3:e5:52:
c2:34:7e:6d:fa:61:6a:a5:13:43:22:32:07:4e:f1:
07:86:fa:d1:28:05:26:e6:4d:f4:31:2b:1e:94:55:
de:4e:8e:be:3c:4a:de:45:85:a5:13:bd:75:4a:94:
79:3d:36:48:8b:3f:9a:3c:34:d6:8d:b9:52:2a:b1:
3c:17:99:5e:83:b0:08:4c:c4:0b:ca:d5:84:84:f7:
79:22:11:fd:e9:b3:9a:f1:7a:7b:aa:8a:68:27:38:
e7:7e:5d:a7:1f:50:5a:b1:87:9a:da:dd:c8:27:00:
d7:56:eb:e5:40:fd:b7:dd:3a:aa:b6:6a:e7:20:f7:
4d:59:98:ad:ee:55:ff:67:60:fc:e6:e2:c2:d8:90:
39:e4:9b:f2:03:57:66:e2:a5:5f:ad:a3:28:ea:38:
00:63:a8:95:95:09:1d:8e:f8:79:44:91:59:06:8b:
29:0d:2e:ab:48:8c:75:77:4b:0a:29:59:45:a1:f3:
e2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A5:E6:E4:56:EB:07:04:88:DC:E3:18:9A:5C:2B:7D:69:C5:4C:7E
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/naXm5FbrBwSI3OMYmlwrfWnFTH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.140.0/22
85.208.8.0/22
94.229.208.0-94.229.219.255
Signature Algorithm: sha256WithRSAEncryption
40:cc:bd:45:fd:27:b9:8e:5e:6a:d3:64:5c:22:f9:f7:c1:31:
ca:8f:a9:63:83:83:18:15:a9:28:3d:c7:97:38:08:0d:96:67:
c0:98:fa:db:c8:47:9a:06:d3:58:09:d4:9a:84:7b:e8:47:dc:
be:a1:bf:e1:70:a5:08:ea:54:b3:42:bf:e0:01:8d:62:c8:d9:
9e:88:8b:ab:d9:e5:cf:49:21:53:d2:7e:9f:14:79:c8:e2:ac:
0a:66:9b:06:7c:a6:99:5b:4f:96:9c:b3:95:09:9a:6f:58:20:
1a:35:22:91:56:e9:cf:84:f1:e5:0d:b8:69:ee:de:5a:ed:f8:
a7:7e:94:79:3e:62:e6:9a:44:3f:68:8b:02:2f:43:b7:e9:f7:
f1:bc:63:ed:c3:07:65:79:03:a9:06:3a:96:d5:0d:31:27:06:
a2:0a:ae:9c:e7:67:f6:5a:f9:3d:67:c0:ed:05:2d:81:47:66:
a3:a3:3a:04:43:2d:47:5c:f1:8e:58:cf:1b:ef:3b:a0:3d:b5:
29:4c:64:a4:a3:1f:3d:27:97:3b:87:3c:3f:38:b8:53:10:49:
d2:35:e3:82:6f:34:c1:b5:96:cf:6f:41:bc:79:50:50:0b:e4:
8b:01:21:64:6a:cd:2d:7a:43:4f:a8:e4:21:e9:43:65:33:ba:
6c:9e:77:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:46 2025 by rpki-client