Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/NGpzk7io5iH7Hr9iVGUV8oUuQBQ.roa
File: NGpzk7io5iH7Hr9iVGUV8oUuQBQ.roa (raw, json)
Hash identifier: A7jcJX+wnGS/LRvWpixyxV4hBeheRxyg2/Gnt6sZLps=
Subject key identifier: 34:6A:73:93:B8:A8:E6:21:FB:1E:BF:62:54:65:15:F2:85:2E:40:14
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 01913AE70656B051B2EE684241808ADE4816
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/NGpzk7io5iH7Hr9iVGUV8oUuQBQ.roa
Signing time: Sat 10 Aug 2024 06:08:24 +0000
ROA not before: Sat 10 Aug 2024 06:08:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6424
IP address blocks: 103.243.124.0/22 maxlen: 22
146.19.95.0/24 maxlen: 24
146.19.249.0/24 maxlen: 24
185.112.251.0/24 maxlen: 24
185.166.144.0/24 maxlen: 24
188.93.192.0/21 maxlen: 24
188.93.196.0/24 maxlen: 24
188.93.198.0/24 maxlen: 24
188.93.199.0/24 maxlen: 24
193.107.13.0/24 maxlen: 24
193.109.184.0/21 maxlen: 24
193.109.184.0/24 maxlen: 24
193.163.151.0/24 maxlen: 24
212.52.23.0/24 maxlen: 24
2001:b18::/32 maxlen: 48
2001:b18:a::/48 maxlen: 48
2001:b18:b::/48 maxlen: 48
2001:b18:1000::/48 maxlen: 48
2001:b18:1001::/48 maxlen: 48
2001:b18:1002::/48 maxlen: 48
2001:b18:1012::/48 maxlen: 48
2001:b18:1016::/48 maxlen: 48
2001:b18:1018::/48 maxlen: 48
2001:b18:1020::/48 maxlen: 48
2001:b18:1031::/48 maxlen: 48
2a0d:82c0::/29 maxlen: 48
2a0d:82c0::/32 maxlen: 32
2a0d:82c7:d::/48 maxlen: 48
2a0e:5f00::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 10 Aug 2024 06:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:3a:e7:06:56:b0:51:b2:ee:68:42:41:80:8a:de:48:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: Aug 10 06:08:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=346a7393b8a8e621fb1ebf62546515f2852e4014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b4:06:48:8b:3a:97:a3:4a:34:3d:50:bb:6a:
3b:4f:97:64:c1:94:82:84:c2:73:17:3f:c5:cb:a7:
29:60:65:45:07:d0:ed:08:1b:b6:d3:ac:90:8b:88:
32:29:80:96:d3:a4:54:d6:21:ee:2e:f6:2b:7f:73:
13:90:72:28:df:41:f8:52:47:31:96:ea:5a:06:dd:
e2:ab:5d:fe:d2:22:de:16:c6:6a:8f:4f:19:f8:91:
1d:fd:3e:b3:dd:d0:35:81:16:58:40:06:17:60:57:
34:f7:30:08:9f:5c:70:75:15:4f:1c:9b:00:02:23:
78:1a:71:da:c5:b3:41:32:18:c7:a5:43:cf:a4:8f:
48:90:bd:45:e9:8b:1d:ec:7a:c8:ab:6f:33:cb:e9:
42:62:e4:5e:44:04:90:c0:43:40:77:b7:4b:84:3e:
9c:fa:14:a3:37:87:eb:10:a8:8f:e9:ba:dd:fb:f1:
f7:12:66:4d:31:55:f9:24:ee:e5:a0:dc:2f:a9:67:
bb:8b:03:c5:b1:8f:11:fd:23:cc:c0:52:53:99:16:
d1:f5:d4:70:2d:4e:55:44:91:54:56:45:e3:b6:7f:
46:b1:36:ba:e9:15:8b:0a:fb:c3:f3:3f:c0:bf:99:
d5:c7:3f:52:5c:9a:60:a6:10:5f:51:a7:a7:8f:7b:
6d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6A:73:93:B8:A8:E6:21:FB:1E:BF:62:54:65:15:F2:85:2E:40:14
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/NGpzk7io5iH7Hr9iVGUV8oUuQBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.243.124.0/22
146.19.95.0/24
146.19.249.0/24
185.112.251.0/24
185.166.144.0/24
188.93.192.0/21
193.107.13.0/24
193.109.184.0/21
193.163.151.0/24
212.52.23.0/24
IPv6:
2001:b18::/32
2a0d:82c0::/29
2a0e:5f00::/32
Signature Algorithm: sha256WithRSAEncryption
7d:03:a3:da:d2:c6:b0:5b:08:d6:cd:fe:e4:45:63:c8:51:e7:
81:55:65:4b:f8:c1:1b:22:c2:15:02:e9:a8:a1:2c:c0:b5:50:
cc:b0:51:3a:0f:e8:3f:30:b9:4e:ba:d2:33:3e:1f:d4:e4:f0:
ef:66:bd:10:bd:e5:8e:6c:80:ab:aa:97:6d:35:5a:67:01:25:
6a:cb:6e:42:26:65:e4:b3:1a:05:d7:1d:28:20:35:85:33:65:
99:1f:69:83:01:4f:b3:7e:2b:34:ef:ea:e8:37:d9:6d:1a:4a:
0b:46:b7:01:bf:49:41:f1:68:b0:49:92:0c:48:bc:19:2d:f9:
4c:b1:99:69:9c:15:0d:62:86:91:1c:66:e0:d7:fb:12:f7:80:
04:94:7e:8f:66:0b:d4:a1:c8:a4:21:d6:3c:45:c8:76:de:c8:
ec:01:cf:cc:6b:2b:18:e7:cd:64:e0:d0:41:0b:85:d8:19:c4:
37:ce:81:9d:02:26:b4:4a:da:12:0d:c6:f6:a0:bd:62:d3:32:
eb:da:7f:b3:e8:8f:03:97:cc:3b:28:1f:c5:ec:75:19:69:f8:
89:84:43:5a:08:98:f7:5d:6f:49:99:ad:71:4b:ad:20:3f:19:
31:25:f3:64:9c:ed:a5:5f:4f:f6:43:20:05:cb:d4:95:49:31:
73:e2:7c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:24:27 2025 by rpki-client