Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ngboIQ8mpsfG04r1mTloYYmzmo4.roa
File: ngboIQ8mpsfG04r1mTloYYmzmo4.roa (raw, json)
Hash identifier: VeDBj9RBrPWoErUBC9be9zPYwd1dx/wEEtX3aBvaVVM=
Subject key identifier: 9E:06:E8:21:0F:26:A6:C7:C6:D3:8A:F5:99:39:68:61:89:B3:9A:8E
Certificate issuer: /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial: 01958167844338DA02FA4794B88D2A935F55
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ngboIQ8mpsfG04r1mTloYYmzmo4.roa
Signing time: Mon 10 Mar 2025 18:53:19 +0000
ROA not before: Mon 10 Mar 2025 18:53:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8455
IP address blocks: 31.22.80.0/21 maxlen: 21
31.22.84.0/24 maxlen: 24
45.148.184.0/22 maxlen: 22
45.148.187.0/24 maxlen: 24
95.142.96.0/20 maxlen: 20
130.193.4.0/24 maxlen: 24
178.237.32.0/20 maxlen: 20
178.237.34.0/24 maxlen: 24
178.237.42.0/24 maxlen: 24
178.237.43.0/24 maxlen: 24
185.27.16.0/22 maxlen: 22
193.202.74.0/23 maxlen: 23
2a00:1188::/29 maxlen: 29
2a00:1188:8::/48 maxlen: 48
2a00:1188:9::/48 maxlen: 48
2a00:1188:b::/48 maxlen: 48
2a00:1188:c::/48 maxlen: 48
2a00:1188:d::/48 maxlen: 48
2a00:1188:13::/48 maxlen: 48
2a00:1188:19::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Mar 2025 11:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:81:67:84:43:38:da:02:fa:47:94:b8:8d:2a:93:5f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Validity
Not Before: Mar 10 18:53:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e06e8210f26a6c7c6d38af59939686189b39a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c3:22:48:f3:64:2b:0c:5f:6f:e1:69:00:13:
23:94:74:22:49:6d:d9:9d:b3:db:52:74:a8:90:1a:
97:98:d2:41:47:4d:eb:a1:cc:f8:14:19:2f:4a:95:
b9:d3:7b:b1:22:46:86:1f:1b:4d:ca:1d:1a:f8:9d:
d2:4a:cf:9f:f5:1d:35:3d:67:59:52:66:55:08:7b:
6e:b5:9d:bc:15:2e:3b:65:f2:ca:6a:18:c2:13:1f:
11:db:64:a0:b1:63:ce:39:e1:1d:f7:9b:e4:1b:ce:
ba:ff:42:4b:ed:c0:a2:08:f6:2c:79:45:d1:8f:ec:
11:b8:a9:83:46:55:b6:02:eb:f7:00:db:5d:59:97:
61:b1:91:a2:ed:6f:7b:c7:63:0c:2b:af:25:31:e6:
d5:a3:f8:6f:36:1a:92:8f:e6:41:5a:1d:b4:53:e6:
71:09:2d:e4:be:e0:4d:2c:3b:d9:ed:4a:e7:76:50:
9d:42:01:33:27:32:98:f4:ca:7d:02:c5:6f:ba:74:
91:b4:91:2a:db:4c:c6:e9:c8:00:45:3a:c6:28:0e:
c5:d3:b0:29:86:83:f6:ed:90:f0:46:04:67:2e:3e:
e3:08:67:b6:21:6a:fd:fb:36:bc:98:58:00:e1:9b:
5d:db:b3:28:8c:33:bb:1e:bf:e0:2f:4d:33:8b:30:
20:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:06:E8:21:0F:26:A6:C7:C6:D3:8A:F5:99:39:68:61:89:B3:9A:8E
X509v3 Authority Key Identifier:
keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ngboIQ8mpsfG04r1mTloYYmzmo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.80.0/21
45.148.184.0/22
95.142.96.0/20
130.193.4.0/24
178.237.32.0/20
185.27.16.0/22
193.202.74.0/23
IPv6:
2a00:1188::/29
Signature Algorithm: sha256WithRSAEncryption
4a:ce:e3:20:79:fb:64:9f:a2:fe:f9:85:bd:59:41:f7:ae:30:
1f:c5:d2:10:90:dc:22:3b:94:f3:6d:e6:eb:45:df:e5:b5:08:
53:63:b9:07:f1:0b:4f:fd:8e:cc:c5:2b:da:f4:79:f4:3e:e0:
ae:33:c0:dd:93:bb:14:a6:70:ab:5e:0e:d0:33:39:2c:83:7e:
22:67:18:f3:7d:18:6e:2a:f5:94:b3:ce:86:33:e5:23:25:99:
c5:70:43:7f:68:67:8a:09:b2:1b:a6:81:d4:68:05:64:02:21:
be:08:aa:dc:2d:be:c5:31:6e:89:1d:c7:90:c8:18:68:1b:99:
e8:8f:b7:66:68:c1:a9:a1:4a:30:da:2e:72:ff:11:f8:df:e3:
e8:e1:23:aa:e2:da:87:2a:23:6e:b2:4a:0a:0a:e9:ef:b4:e7:
8b:0f:cf:79:5e:9e:56:54:c2:e8:8b:44:52:6a:ab:bb:dc:e0:
ca:4d:5a:b6:23:e7:c1:e5:2f:11:1f:69:54:62:06:1f:c6:39:
56:b3:90:3a:69:db:c2:ba:34:08:71:e6:db:2c:ae:78:74:2a:
95:ca:6e:95:ef:57:a4:93:dd:74:ec:97:44:10:68:be:59:31:
3a:43:fa:75:8d:b0:ab:ff:c9:1c:c1:80:e7:33:11:98:4e:16:
d7:e5:0d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 08:54:53 2025 by rpki-client