Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/_NCJC6vwQo109PxKU47FWGzQRic.roa
File: _NCJC6vwQo109PxKU47FWGzQRic.roa (raw, json)
Hash identifier: upGbuXdlHDWHJ/lwu/kCgOauDL2iM/H5iK75D2z8XUM=
Subject key identifier: FC:D0:89:0B:AB:F0:42:8D:74:F4:FC:4A:53:8E:C5:58:6C:D0:46:27
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 019091FDE764D0CB0D225B8C5F0730955768
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/_NCJC6vwQo109PxKU47FWGzQRic.roa
Signing time: Mon 08 Jul 2024 10:57:34 +0000
ROA not before: Mon 08 Jul 2024 10:57:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49357
IP address blocks: 94.141.116.0/23 maxlen: 23
94.141.116.0/24 maxlen: 24
94.141.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jul 2024 11:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:91:fd:e7:64:d0:cb:0d:22:5b:8c:5f:07:30:95:57:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Jul 8 10:57:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcd0890babf0428d74f4fc4a538ec5586cd04627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:63:ec:b2:c6:f4:44:c7:d3:1a:2b:37:cf:
d5:46:45:c3:df:cd:db:db:f6:67:02:2e:57:0c:b9:
52:f2:da:f8:52:fc:c5:5d:08:5b:c2:42:87:45:a6:
6c:5d:50:a3:bb:b6:01:89:ae:a4:b7:7e:b9:b5:43:
c6:80:b0:5e:21:37:d0:14:f4:1f:34:7b:43:4d:5d:
09:6e:7a:ab:be:b4:68:6c:38:a5:de:35:9d:42:b1:
79:63:99:b0:19:16:52:68:3c:8e:a7:ae:b2:22:8a:
ec:49:8e:33:9e:49:40:f5:74:fc:3c:b7:f2:7c:a9:
85:e5:8c:e7:12:0a:e5:a9:f9:3e:f3:44:54:90:9f:
0a:f9:58:2b:00:14:29:d2:c1:30:d4:9e:6a:d5:51:
cf:23:bd:68:44:71:9f:8b:56:bd:c1:24:78:c1:39:
94:75:59:bd:ed:9d:12:77:7a:c6:a5:b0:4b:88:7d:
ab:06:b1:a7:65:51:cb:00:fb:fd:9c:22:a9:60:bb:
c8:5a:48:a9:ad:96:8a:9f:f0:5f:17:04:b7:80:8f:
f5:81:51:00:b9:28:f0:a8:3b:b9:14:6b:0e:69:e7:
4a:c6:87:16:6e:77:56:95:43:f6:89:42:8d:a4:f2:
a6:7f:3c:e0:c1:8f:45:42:4a:8e:95:e7:eb:10:40:
c1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D0:89:0B:AB:F0:42:8D:74:F4:FC:4A:53:8E:C5:58:6C:D0:46:27
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/_NCJC6vwQo109PxKU47FWGzQRic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.116.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:f5:b2:30:49:0f:2e:29:ea:1d:5c:44:41:b3:4a:b5:42:9e:
b3:35:12:2e:81:ed:1a:98:03:65:af:8b:e6:8f:b4:35:48:46:
31:18:79:36:e6:8d:f1:4c:9a:5c:44:5f:8c:a0:ef:46:2d:5b:
62:61:2c:7c:fa:36:72:84:78:cb:3a:76:30:1a:33:ed:ab:9b:
33:ec:78:8f:5e:65:b0:50:8a:58:96:ba:b2:f6:01:d9:6d:f8:
20:6b:b3:b9:a7:4a:c3:32:81:7d:8b:93:a4:f0:a7:be:dd:92:
93:98:d6:fa:bc:af:32:9a:54:c4:66:37:33:1a:77:46:a2:4e:
55:e6:1c:da:92:f1:07:d6:2f:00:66:93:ce:69:73:44:4e:54:
77:8b:05:f3:6a:e5:29:0f:dd:b5:46:6c:c6:fa:0f:0c:66:db:
fd:f5:60:af:34:94:32:96:8e:9f:a4:5c:b2:e5:ef:e5:e3:31:
4c:7a:22:6a:a6:78:73:57:14:9f:01:2d:35:94:9a:e5:36:47:
45:72:b6:bb:cb:92:9b:23:70:e5:9c:44:45:75:d0:05:66:8f:
4c:c6:c7:22:bc:44:8a:e1:06:33:d0:6a:a7:78:10:b7:21:64:
c3:05:e0:c2:6f:0c:ea:7e:0d:f4:2f:e7:90:b5:3c:7e:18:59:
b1:e8:06:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:49:12 2025 by rpki-client