Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/NruD5dxmKMd2pWB_gEyn-VHkhBA.roa
File: NruD5dxmKMd2pWB_gEyn-VHkhBA.roa (raw, json)
Hash identifier: MQDhqVjGNvyVF4WKSC7rcqVI4E8vxtNBnUTFmT7ZWhc=
Subject key identifier: 36:BB:83:E5:DC:66:28:C7:76:A5:60:7F:80:4C:A7:F9:51:E4:84:10
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01946FE85F7C4FAEA94DC69EEDF5803F58E7
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/NruD5dxmKMd2pWB_gEyn-VHkhBA.roa
Signing time: Thu 16 Jan 2025 16:18:07 +0000
ROA not before: Thu 16 Jan 2025 16:18:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215727
IP address blocks: 45.136.0.0/24 maxlen: 32
45.136.1.0/24 maxlen: 32
45.136.2.0/24 maxlen: 32
45.136.3.0/24 maxlen: 32
128.0.119.0/24 maxlen: 32
185.117.20.0/24 maxlen: 32
185.117.21.0/24 maxlen: 32
185.117.22.0/24 maxlen: 32
185.117.23.0/24 maxlen: 32
185.211.48.0/24 maxlen: 32
185.211.49.0/24 maxlen: 32
185.211.50.0/24 maxlen: 32
194.124.64.0/24 maxlen: 32
194.124.65.0/24 maxlen: 32
194.124.66.0/24 maxlen: 32
195.85.68.0/24 maxlen: 32
195.85.69.0/24 maxlen: 32
195.85.70.0/24 maxlen: 32
195.85.71.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 16 Jan 2025 16:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:e8:5f:7c:4f:ae:a9:4d:c6:9e:ed:f5:80:3f:58:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 16 16:18:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36bb83e5dc6628c776a5607f804ca7f951e48410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:d6:8f:6a:b2:74:6d:2d:77:b7:a9:d8:7a:
f2:0e:b0:71:47:82:5e:d7:f0:89:79:84:f0:0c:4b:
bc:d7:80:34:30:30:af:2f:13:9a:26:ef:54:2c:ed:
e5:ae:c1:20:a2:a8:d8:16:d2:dc:19:c2:0b:97:38:
f3:9e:10:40:3a:a7:5b:99:4b:07:04:f5:f4:c7:e2:
05:23:a6:a0:2b:c6:0a:33:8b:4f:73:50:86:25:91:
7d:e0:be:14:51:bb:f3:f2:93:14:a8:07:e0:50:e8:
71:7e:d0:4e:d7:55:31:cd:9d:fc:bd:52:29:df:0b:
84:53:81:17:2d:f4:dc:d2:cb:16:c7:4f:ef:d6:71:
83:41:8c:8a:f1:3e:4c:52:2f:1a:34:65:66:90:a6:
4a:ea:d6:28:0e:51:49:92:f7:5d:80:6e:df:f4:c1:
1c:97:d5:8b:4a:e6:48:fe:b3:46:9a:2b:b2:a5:f4:
48:86:4f:90:67:7c:9e:c9:e3:04:cf:15:8d:70:ba:
21:ff:a3:10:c5:fd:69:8c:dd:d3:d2:6b:52:9c:0f:
6f:d3:a0:61:c2:73:49:95:bd:a2:7d:c3:29:c3:98:
fd:d0:03:04:8c:cb:e3:4b:50:08:4f:a7:77:0c:49:
38:8d:01:00:36:a3:28:2a:43:27:64:e1:7f:8f:cb:
11:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BB:83:E5:DC:66:28:C7:76:A5:60:7F:80:4C:A7:F9:51:E4:84:10
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/NruD5dxmKMd2pWB_gEyn-VHkhBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/22
128.0.119.0/24
185.117.20.0/22
185.211.48.0-185.211.50.255
194.124.64.0-194.124.66.255
195.85.68.0/22
Signature Algorithm: sha256WithRSAEncryption
55:cc:4e:7c:70:84:04:27:a7:b4:2d:a4:ff:9a:e0:57:20:57:
a2:25:7b:96:c2:e5:30:93:61:8c:d5:20:16:22:57:01:f7:8f:
f4:e7:02:58:2d:4a:06:61:df:fa:03:f9:34:d8:fb:65:df:76:
21:92:07:41:27:5d:d2:dd:14:eb:19:1e:b0:45:cb:00:58:50:
70:c9:f1:4c:eb:d3:7a:c9:83:0e:8d:ea:8d:ca:8e:e3:1e:fe:
c7:24:88:98:03:dd:05:7a:74:54:38:8a:aa:ed:4e:19:9b:44:
5c:d6:aa:06:eb:c7:9c:aa:da:09:de:86:1a:02:76:6d:e9:22:
b2:d4:02:fd:56:2c:c0:52:91:84:12:54:d7:aa:a2:c2:7b:33:
a6:ab:76:89:3f:36:bb:92:f2:3f:3f:26:50:8e:be:3c:c3:69:
87:6f:9e:38:38:9f:c5:1b:69:93:95:7f:5c:d4:87:e9:5d:da:
88:57:ad:39:09:1c:7b:aa:5a:b4:57:03:8c:3d:44:97:12:c0:
21:ac:6d:fe:dd:2d:fc:b6:37:c7:81:51:d3:b9:16:83:3d:a8:
5f:29:72:a8:f8:e1:69:f1:4e:ca:27:0b:e0:5e:fa:6a:c7:ea:
ac:0f:cf:80:66:ac:f8:4b:5b:88:af:dd:74:45:a1:4f:0d:0a:
26:94:bb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:42:59 2025 by rpki-client