Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CtObw9J5aQs_hTO4i2qjDntHPzk.roa
File: CtObw9J5aQs_hTO4i2qjDntHPzk.roa (raw, json)
Hash identifier: NgBzstDPmlN76f7UBDdMwClT8f3z0l+Oqzo6joSm8Dw=
Subject key identifier: 0A:D3:9B:C3:D2:79:69:0B:3F:85:33:B8:8B:6A:A3:0E:7B:47:3F:39
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01961034FC2D381C75EB7994E0171D6AC242
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CtObw9J5aQs_hTO4i2qjDntHPzk.roa
Signing time: Mon 07 Apr 2025 12:23:49 +0000
ROA not before: Mon 07 Apr 2025 12:23:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 62.76.238.0/24 maxlen: 24
193.108.112.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
194.58.36.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.58.223.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.228.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.192.241.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 08 Apr 2025 13:08:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:34:fc:2d:38:1c:75:eb:79:94:e0:17:1d:6a:c2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 7 12:23:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ad39bc3d279690b3f8533b88b6aa30e7b473f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:73:23:6a:be:71:e0:94:d0:85:25:8a:8e:
b8:13:c2:a6:44:c8:29:9f:00:a0:ed:16:fb:dc:c8:
f8:18:e7:72:d9:2e:05:b1:fe:0f:e5:6f:f1:e4:33:
74:26:af:80:58:0e:48:db:02:1f:7c:b1:4f:1c:bc:
47:0a:66:de:71:8f:d6:82:bc:d6:2b:e2:3a:68:b9:
5d:f9:fe:c2:92:9a:70:0d:da:00:9a:b5:70:ef:d0:
94:53:a0:1d:58:91:dc:6c:9f:a7:42:f7:85:2f:88:
79:8b:a4:9f:ad:83:1d:0e:f3:ad:93:52:1c:a0:cb:
d5:7e:81:aa:ef:d4:96:c7:cd:f2:7b:70:5f:20:30:
31:60:9f:27:fc:e0:39:b3:2f:48:86:2b:a0:ea:37:
1a:5c:82:19:7a:8d:e7:d0:25:0e:bb:3b:bc:fc:80:
58:72:ac:2f:8d:50:9e:59:4e:39:34:f7:b4:f8:5c:
5d:97:d8:9c:9d:f1:33:11:78:dc:0d:ae:92:bd:01:
88:86:66:5f:94:3a:dc:a2:84:63:11:fe:bc:5d:58:
04:2e:e4:50:0b:a4:68:3c:be:1c:19:e9:cc:79:1b:
bf:08:a7:ff:6b:75:05:93:5a:0c:99:0a:78:e8:cd:
4f:26:68:a1:4a:82:75:b1:16:44:1b:67:fd:f6:d7:
ec:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D3:9B:C3:D2:79:69:0B:3F:85:33:B8:8B:6A:A3:0E:7B:47:3F:39
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CtObw9J5aQs_hTO4i2qjDntHPzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.238.0/24
193.108.112.0/24
193.124.7.0/24
193.124.44.0/24
194.58.36.0/24
194.58.155.0/24
194.58.223.0/24
194.87.53.0/24
194.87.119.0/24
194.87.162.0/24
194.87.169.0/24
194.87.179.0/24
194.87.228.0/24
195.133.9.0/24
195.133.24.0/23
195.133.40.0/23
195.133.50.0/23
195.133.92.0/23
212.192.241.0/24
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
0d:fa:bd:45:34:c6:e4:68:76:4d:d9:d7:d4:98:2d:c9:f6:ff:
af:cf:85:e3:bb:1b:3f:49:49:55:10:74:40:f0:a7:f0:5d:ac:
09:5d:27:93:05:43:9d:84:a0:ef:c9:87:53:b5:d5:4f:f7:29:
7b:bb:68:b3:07:e0:15:67:20:d0:ab:d8:6d:f3:a8:fd:32:30:
b9:ec:16:67:42:2a:27:47:e3:57:3f:fe:82:e7:b6:07:19:b4:
9e:89:5c:19:8c:6d:fa:45:c1:1c:64:d5:83:db:17:75:71:73:
4d:58:eb:1b:85:61:1d:e9:d1:a4:61:94:c5:ed:c3:b1:f1:f9:
28:7d:b3:48:b4:5a:86:d5:d4:27:18:79:17:38:48:d1:6b:10:
23:e7:92:cf:a0:00:8b:a0:64:76:20:65:e4:53:3f:70:fd:ca:
0e:94:9d:d6:08:c8:1d:28:68:67:ff:a0:8f:56:f7:d4:b4:e6:
d4:12:47:98:fa:6a:06:5c:b2:28:35:d5:47:85:6d:04:f5:5d:
3f:29:8f:3a:ef:32:0e:02:e8:b6:e0:49:df:0b:e6:6c:85:08:
36:88:fd:a8:1e:ac:57:6d:87:07:59:e2:a4:ec:31:69:6c:42:
d1:4a:03:ad:ca:7c:d9:ab:18:dd:56:0c:ad:5a:11:ed:9b:c2:
dc:ad:c9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:59:42 2025 by rpki-client