Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N_JrD_Nry_Ose11xoIsj9Q4waNg.roa
File: N_JrD_Nry_Ose11xoIsj9Q4waNg.roa (raw, json)
Hash identifier: fLXPFV/FnLy5UxwHSDu5/vQ4BCczBNJ0kfz0EL6aaoc=
Subject key identifier: 37:F2:6B:0F:F3:6B:CB:F3:AC:7B:5D:71:A0:8B:23:F5:0E:30:68:D8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195EBACE0547D614A78BDB0FF6BFF42982D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N_JrD_Nry_Ose11xoIsj9Q4waNg.roa
Signing time: Mon 31 Mar 2025 10:08:50 +0000
ROA not before: Mon 31 Mar 2025 10:08:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214417
IP address blocks: 45.66.230.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
87.121.86.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.156.104.0/24 maxlen: 24
94.156.166.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
176.125.254.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 17:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:ac:e0:54:7d:61:4a:78:bd:b0:ff:6b:ff:42:98:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 31 10:08:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37f26b0ff36bcbf3ac7b5d71a08b23f50e3068d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:06:12:4f:90:7b:c4:f2:59:45:1f:09:4d:
6e:29:0d:a9:e0:f6:dd:1c:82:a7:03:be:57:59:bb:
b6:1d:92:e6:1b:6c:b7:89:12:3b:62:05:cd:0b:90:
c8:6f:75:36:c1:1a:f0:45:bc:33:84:0c:31:ff:a9:
55:9b:0c:d4:24:25:32:9e:94:66:3e:2b:46:ba:14:
91:be:ba:7e:a3:b7:fb:33:fa:9b:8b:4c:b1:6c:68:
7f:50:8f:b6:46:34:a4:69:44:6d:e6:65:b8:33:31:
bb:e9:58:8d:94:93:eb:94:6c:c8:fe:40:4c:86:c0:
9a:e1:e5:22:cd:da:c7:c9:d2:35:cc:b3:52:e6:e7:
4a:80:e6:9c:94:2c:30:9e:4f:5c:03:23:27:2a:df:
fc:ef:4c:b8:cf:3b:c0:a1:a5:99:0b:4c:cd:c6:c9:
2d:64:c6:14:8f:d9:ab:67:0b:82:fa:15:00:e7:b3:
b0:ea:fa:55:70:5e:53:b3:f0:34:e0:6d:17:bb:57:
34:31:47:04:fc:d7:e1:79:14:e6:dc:93:3d:86:e7:
12:5e:9b:28:ba:21:78:26:87:61:41:6d:86:dc:21:
fc:67:eb:d1:1d:d7:12:c9:ca:ec:41:64:7e:b1:2a:
da:1f:50:45:6d:75:0d:1c:81:5a:31:0f:de:8e:d8:
8a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F2:6B:0F:F3:6B:CB:F3:AC:7B:5D:71:A0:8B:23:F5:0E:30:68:D8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N_JrD_Nry_Ose11xoIsj9Q4waNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.230.0/24
45.88.88.0/24
79.110.62.0/24
83.219.97.0/24
87.121.86.0/24
87.121.221.0/24
93.123.85.0/24
94.103.125.0/24
94.156.104.0/24
94.156.166.0/24
141.98.6.0/24
176.125.254.0/24
185.252.177.0/24
194.48.250.0/24
Signature Algorithm: sha256WithRSAEncryption
99:d2:80:bb:9e:5b:70:2c:54:fc:30:c0:3e:51:01:0f:ab:78:
a6:c3:44:0e:12:5f:be:83:71:5d:7e:12:a8:5a:ce:6f:a2:26:
ca:34:b0:96:ac:dc:2a:84:62:fd:13:aa:ba:13:38:ac:62:ab:
22:27:aa:8c:73:c0:15:5d:8e:cc:93:1e:00:16:eb:ed:7e:28:
b9:52:95:9f:42:f9:24:c2:06:2a:27:bd:0f:77:4d:88:1d:7b:
2a:8d:d8:28:6a:ce:49:99:fb:5d:4a:d0:77:e1:0f:40:f9:cb:
14:73:07:a4:8d:56:1a:17:74:6f:e7:46:39:7e:fc:e3:a8:57:
62:5b:d1:b3:c4:e9:b7:ee:11:8f:97:e3:3a:4d:27:e5:6d:f6:
3a:06:ff:74:1c:e1:9b:13:ab:ba:af:95:28:66:30:89:53:7d:
4c:c7:f2:40:0f:38:1f:31:5c:63:e5:20:4a:8c:34:43:c7:67:
1b:2d:cb:95:a5:ca:b4:ae:24:b7:1f:3d:ee:9f:eb:ef:ee:eb:
74:87:71:4e:b5:2e:80:47:6a:e6:e7:8b:d8:54:ac:f1:aa:67:
27:fa:3d:f6:42:5a:28:fe:2b:ae:19:c2:95:b5:b2:e6:c0:62:
c1:1c:0a:fd:7b:76:56:c4:51:bd:e8:9f:4f:1c:1a:d5:37:56:
7f:88:4f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:12:35 2025 by rpki-client