Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NXmbW2gZOrMg4FYSD_fV1XDT6D0.roa
File: NXmbW2gZOrMg4FYSD_fV1XDT6D0.roa (raw, json)
Hash identifier: gwEqNQWrBtFImEkQc1OIGHy48smWkb3ErjZfp7mZCA0=
Subject key identifier: 35:79:9B:5B:68:19:3A:B3:20:E0:56:12:0F:F7:D5:D5:70:D3:E8:3D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196FE9DC8717DDE7DEA353841FF33751C42
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NXmbW2gZOrMg4FYSD_fV1XDT6D0.roa
Signing time: Fri 23 May 2025 19:27:55 +0000
ROA not before: Fri 23 May 2025 19:27:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213622
IP address blocks: 185.121.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 May 2025 17:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fe:9d:c8:71:7d:de:7d:ea:35:38:41:ff:33:75:1c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 23 19:27:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35799b5b68193ab320e056120ff7d5d570d3e83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:31:79:69:6a:f6:1a:39:52:10:24:42:85:
cb:72:e6:d9:fe:d0:b9:b4:a1:1e:a7:15:27:6d:f6:
e3:e2:8e:d2:84:1b:22:b5:11:71:78:96:46:e5:4b:
1d:2e:13:37:63:5e:f7:e6:4f:65:6e:7a:06:af:29:
64:4d:ac:0b:b0:35:60:f4:24:61:a6:cf:b1:f6:82:
5b:eb:c3:fe:83:86:9d:46:ba:17:14:62:97:a4:af:
3a:af:44:85:6d:f2:63:bd:99:e3:aa:b9:74:a1:42:
41:0f:40:f1:8d:f8:35:a1:1a:6a:57:35:6e:8f:ca:
bd:c7:17:ce:a6:58:9f:f9:30:b1:8c:c6:35:15:aa:
d8:a4:f8:ee:75:9d:a4:78:66:43:4b:33:73:5f:36:
a6:a6:3f:0c:22:f2:45:ac:2a:48:32:11:5a:8d:45:
df:aa:b5:57:d4:a8:b6:ec:92:a9:83:3e:42:70:c3:
3b:47:55:0e:81:45:b2:cc:46:cb:11:7e:98:64:06:
8c:d1:80:74:fc:65:85:98:84:14:4a:11:55:3d:ba:
26:e3:7d:22:3a:55:c4:7c:f9:53:6c:68:bd:ff:43:
23:40:7a:0b:eb:d8:dc:f0:a9:fa:71:a7:79:97:a0:
ee:4f:7c:28:29:0f:f9:ff:02:c6:1e:af:61:16:65:
e2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:79:9B:5B:68:19:3A:B3:20:E0:56:12:0F:F7:D5:D5:70:D3:E8:3D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NXmbW2gZOrMg4FYSD_fV1XDT6D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.69.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:49:86:7c:d1:7e:49:21:e0:4f:7f:77:fc:d3:f4:38:f0:6c:
7c:4a:00:0e:a3:f5:20:4e:41:ef:8c:7c:da:72:c8:96:07:fc:
af:a1:4b:22:78:e8:6c:ab:d9:06:b3:d4:1c:32:a6:7e:69:ec:
83:c3:92:6a:14:92:c5:1e:20:dc:23:3a:8c:54:33:50:07:d4:
f7:09:a8:f9:09:a6:fa:c5:ab:c4:0e:49:f9:24:04:40:b9:f3:
75:b4:c4:87:72:e1:e3:d5:88:4b:64:56:d4:f9:3f:4d:84:54:
80:a8:f7:ce:47:eb:f6:39:49:e0:30:19:0b:24:7c:ad:ff:50:
b4:10:58:dd:9f:66:be:70:0b:2e:df:e3:13:46:cb:5b:e9:db:
06:3b:ec:09:e8:61:79:c6:60:dc:e4:83:a9:45:71:36:11:c4:
e6:78:2f:24:6e:e2:49:71:d8:93:d0:a7:ef:65:48:69:90:e3:
ef:3a:69:4e:c1:96:c6:c6:58:79:f1:c4:49:56:5d:d9:0a:58:
a5:70:69:41:af:e7:01:56:16:35:25:54:73:d4:0a:29:b6:c2:
9b:1a:fb:db:05:a6:31:c2:21:bb:87:b4:37:3d:6c:5f:91:f3:
ad:d4:a2:2e:b2:f7:18:14:dc:f6:5d:1d:8e:4c:d2:66:0a:d6:
26:29:00:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:05:19 2025 by rpki-client