Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/NEUG02dGa1VMZ6w0lnXwa-BZiSA.roa
File: NEUG02dGa1VMZ6w0lnXwa-BZiSA.roa (raw, json)
Hash identifier: Ey0MWjqruVr7MOgX7d9C8EgYVXyB2NBEA1NFTNZxn88=
Subject key identifier: 34:45:06:D3:67:46:6B:55:4C:67:AC:34:96:75:F0:6B:E0:59:89:20
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01965831086531020C8E09CDDF795A628029
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/NEUG02dGa1VMZ6w0lnXwa-BZiSA.roa
Signing time: Mon 21 Apr 2025 11:52:10 +0000
ROA not before: Mon 21 Apr 2025 11:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 45.88.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Apr 2025 10:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:31:08:65:31:02:0c:8e:09:cd:df:79:5a:62:80:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 21 11:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=344506d367466b554c67ac349675f06be0598920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:8c:d3:60:52:2f:23:71:8d:8e:2d:23:52:
17:97:a6:76:6a:f6:e7:53:f2:04:4f:0b:29:e6:c4:
de:ef:99:e2:e5:70:c9:41:76:99:01:e6:38:d8:c4:
2c:1f:45:16:cf:2e:44:5b:3c:66:2f:2b:ec:51:a3:
7a:9b:d4:92:a8:b4:09:35:d3:5e:3d:12:99:cf:53:
ba:0b:b4:5b:e4:90:47:3f:a3:ab:db:97:ae:9c:c2:
19:b4:0b:da:60:12:dc:10:7a:39:12:68:57:7d:ef:
4f:ae:fa:27:e1:64:00:2e:ff:72:1f:8d:95:2a:d5:
92:01:f7:d3:61:97:f7:b9:0c:7b:bb:8d:01:d5:91:
55:81:48:25:a9:a4:5d:e8:bf:b3:91:09:3a:4b:9b:
ec:e9:9e:7f:6b:e9:18:4e:59:26:b6:37:ca:2d:03:
28:dd:62:1d:1d:e9:9d:c7:28:19:b1:49:a5:ac:69:
56:77:10:f9:7f:50:bd:c6:07:c0:75:25:5c:b2:e6:
34:c2:22:5c:ad:22:7a:3b:da:fa:5f:71:28:62:12:
5e:ec:6f:71:70:0d:a2:f7:fd:cf:61:ed:d2:43:a5:
0b:3f:04:78:4b:ff:3e:cb:b3:c8:56:24:a3:e5:de:
1f:a2:4c:4c:62:30:48:30:d5:49:eb:84:20:ce:34:
27:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:45:06:D3:67:46:6B:55:4C:67:AC:34:96:75:F0:6B:E0:59:89:20
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/NEUG02dGa1VMZ6w0lnXwa-BZiSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.137.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d4:7a:9c:cf:69:a9:14:69:12:4d:59:0d:0d:00:1c:c3:c1:
5c:15:51:96:cc:59:09:47:45:5a:9c:00:9f:47:84:a8:4e:eb:
7f:b7:f0:5c:57:eb:e8:dc:97:04:bf:05:c5:42:21:fe:c9:bc:
37:95:8b:ab:03:94:62:d3:74:f2:aa:4d:dd:2d:27:40:f9:16:
cc:42:d9:ee:02:5c:e2:19:fe:56:b3:a7:ee:a7:23:75:d2:dd:
7f:8b:de:6c:38:d9:15:9b:6d:ee:3d:9a:87:fe:c3:5b:46:bd:
7c:15:87:2d:e4:0f:d7:64:05:29:5d:d8:9e:5c:64:56:6f:47:
5e:59:1b:ef:79:dd:a6:32:57:9d:84:35:35:58:50:d4:81:bc:
81:17:64:b8:65:03:ed:b7:d8:18:b6:16:86:dc:b9:29:fd:b6:
23:e9:0d:f8:74:7a:51:a2:91:8c:f6:0d:51:63:05:16:cb:5e:
a4:d3:4a:e5:b3:c5:92:6b:a5:f3:3b:c9:08:ba:24:cf:e7:0b:
a1:82:40:f4:55:6e:33:b2:9a:7d:c0:6b:4b:4c:d9:3b:53:8b:
b1:4e:07:86:27:96:cf:d1:5c:69:be:80:b4:8f:59:7c:97:0e:
a4:a4:35:fb:f3:3d:56:9f:8b:36:a3:fd:b6:45:06:fa:f0:eb:
e5:a1:21:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:37:28 2025 by rpki-client