Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/NRgvGufzo3vxFAsWqhyHOqPhVaY.roa
File: NRgvGufzo3vxFAsWqhyHOqPhVaY.roa (raw, json)
Hash identifier: 2iex1/L/Gqea2d2k6g/IYQI4AsxFTf4tNsljfyk1A8E=
Subject key identifier: 35:18:2F:1A:E7:F3:A3:7B:F1:14:0B:16:AA:1C:87:3A:A3:E1:55:A6
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802E00CB48DDF3C418238459D3459D0
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/NRgvGufzo3vxFAsWqhyHOqPhVaY.roa
Signing time: Tue 02 Jan 2024 02:31:20 +0000
ROA not before: Tue 02 Jan 2024 02:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 194.132.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Sep 2024 09:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:e0:0c:b4:8d:df:3c:41:82:38:45:9d:34:59:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35182f1ae7f3a37bf1140b16aa1c873aa3e155a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:87:34:6e:51:e8:aa:2c:42:66:53:2e:7b:6b:
89:88:ff:36:be:28:db:32:56:f5:29:51:82:d2:80:
e7:f3:97:14:58:b7:2a:96:51:fb:14:a1:90:d8:81:
49:46:5e:2d:80:9f:62:13:c9:6f:2a:2d:69:79:94:
10:09:0b:1e:24:ae:64:0a:92:3b:81:31:12:a7:51:
24:84:f3:58:d3:46:8f:10:1f:ba:06:b9:cf:08:65:
9c:8a:98:8d:f1:f2:69:3a:b6:37:be:dd:e3:aa:f2:
b5:35:ca:55:e2:35:bc:c5:24:25:09:a4:aa:f8:01:
9e:5a:46:7d:e0:f2:88:f0:c2:b1:d3:84:13:50:9b:
6a:94:13:21:54:ea:47:f9:96:29:1c:31:d0:9b:81:
f8:57:20:37:28:64:8b:35:ab:58:5e:11:83:05:42:
00:22:64:d4:fd:4d:2a:d5:ec:0c:80:0e:36:66:03:
62:b4:57:4b:4f:e3:6f:9c:b5:2d:a5:1a:ba:81:ae:
cc:e3:f7:93:8e:fc:44:50:65:d2:17:cb:9f:76:09:
d0:c1:c2:db:22:27:10:4c:14:96:66:b3:e5:8c:24:
b2:57:fa:3b:91:ae:f5:e9:b8:fb:41:9e:10:a4:69:
e1:5e:8b:69:33:79:7d:1d:ee:b3:ad:1e:2e:78:04:
d2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:18:2F:1A:E7:F3:A3:7B:F1:14:0B:16:AA:1C:87:3A:A3:E1:55:A6
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/NRgvGufzo3vxFAsWqhyHOqPhVaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.132.60.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:82:ac:79:7b:b3:20:53:30:7e:57:2a:2d:79:49:92:58:d4:
5f:49:92:f1:3a:2d:d7:d4:71:75:0b:bf:1b:ee:bc:b1:d5:d4:
5d:f9:f5:8a:34:9f:9b:1c:c1:8b:5e:9c:10:e9:cb:61:46:eb:
69:8d:05:58:9d:75:3a:26:f9:0e:c8:96:ec:82:bf:31:66:97:
31:f3:90:18:58:d6:2f:a1:58:82:d7:aa:1a:0e:7a:5e:e4:f6:
ff:6e:cb:e6:22:9b:cc:1d:57:c6:b9:99:b2:4e:ea:83:2f:97:
bc:4e:9d:e3:9d:09:ee:ea:58:62:e6:b5:7d:db:b0:c6:d0:13:
58:a9:36:a8:b3:3c:90:7f:b4:71:f7:b4:28:1b:a5:b9:b5:b6:
ab:7a:88:fc:93:00:16:9f:62:e4:75:46:ac:99:08:72:86:03:
db:b6:22:3c:96:a0:4a:0c:7b:3b:69:be:6f:41:b4:9e:86:33:
43:4b:d4:ac:58:17:8d:73:96:ee:7d:6f:a1:a2:39:69:1d:d5:
bf:ef:c6:a0:5e:53:01:5c:b5:d0:ac:f5:5e:6a:15:09:8a:fc:
6a:e4:b6:79:58:03:e1:89:d8:34:d5:8e:80:bd:cd:02:07:24:
d7:fe:50:61:d2:f1:e4:c2:10:fa:67:d5:c5:ef:f8:ab:b3:b8:
0f:60:72:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:51:56 2025 by rpki-client