Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/N9ySt_FaoNaJxFEXn3MbNlk0hpI.roa
File: N9ySt_FaoNaJxFEXn3MbNlk0hpI.roa (raw, json)
Hash identifier: 5i5jwfzsqmnK/pK3ESZopqbjGVo3hW5WPzXdsT81/wM=
Subject key identifier: 37:DC:92:B7:F1:5A:A0:D6:89:C4:51:17:9F:73:1B:36:59:34:86:92
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 01907CA4E052B5D639DCAACF9337267314C2
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/N9ySt_FaoNaJxFEXn3MbNlk0hpI.roa
Signing time: Thu 04 Jul 2024 07:28:18 +0000
ROA not before: Thu 04 Jul 2024 07:28:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202391
IP address blocks: 46.34.160.0/22 maxlen: 24
89.42.196.0/22 maxlen: 22
89.42.196.0/24 maxlen: 24
89.42.197.0/24 maxlen: 24
89.42.198.0/24 maxlen: 24
89.42.199.0/24 maxlen: 24
89.47.196.0/22 maxlen: 24
89.47.196.0/24 maxlen: 24
89.47.197.0/24 maxlen: 24
89.47.200.0/22 maxlen: 22
89.47.200.0/24 maxlen: 24
89.47.201.0/24 maxlen: 24
89.47.202.0/24 maxlen: 24
89.47.203.0/24 maxlen: 24
92.114.48.0/23 maxlen: 24
92.114.48.0/24 maxlen: 24
92.114.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 07:36:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7c:a4:e0:52:b5:d6:39:dc:aa:cf:93:37:26:73:14:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Jul 4 07:28:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37dc92b7f15aa0d689c451179f731b3659348692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:0f:e0:10:b2:06:2e:4e:52:50:31:7f:08:
2e:10:95:ea:25:26:e4:e9:af:01:da:77:6b:26:72:
73:18:db:82:b9:25:9f:75:99:2a:2f:85:50:a6:29:
a0:9e:34:28:00:12:9f:62:42:79:b3:86:6d:2f:35:
41:bc:45:81:de:f5:88:56:49:ce:28:1a:31:bf:90:
69:65:3d:82:ed:e5:11:d2:ed:5f:14:80:0e:87:4e:
ca:d0:42:e9:56:9a:f9:c2:29:13:4e:8f:65:60:d4:
45:fd:04:18:0b:86:ec:29:10:dc:2e:27:07:78:b1:
70:cf:82:a8:90:ed:1f:42:7f:a0:9b:44:88:da:aa:
94:cb:a2:2c:96:93:0b:ee:1d:eb:23:d0:87:30:90:
28:6c:dd:9c:b8:d8:62:07:1d:c2:02:7a:13:6f:56:
1c:b6:c7:34:c7:38:1d:74:15:77:92:c2:a3:ec:55:
8a:09:05:f1:fd:66:19:88:7e:9f:9e:7d:11:c5:8d:
4a:9a:1a:bb:91:99:25:9d:ed:51:e3:85:a4:9f:18:
44:9e:4f:68:be:9f:ef:d8:b4:55:36:40:b6:04:9b:
5c:86:4c:93:16:9f:22:06:d5:cf:28:84:37:45:2b:
70:42:db:ac:ca:5f:ca:76:48:67:98:ad:fc:ce:68:
81:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DC:92:B7:F1:5A:A0:D6:89:C4:51:17:9F:73:1B:36:59:34:86:92
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/N9ySt_FaoNaJxFEXn3MbNlk0hpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.160.0/22
89.42.196.0/22
89.47.196.0-89.47.203.255
92.114.48.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:1e:2e:79:0d:48:42:be:c3:40:e4:d8:26:5d:07:79:1e:45:
e2:b5:bf:7d:0d:f0:36:90:63:a9:e9:40:7b:0a:68:76:23:29:
7a:e1:7b:ee:37:60:c6:6d:56:5f:df:fa:9b:bd:7b:f0:b5:ee:
4b:bd:3f:b3:55:4b:8b:e1:ca:a5:d9:f2:a4:68:b0:85:fe:d9:
60:ab:5e:7b:bb:0d:d9:0f:4b:10:12:54:c8:c5:77:c4:27:da:
15:ba:64:e5:81:ee:7a:a9:a7:c2:d2:c4:0a:b7:0f:fa:0f:14:
3c:1d:5c:6f:8a:1f:19:50:ce:83:87:a4:bf:a6:d8:b7:87:12:
79:11:0f:73:8a:c3:f5:c1:da:e3:6d:dc:72:06:ba:09:50:e8:
ee:36:2d:63:e0:a8:13:23:5a:82:0b:16:1d:27:e2:1b:fb:a4:
03:a5:0c:9e:2b:f4:18:84:24:d4:6a:93:7c:c9:06:d6:8c:b8:
0c:cb:db:87:dd:39:ba:80:42:cc:5a:7a:46:fe:51:33:2f:4e:
ed:09:eb:97:0d:55:5c:32:4b:a5:23:29:0b:fd:8b:f2:24:29:
94:66:7e:c6:16:21:68:9d:92:07:85:66:11:33:a0:93:38:d1:
90:bb:78:7f:0f:bb:25:44:c3:42:52:c7:13:dd:f2:95:9d:14:
35:0b:84:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:07:28 2025 by rpki-client