Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/DstLdgmW5tfXcu5YxwTRbQ_V3PI.roa
File: DstLdgmW5tfXcu5YxwTRbQ_V3PI.roa (raw, json)
Hash identifier: z8ry+xRejc9rJEzjzhkD7cIFVnNQWlDCJlarhvZwr7k=
Subject key identifier: 0E:CB:4B:76:09:96:E6:D7:D7:72:EE:58:C7:04:D1:6D:0F:D5:DC:F2
Certificate issuer: /CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Certificate serial: 018CC8011315BF973293EDDA33BB21EB9B9A
Authority key identifier: BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/DstLdgmW5tfXcu5YxwTRbQ_V3PI.roa
Signing time: Tue 02 Jan 2024 02:29:22 +0000
ROA not before: Tue 02 Jan 2024 02:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50084
IP address blocks: 185.96.176.0/24 maxlen: 24
185.96.179.0/24 maxlen: 24
185.96.176.0/22 maxlen: 22
185.96.177.0/24 maxlen: 24
185.96.178.0/24 maxlen: 24
194.247.164.0/23 maxlen: 23
194.247.164.0/24 maxlen: 24
194.247.165.0/24 maxlen: 24
2a07:4140::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:13:15:bf:97:32:93:ed:da:33:bb:21:eb:9b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Validity
Not Before: Jan 2 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ecb4b760996e6d7d772ee58c704d16d0fd5dcf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:28:de:f5:d4:0e:b0:17:af:25:f6:3e:ab:9d:
4c:77:96:53:70:01:69:96:0e:06:96:06:0c:e7:bc:
61:e2:b2:b9:26:74:04:f4:73:c3:ac:8c:7e:0b:ba:
f9:85:85:54:be:ed:08:87:08:9f:7f:be:8e:2a:bc:
c1:49:fd:2c:4c:18:cd:b7:22:2e:80:ea:c8:db:f5:
17:b0:27:e1:ca:c2:7b:63:97:27:99:0a:c8:24:3d:
11:fe:17:fb:82:9f:7b:d6:ec:6c:6b:cd:81:75:3f:
e7:4c:1c:f0:cc:75:83:ce:8c:8f:ae:e3:c0:7f:a3:
8f:6f:19:25:f8:22:39:d4:9e:a2:8b:5e:1e:2f:95:
8d:d5:3a:38:93:02:c5:24:7d:f4:53:70:7d:29:49:
c6:26:89:14:b3:23:f9:90:43:df:9e:08:e8:1e:b1:
b0:f1:10:89:07:8a:2b:fe:08:43:ad:8e:1a:d7:f8:
52:08:48:9c:23:a2:ef:eb:3a:df:ce:7e:c7:a0:de:
bb:82:ca:3a:17:e4:bf:d9:76:e5:25:f7:6a:21:e2:
32:00:8e:d9:2f:27:7e:4b:8e:ff:f9:31:35:ed:b8:
06:ed:d5:13:c2:9a:de:7d:18:b3:18:2e:a2:51:ef:
23:75:ad:91:fb:8e:2a:69:1e:87:3f:17:f5:46:03:
5c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CB:4B:76:09:96:E6:D7:D7:72:EE:58:C7:04:D1:6D:0F:D5:DC:F2
X509v3 Authority Key Identifier:
keyid:BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/DstLdgmW5tfXcu5YxwTRbQ_V3PI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.176.0/22
194.247.164.0/23
IPv6:
2a07:4140::/29
Signature Algorithm: sha256WithRSAEncryption
25:30:25:ae:b8:ef:e4:cf:6a:e0:52:c8:66:db:1d:49:f9:0b:
29:ac:2d:45:f9:19:d7:6a:00:f5:a2:2e:a9:1d:5a:70:93:3b:
48:27:9c:a2:55:66:cd:08:ad:0c:7e:de:bb:b9:f7:3f:f7:db:
86:f6:ef:4d:97:f7:ac:ea:60:cb:df:dd:57:d1:c6:fe:b4:61:
fd:af:39:ee:35:04:f4:c2:ce:b3:98:52:7a:46:82:b3:2e:61:
c0:12:13:a4:8f:97:d5:61:7f:12:c4:9e:d1:78:2b:e9:26:ba:
4f:fb:1f:09:bd:55:e3:de:98:84:88:e5:cd:81:f3:1a:a8:de:
fd:e5:36:24:0a:07:1b:ff:fa:fa:e8:ba:c2:02:ff:3d:c9:ac:
68:b5:65:31:96:c2:23:20:69:2d:cb:9e:63:12:eb:64:36:27:
34:be:c8:19:08:0e:89:84:ed:b2:9c:77:67:df:7e:d1:6e:a4:
97:ed:52:2a:e5:28:d9:d4:2d:e9:80:b0:2b:78:f2:d4:0d:3b:
47:06:1c:2e:ab:9a:e5:6e:33:4d:9a:07:e4:42:2f:41:13:74:
cb:3f:78:34:d8:29:65:5e:c8:98:9c:f3:dc:ef:ce:93:c9:44:
4e:44:5e:38:2c:5e:70:a0:9f:c7:78:b2:8f:e9:1b:3b:11:da:
12:8b:11:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:32:34 2025 by rpki-client