Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/deuTA-L0DNJ3rRqI7Y7N1A3Vy8s.roa
File: deuTA-L0DNJ3rRqI7Y7N1A3Vy8s.roa (raw, json)
Hash identifier: NOoN9gXSCHmsEP2KsGGf4QVF/vZzo7b3g+ZDpvgUWK0=
Subject key identifier: 75:EB:93:03:E2:F4:0C:D2:77:AD:1A:88:ED:8E:CD:D4:0D:D5:CB:CB
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 018CC349290AB9C60E16A6ABC2167B41D59A
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/deuTA-L0DNJ3rRqI7Y7N1A3Vy8s.roa
Signing time: Mon 01 Jan 2024 04:30:00 +0000
ROA not before: Mon 01 Jan 2024 04:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16125
IP address blocks: 46.166.160.0/20 maxlen: 32
185.8.104.0/22 maxlen: 32
5.199.160.0/20 maxlen: 32
93.115.24.0/21 maxlen: 32
185.150.116.0/22 maxlen: 32
188.214.128.0/21 maxlen: 32
2a02:ae00::/36 maxlen: 48
Validation: Failed, certificate revoked on Wed 10 Jan 2024 11:54:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:29:0a:b9:c6:0e:16:a6:ab:c2:16:7b:41:d5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Jan 1 04:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75eb9303e2f40cd277ad1a88ed8ecdd40dd5cbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:d3:ea:d6:a8:e4:3c:89:ce:57:06:98:59:
e2:68:c2:77:1b:81:b0:19:8c:6c:45:ae:2d:57:ec:
b0:32:e8:16:33:d7:91:60:40:ea:47:f5:5d:eb:ec:
7c:8f:b4:e6:4f:8a:00:3f:ce:39:17:63:c7:57:a4:
46:5a:1f:39:e4:9b:1d:84:11:55:f6:dc:30:ea:e7:
a9:5a:d0:bb:b5:3f:1c:6c:7c:42:d4:7f:f3:53:d1:
87:7e:61:8d:c3:8e:0f:1e:34:00:cd:f9:98:2b:d6:
d5:cb:e9:b1:2d:72:e7:0c:eb:f3:db:62:79:59:78:
34:f8:89:4b:de:01:f7:fc:3c:f3:9e:46:10:9f:fb:
14:88:e6:d5:b6:ab:c7:2b:04:0c:ae:3a:07:8d:5e:
02:e1:d0:3f:23:26:18:6e:1a:b7:32:ff:20:fa:9a:
f9:9b:14:d8:1b:da:31:91:11:2a:e0:f9:3b:80:bf:
ab:83:4d:2f:e1:7e:1d:78:8b:e8:cb:63:c0:53:e6:
05:16:a7:f2:55:50:c5:57:d5:ad:03:de:b5:88:e6:
44:a0:cd:ea:57:eb:e4:42:a5:0c:ae:d4:2b:bb:9d:
e8:b5:c4:ce:15:c4:62:fe:1e:b2:47:56:68:fd:da:
b5:a1:88:59:ae:f7:66:94:4b:e0:3c:70:05:e4:99:
3f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EB:93:03:E2:F4:0C:D2:77:AD:1A:88:ED:8E:CD:D4:0D:D5:CB:CB
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/deuTA-L0DNJ3rRqI7Y7N1A3Vy8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.160.0/20
46.166.160.0/20
93.115.24.0/21
185.8.104.0/22
185.150.116.0/22
188.214.128.0/21
IPv6:
2a02:ae00::/36
Signature Algorithm: sha256WithRSAEncryption
91:52:db:ba:9b:52:e7:40:f9:b6:41:31:6c:6f:3b:13:17:12:
5f:fa:0f:08:09:58:c9:30:4a:03:03:bc:ed:e3:6f:2c:e4:3b:
0f:78:12:70:c9:58:c9:97:16:e9:e1:02:0a:4e:f2:68:f7:4c:
2d:02:5f:29:b5:e3:5f:c1:34:d4:a5:e4:57:f8:de:4d:83:02:
67:4e:9f:61:54:a1:e1:54:8b:ac:f3:8b:5d:16:b6:1c:4b:0f:
e0:c6:d1:bf:c2:97:6e:1b:3d:47:a1:d9:ec:ab:64:16:60:43:
6b:fc:f0:62:f2:0d:2a:3c:4f:d0:f7:14:41:ad:e2:4b:55:a7:
dc:aa:c4:26:dc:65:e3:09:a3:1d:be:5e:47:15:7e:85:c3:c9:
47:ee:13:6a:28:b2:54:fe:a7:6b:bb:64:db:1c:a4:c7:6c:10:
89:cc:dd:68:99:58:92:33:62:c2:11:ca:ab:ff:96:68:0d:23:
14:aa:95:f3:e5:31:9b:a1:e0:b0:92:6e:6a:9a:b9:e0:68:9d:
f3:15:1a:77:20:16:86:b2:26:09:f9:cc:d6:6f:80:13:37:03:
30:e2:c3:c2:ce:ad:f4:0a:68:5b:c4:85:40:ba:11:79:4f:51:
7f:cb:dd:92:ad:6c:df:6c:bb:3f:53:7e:97:74:ce:e4:f1:26:
ef:56:32:48
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAYzDSSkKucYOFqarwhZ7QdWaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MzNhZTFjNjA2NzJjNzU5MWE4Zjk3ZDY4Zjc5ZmIyYTVl
ZThkYTcwHhcNMjQwMTAxMDQzMDAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWViOTMwM2UyZjQwY2QyNzdhZDFhODhlZDhlY2RkNDBkZDVjYmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFLT6tao5DyJzlcGmFniaMJ3G4Gw
GYxsRa4tV+ywMugWM9eRYEDqR/Vd6+x8j7TmT4oAP845F2PHV6RGWh855JsdhBFV
9tww6uepWtC7tT8cbHxC1H/zU9GHfmGNw44PHjQAzfmYK9bVy+mxLXLnDOvz22J5
WXg0+IlL3gH3/DzznkYQn/sUiObVtqvHKwQMrjoHjV4C4dA/IyYYbhq3Mv8g+pr5
mxTYG9oxkREq4Pk7gL+rg00v4X4deIvoy2PAU+YFFqfyVVDFV9WtA961iOZEoM3q
V+vkQqUMrtQru53otcTOFcRi/h6yR1Zo/dq1oYhZrvdmlEvgPHAF5Jk/zQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFHXrkwPi9AzSd60aiO2OzdQN1cvLMB8GA1UdIwQY
MBaAFDQzrhxgZyx1kaj5fWj3n7Kl7o2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYt
MzBjZTgzNzAxYjM5LzEvZGV1VEEtTDBETkozclJxSTdZN04xQTNWeThzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYtMzBjZTgzNzAxYjM5
LzEvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAqBAIAATAkAwQEBcegAwQE
LqagAwQDXXMYAwQCuQhoAwQCuZZ0AwQDvNaAMA4EAgACMAgDBgQqAq4AADANBgkq
hkiG9w0BAQsFAAOCAQEAkVLbuptS50D5tkExbG87ExcSX/oPCAlYyTBKAwO87eNv
LOQ7D3gScMlYyZcW6eECCk7yaPdMLQJfKbXjX8E01KXkV/jeTYMCZ06fYVSh4VSL
rPOLXRa2HEsP4MbRv8KXbhs9R6HZ7KtkFmBDa/zwYvINKjxP0PcUQa3iS1Wn3KrE
Jtxl4wmjHb5eRxV+hcPJR+4TaiiyVP6na7tk2xykx2wQiczdaJlYkjNiwhHKq/+W
aA0jFKqV8+Uxm6HgsJJuapq54Gid8xUadyAWhrImCfnM1m+AEzcDMOLDws6t9Apo
W8SFQLoReU9Rf8vdkq1s32y7P1N+l3TO5PEm71YySA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:13 2024 by rpki-client on console-fra.rpki-client.org