Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/DkGIuu7rGg0OYv-Bq6mbMofFiwc.roa
File: DkGIuu7rGg0OYv-Bq6mbMofFiwc.roa (raw, json)
Hash identifier: Nlzy19cQA9GK9QCTrco/ZdlSzsKl0ay3RIkQGTkhMmg=
Subject key identifier: 0E:41:88:BA:EE:EB:1A:0D:0E:62:FF:81:AB:A9:9B:32:87:C5:8B:07
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 0190038C73D4E29F5E08178D8EF8E4A2AB38
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/DkGIuu7rGg0OYv-Bq6mbMofFiwc.roa
Signing time: Mon 10 Jun 2024 19:07:34 +0000
ROA not before: Mon 10 Jun 2024 19:07:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48539
IP address blocks: 178.212.137.0/24 maxlen: 24
2a11:6a00::/29 maxlen: 29
2a12:2780::/29 maxlen: 29
2a12:8200::/29 maxlen: 29
2a12:ab00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 11 Jun 2024 07:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:03:8c:73:d4:e2:9f:5e:08:17:8d:8e:f8:e4:a2:ab:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: Jun 10 19:07:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e4188baeeeb1a0d0e62ff81aba99b3287c58b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:29:df:b8:da:67:f8:6f:5d:71:38:93:e7:b4:
ed:c8:e9:69:43:cf:a0:f5:c0:c0:3e:fb:6a:27:60:
48:1a:b2:c4:37:06:4c:b7:46:49:1a:cb:96:61:70:
26:9e:c4:4e:06:c9:5a:62:75:68:f6:e3:f7:61:c4:
8d:44:9c:3d:3a:71:78:ea:d6:df:8f:d5:89:f7:dd:
78:b8:d6:87:4e:61:38:37:07:e1:14:19:c0:d3:63:
10:37:e1:59:6a:3c:8b:f7:37:53:7b:55:97:b9:62:
d7:66:6c:e7:2c:dc:87:f5:98:f1:37:35:b5:64:47:
ae:f4:c9:7b:36:4d:5a:b4:7a:72:5a:dd:af:1c:b2:
c2:4d:b0:d4:ca:e9:7d:52:a0:6e:a2:fd:aa:e3:f8:
52:49:77:83:f9:43:20:70:65:3a:1c:00:97:a2:08:
fa:42:a0:6a:c2:ab:30:4e:cc:72:19:b1:bb:a2:da:
08:57:b8:e6:0b:d8:0b:87:96:ec:ad:4b:30:e5:ec:
b8:ae:28:69:5b:5b:d9:65:50:c0:6b:01:a2:f2:7c:
c5:29:50:26:14:5f:37:7b:dd:1d:d7:1c:b3:6b:51:
8e:08:46:88:2a:78:c9:af:e7:e5:f4:98:5a:39:57:
ed:8b:2f:eb:b7:f4:04:b6:ca:28:7d:d0:25:d2:dc:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:41:88:BA:EE:EB:1A:0D:0E:62:FF:81:AB:A9:9B:32:87:C5:8B:07
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/DkGIuu7rGg0OYv-Bq6mbMofFiwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.137.0/24
IPv6:
2a11:6a00::/29
2a12:2780::/29
2a12:8200::/29
2a12:ab00::/29
Signature Algorithm: sha256WithRSAEncryption
21:e6:89:a4:e4:50:39:dd:00:b5:0d:0b:47:23:11:99:62:f4:
01:85:65:0f:f1:05:31:b7:ac:a9:64:45:ba:47:29:b5:89:9f:
bd:65:3b:7e:48:f2:33:e3:0f:92:9b:29:c2:d0:ec:08:4b:ef:
f2:08:f0:d5:7a:b5:8f:58:ce:42:ba:95:96:13:04:fb:8a:d8:
4b:c1:ad:16:67:84:09:aa:29:e4:92:51:35:2b:db:fe:4e:c8:
1f:07:61:8e:9e:c7:4c:e7:56:73:89:a7:8e:e3:ca:0b:99:5e:
d1:58:7a:72:58:21:a9:dd:c3:a5:2f:6b:22:d7:00:ac:95:0a:
12:42:1b:8f:ed:4c:2f:a3:0c:70:72:10:60:9b:42:98:93:9a:
10:04:f7:73:ec:f6:b4:cc:88:e9:fb:4e:8c:f1:9a:65:b1:dc:
57:30:ea:d3:4c:72:44:23:3a:87:80:6c:c8:a4:e7:ee:17:f1:
ad:5f:c3:9d:3a:5f:f3:33:92:5d:68:b9:5a:86:00:22:71:b0:
c5:a8:1b:43:cc:9d:8e:e8:85:a8:91:6d:f2:50:0a:d1:24:ab:
f1:cb:55:c3:0f:dc:42:f3:0d:b6:4b:20:55:4f:1b:81:54:22:
32:e5:7b:44:5e:18:a1:5d:44:42:a2:98:9b:df:da:e9:b4:9a:
7d:4b:18:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 10:55:57 2024 by rpki-client on console-fra.rpki-client.org