Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/DUi-2ium4Fc447t47G70p_F65vY.roa
File: DUi-2ium4Fc447t47G70p_F65vY.roa (raw, json)
Hash identifier: JvvWzfEESkCYnyMTLp0+zLCDG/haBeV3jA0RmTwRu4U=
Subject key identifier: 0D:48:BE:DA:2B:A6:E0:57:38:E3:BB:78:EC:6E:F4:A7:F1:7A:E6:F6
Certificate issuer: /CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Certificate serial: 0193A35E3C92E599645D50F452619C2FC1AF
Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/DUi-2ium4Fc447t47G70p_F65vY.roa
Signing time: Sat 07 Dec 2024 23:04:42 +0000
ROA not before: Sat 07 Dec 2024 23:04:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395793
IP address blocks: 185.145.240.0/24 maxlen: 24
185.145.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Dec 2024 13:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a3:5e:3c:92:e5:99:64:5d:50:f4:52:61:9c:2f:c1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Validity
Not Before: Dec 7 23:04:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d48beda2ba6e05738e3bb78ec6ef4a7f17ae6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e8:56:87:80:51:62:5f:a0:6b:bd:cd:ce:a8:
89:b9:de:6b:df:ce:6b:31:fd:7a:fb:ed:36:69:0d:
d6:fc:3f:19:7d:2f:af:8a:66:a7:b3:79:ff:84:79:
4b:9c:96:7c:3b:77:ae:38:c9:21:4a:46:90:11:2b:
4f:db:f5:d6:14:be:c3:af:12:01:67:cc:d8:4c:b5:
cc:60:cd:68:71:10:53:bd:44:e4:b9:2e:cf:26:1e:
93:26:b8:af:a5:9c:f4:e3:90:12:b2:2d:39:d4:b8:
2a:d9:c6:f9:01:70:09:c3:2c:db:df:60:7d:0f:4d:
76:ff:23:e1:cb:e1:59:83:9d:e0:54:c9:e2:e4:f7:
de:9d:54:59:8e:25:6c:5b:78:94:bf:e5:f8:67:c7:
18:53:bc:31:df:e5:87:ca:56:2f:84:4c:9a:82:bd:
b8:de:19:ce:a5:a8:b2:0f:29:07:84:0a:eb:81:63:
b6:c8:7f:ce:73:bb:84:7d:cd:be:e9:2e:1f:b4:c1:
8f:e2:16:58:41:a4:67:eb:4f:8f:a4:4d:52:93:35:
80:c4:02:79:40:5f:1e:95:ea:b7:82:a8:7d:b9:ce:
2b:a6:54:e0:47:fc:b1:4d:cf:b3:e1:6a:29:99:49:
dd:ac:29:46:be:5b:f7:5e:8c:8f:fd:80:87:65:44:
d0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:48:BE:DA:2B:A6:E0:57:38:E3:BB:78:EC:6E:F4:A7:F1:7A:E6:F6
X509v3 Authority Key Identifier:
keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/DUi-2ium4Fc447t47G70p_F65vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.240.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:f5:55:0b:b7:d6:7a:3d:b9:d6:0d:1c:3b:2e:5b:a3:d8:20:
7c:f7:a1:36:c0:75:0a:75:24:dd:0b:80:37:28:fa:e8:cd:ab:
77:d5:3e:f1:6b:04:ed:09:9e:66:64:d1:63:ba:74:1d:52:26:
5c:77:fe:f9:cf:dc:3d:01:2d:35:98:93:e0:b7:25:70:7d:be:
86:44:6a:2c:78:ea:c4:49:14:94:64:bf:ab:5f:fc:4c:61:6f:
f9:99:c8:ab:2a:00:a4:18:1b:97:3a:a5:e6:78:52:00:07:01:
5c:c0:fb:e5:97:bb:4c:d0:19:9a:64:a0:c4:43:d8:ef:2d:37:
6b:75:4c:25:10:3f:3c:76:26:c6:8f:55:80:bc:68:3f:16:b0:
65:bb:bb:9c:9f:9f:2b:85:57:8d:c0:d2:0f:06:44:06:83:c9:
d3:32:9b:6b:2a:c0:14:2a:74:dc:02:a4:7e:04:23:50:25:56:
a4:57:39:22:97:6b:b1:31:2a:4c:0e:79:1a:03:b3:45:d5:2a:
37:d2:06:08:f7:38:38:5c:f0:d2:7b:3a:48:df:7d:a8:f7:0b:
ea:e1:57:4f:f8:ce:b1:ce:5e:75:3c:53:cd:c5:cb:0c:52:e0:
6d:92:ed:27:ae:30:e0:30:67:69:21:25:ef:ff:d6:4a:89:d7:
0e:ba:7d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:02:41 2025 by rpki-client