Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/DeK9SiQds2X-WVBGeKKmV7bBzyY.roa
File: DeK9SiQds2X-WVBGeKKmV7bBzyY.roa (raw, json)
Hash identifier: HT2EUreI4mx/JcW8ZI3KSboqyCB/IANNAX+eDmtjNlQ=
Subject key identifier: 0D:E2:BD:4A:24:1D:B3:65:FE:59:50:46:78:A2:A6:57:B6:C1:CF:26
Certificate issuer: /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial: 0192033355666FC3FB8BA15AFFAEC9119ECD
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/DeK9SiQds2X-WVBGeKKmV7bBzyY.roa
Signing time: Wed 18 Sep 2024 03:35:48 +0000
ROA not before: Wed 18 Sep 2024 03:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28787
IP address blocks: 37.61.0.0/17 maxlen: 17
37.61.56.0/21 maxlen: 21
37.61.77.0/24 maxlen: 24
37.61.78.0/24 maxlen: 24
37.61.79.0/24 maxlen: 24
37.61.112.0/22 maxlen: 22
37.61.116.0/22 maxlen: 22
37.61.120.0/22 maxlen: 22
37.61.124.0/22 maxlen: 22
81.17.80.0/20 maxlen: 20
81.17.82.0/24 maxlen: 24
185.30.88.0/23 maxlen: 23
185.30.90.0/23 maxlen: 23
188.253.128.0/19 maxlen: 19
188.253.208.0/22 maxlen: 22
188.253.212.0/22 maxlen: 22
188.253.216.0/22 maxlen: 22
188.253.220.0/22 maxlen: 22
188.253.224.0/21 maxlen: 21
188.253.232.0/21 maxlen: 21
188.253.254.0/24 maxlen: 24
188.253.255.0/24 maxlen: 24
194.135.166.0/23 maxlen: 23
194.135.168.0/23 maxlen: 23
194.135.170.0/24 maxlen: 24
194.135.171.0/24 maxlen: 24
194.135.172.0/24 maxlen: 24
194.135.173.0/24 maxlen: 24
194.135.174.0/24 maxlen: 24
194.135.176.0/24 maxlen: 24
194.135.177.0/24 maxlen: 24
194.135.178.0/24 maxlen: 24
194.135.179.0/24 maxlen: 24
213.154.0.0/19 maxlen: 19
217.64.16.0/20 maxlen: 20
217.64.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:03:33:55:66:6f:c3:fb:8b:a1:5a:ff:ae:c9:11:9e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Validity
Not Before: Sep 18 03:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0de2bd4a241db365fe59504678a2a657b6c1cf26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:d1:ce:ea:98:72:bd:00:28:6a:be:5e:ba:
3e:da:a0:11:f4:99:94:9d:24:0c:b6:7a:1f:ea:19:
ca:46:5f:be:f9:33:9d:7a:89:15:3d:44:a6:20:57:
37:9d:b0:ad:1a:9d:ea:52:e9:be:43:33:04:89:c9:
7e:82:12:54:b8:09:50:e7:5f:c7:5a:c1:e2:bb:54:
89:dd:ed:c2:38:ad:cb:8a:74:22:7c:39:6b:db:6a:
05:e7:ce:d0:82:a2:af:f6:17:5b:5f:bc:97:ab:5c:
ba:5e:56:24:bb:28:5b:23:b2:7a:8e:6c:cc:d5:f2:
9f:bb:e0:a1:70:e7:99:bc:81:49:87:70:6f:f5:1c:
75:f5:ee:b0:92:9b:17:38:d7:5e:e2:ec:82:79:ba:
a8:1d:9e:91:9c:35:fe:90:82:39:2e:40:4e:9d:5c:
25:15:d3:c9:ea:dc:fa:96:e8:c2:3d:5c:68:31:10:
62:df:69:23:bc:5f:65:7c:f1:c8:51:db:fb:b7:4f:
b0:2c:28:a1:a2:f3:58:cb:2d:fd:12:ff:ef:d9:1e:
b1:5c:b3:5d:ed:88:7a:44:1d:95:5e:fa:cb:49:f5:
9e:71:90:42:7e:33:4b:f9:5f:1d:72:30:4b:d5:9b:
05:77:56:f6:fc:40:00:ec:59:85:98:d4:4d:b1:63:
2e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E2:BD:4A:24:1D:B3:65:FE:59:50:46:78:A2:A6:57:B6:C1:CF:26
X509v3 Authority Key Identifier:
keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/DeK9SiQds2X-WVBGeKKmV7bBzyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.0.0/17
81.17.80.0/20
185.30.88.0/22
188.253.128.0/19
188.253.208.0-188.253.239.255
188.253.254.0/23
194.135.166.0-194.135.174.255
194.135.176.0/22
213.154.0.0/19
217.64.16.0/20
Signature Algorithm: sha256WithRSAEncryption
03:ef:7c:a7:22:ec:e9:84:56:c0:98:a4:0f:e7:56:bd:0d:de:
4a:c4:4c:20:9c:7b:79:ba:63:b7:87:3f:c7:dd:c6:c1:a6:c8:
46:0d:93:5e:94:f8:f1:b3:7e:f8:5a:a7:a9:7c:dd:12:5e:60:
f7:65:cc:d0:19:13:b9:a3:6a:ba:ba:9a:16:6a:64:a7:1a:7a:
f8:92:5d:6f:8a:83:59:bf:11:0f:be:e4:d9:80:c0:7e:37:a8:
1e:f7:0c:5f:e5:aa:58:f1:c8:4e:8f:2f:c5:02:96:89:3c:39:
91:69:66:d6:1e:56:3e:70:7d:87:d7:cd:32:9e:86:3a:54:61:
ea:e4:78:81:93:1f:e0:b0:67:77:b2:fa:84:9d:3a:97:2a:1d:
11:59:a8:3e:98:be:1b:86:d0:90:81:1f:da:27:86:c3:aa:16:
f6:97:ad:07:ab:8a:2a:44:ec:b3:1e:f4:e6:a6:ef:9e:2b:93:
27:88:63:53:9d:4b:aa:25:3c:f8:32:74:1e:6f:44:5c:4b:83:
7f:ca:ba:19:01:26:2c:a0:bd:66:af:40:b0:01:cb:b0:f9:7f:
b3:ac:19:97:51:16:4e:c8:a7:40:34:2c:4a:11:c7:27:cb:26:
fe:ac:bc:98:aa:ff:04:23:fe:e5:72:d1:7c:6c:05:9f:b6:6f:
dd:9b:f5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:58:57 2025 by rpki-client