Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/DtD977BKogZ-i5f5lnM7XfwPkGw.roa
File: DtD977BKogZ-i5f5lnM7XfwPkGw.roa (raw, json)
Hash identifier: rEJCH85iaRV2o4y5e1mHMCj9F0bvHV5V0O0FkHgo4nQ=
Subject key identifier: 0E:D0:FD:EF:B0:4A:A2:06:7E:8B:97:F9:96:73:3B:5D:FC:0F:90:6C
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 01955FAA6F14506011D4B99AD2E16B9840AF
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/DtD977BKogZ-i5f5lnM7XfwPkGw.roa
Signing time: Tue 04 Mar 2025 05:39:19 +0000
ROA not before: Tue 04 Mar 2025 05:39:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.140.210.0/24 maxlen: 24
82.115.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Mar 2025 10:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5f:aa:6f:14:50:60:11:d4:b9:9a:d2:e1:6b:98:40:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Mar 4 05:39:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ed0fdefb04aa2067e8b97f996733b5dfc0f906c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:72:cc:26:7b:7c:47:98:e8:1d:1e:03:79:90:
36:a5:0d:85:16:e6:4b:8d:a7:c5:5a:d9:5b:b1:45:
b4:99:28:55:41:1c:1b:b0:52:30:56:83:89:85:8a:
28:cb:68:4e:41:cd:fb:3b:62:33:4d:10:95:cd:a4:
4e:5d:32:96:eb:27:e6:34:ad:c7:3e:8f:f8:ef:ed:
f0:8d:2e:62:8c:f0:fe:7d:da:ce:ec:d4:e8:c3:17:
ac:0e:c5:1a:11:4c:85:4e:3d:0d:26:81:98:65:16:
e4:3c:6e:59:5f:e1:a7:10:36:cd:ab:01:d3:50:4a:
55:06:a7:53:7d:92:2c:92:c7:19:95:ca:de:08:fb:
a3:c0:31:ac:f8:c5:b5:8e:16:d8:aa:c4:68:57:ed:
7d:21:30:b1:03:ef:6c:1e:00:ce:5b:44:79:96:75:
e4:00:8c:66:65:14:f1:98:5b:5f:c5:c8:fd:4b:4e:
ab:53:f8:85:8d:0e:99:d2:9a:8e:5c:22:c6:00:51:
9a:03:fb:84:ad:15:c0:b1:cb:89:fc:46:9c:c2:3f:
cd:cf:a2:20:d4:c6:5d:ba:2e:9a:fb:04:23:7f:36:
33:ad:82:0f:c7:46:ad:e3:fd:49:ca:c3:23:e8:79:
35:9a:f2:07:70:87:65:04:cb:82:4e:5a:31:a3:48:
0d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D0:FD:EF:B0:4A:A2:06:7E:8B:97:F9:96:73:3B:5D:FC:0F:90:6C
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/DtD977BKogZ-i5f5lnM7XfwPkGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.210.0/24
82.115.217.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:eb:7d:1d:58:9c:bf:cd:4b:29:f1:f8:90:89:88:bc:47:bf:
39:51:89:0f:3a:ce:f7:ef:37:0c:f8:ae:81:66:41:c7:02:96:
75:61:00:11:56:cb:39:30:12:cf:7c:75:f9:35:2c:11:15:9a:
ff:8b:3b:46:c7:5d:41:f3:51:31:44:f8:8c:a4:c6:47:d4:20:
4c:5a:29:b2:e0:55:e3:4a:9d:81:22:f6:0f:07:7d:9e:ab:91:
cd:81:e4:a5:10:56:32:c4:c7:c1:4d:05:d3:ca:8d:4a:1f:41:
ac:4d:7c:c9:f3:69:20:4d:5a:18:37:de:10:f7:93:4a:9b:71:
07:35:38:1d:1d:b8:3a:61:32:e1:bd:45:29:96:c0:e6:d8:55:
b6:3f:2a:e0:0b:56:c1:74:b4:08:ed:d3:24:b9:77:df:93:41:
22:38:e1:29:3c:94:f6:cd:7c:28:6b:b6:45:57:dd:0a:f6:21:
b1:45:69:05:6c:04:8b:cc:93:1e:c0:f5:45:80:89:bc:b2:25:
4b:8d:37:60:db:a7:18:a7:3f:89:50:d4:51:e9:77:02:7a:4e:
29:08:e8:34:4b:3d:e9:b6:3f:1d:25:f6:f9:d4:f4:28:ad:16:
d1:4e:9f:ff:c6:df:85:c0:bc:82:d1:a0:04:2e:d9:70:df:d6:
55:4e:4c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:36 2025 by rpki-client