Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/DcR2L9_w70IorDLz_W81veITTcs.roa
File: DcR2L9_w70IorDLz_W81veITTcs.roa (raw, json)
Hash identifier: zWYADMOABHJguFlbYD6wp9pdphaEMhYHUQxwwYLMANo=
Subject key identifier: 0D:C4:76:2F:DF:F0:EF:42:28:AC:32:F3:FD:6F:35:BD:E2:13:4D:CB
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0195647714DF817E98BEF1CC64AA65737385
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/DcR2L9_w70IorDLz_W81veITTcs.roa
Signing time: Wed 05 Mar 2025 04:01:20 +0000
ROA not before: Wed 05 Mar 2025 04:01:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209178
IP address blocks: 103.148.116.0/24 maxlen: 24
185.233.19.0/24 maxlen: 24
185.235.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 13:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:64:77:14:df:81:7e:98:be:f1:cc:64:aa:65:73:73:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Mar 5 04:01:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dc4762fdff0ef4228ac32f3fd6f35bde2134dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2a:2c:78:4d:80:6c:08:1f:8b:83:bf:1c:a3:
f7:9a:76:f0:3b:83:0e:c4:fd:39:fd:23:2a:84:55:
d1:4f:28:2d:d3:14:0f:1e:1f:09:2b:dd:38:0d:b9:
bf:55:2c:6f:d9:a5:91:ac:d9:15:e7:de:71:d6:06:
2b:8b:7a:8b:16:69:81:dd:86:31:58:09:63:df:54:
77:39:d4:d8:5a:c6:0d:31:15:27:27:f5:4d:22:4f:
17:8d:b0:af:bf:b4:33:49:da:c1:a3:87:94:a3:91:
30:1b:c4:6e:d4:4c:c7:8a:fa:c4:bd:7f:26:1b:c4:
42:3b:9b:36:8b:b6:b7:f3:eb:fd:93:e6:d9:7a:13:
89:7a:cd:fa:29:2c:23:e0:ad:91:a6:8c:22:b3:fa:
cd:fe:54:12:5b:52:40:67:11:7e:c9:40:e0:51:dd:
2a:f6:2e:74:9e:5e:a6:52:ca:66:07:dc:23:1f:64:
84:b6:e8:dd:ae:2b:06:91:0a:eb:22:c1:e8:79:ff:
1a:50:ca:14:2e:bc:61:ba:1b:0d:2b:28:5c:5f:7c:
a3:7c:3d:0b:6b:9a:b3:3f:d6:1e:12:01:b1:97:7c:
44:52:83:d3:88:f8:42:13:54:47:f5:73:91:be:ad:
0e:98:89:67:76:a8:30:35:96:88:50:2b:24:8a:c6:
ab:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C4:76:2F:DF:F0:EF:42:28:AC:32:F3:FD:6F:35:BD:E2:13:4D:CB
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/DcR2L9_w70IorDLz_W81veITTcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.148.116.0/24
185.233.19.0/24
185.235.165.0/24
Signature Algorithm: sha256WithRSAEncryption
94:0f:01:24:01:cf:c9:ce:b9:57:8a:86:86:52:ec:2c:c9:21:
49:47:cd:92:95:0e:31:29:63:68:f6:8d:06:5b:c8:b4:1a:58:
e4:2c:d4:4c:c7:c3:5c:58:95:74:96:4d:e9:90:9a:ee:58:45:
bb:a4:e6:4b:1e:f7:39:49:af:51:82:ea:d1:a0:6e:1a:b1:3b:
7d:d3:da:8b:b2:35:32:7a:e5:a5:cf:0e:e6:9c:10:19:7f:62:
04:4b:d1:ce:04:cd:1b:d3:e6:d0:68:05:9b:73:1f:c1:6c:6a:
45:8f:0f:85:04:22:84:64:54:da:07:7a:8a:d1:ad:05:00:fc:
66:ac:60:b1:7d:3c:32:ca:e0:96:4d:d3:d5:c8:c0:25:82:99:
d7:cd:87:e4:30:50:1c:a5:4b:40:9a:5d:bb:20:a9:5e:d4:a5:
34:74:86:10:e9:aa:46:c5:a7:31:1a:11:bd:56:cb:8f:83:3e:
e4:8d:92:b8:f4:31:ad:6d:f1:a5:bc:da:14:51:18:15:1a:0f:
6f:95:c1:e4:e3:b2:95:0e:14:bd:51:dc:14:26:fe:22:8e:ec:
a8:97:8d:b1:81:d5:49:02:4a:3b:35:92:81:66:fe:ec:eb:68:
cd:16:07:24:0d:81:cb:00:9a:ae:c9:c6:27:4a:6e:a2:f9:19:
60:84:e3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:31:16 2025 by rpki-client