Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Dhy_-NRXYZeCNhJx-J0KEYLnd48.roa
File: Dhy_-NRXYZeCNhJx-J0KEYLnd48.roa (raw, json)
Hash identifier: 8EjQsKaVuKM90/S8APm2bLOx0lgQVJAQbMvrCbG11bA=
Subject key identifier: 0E:1C:BF:F8:D4:57:61:97:82:36:12:71:F8:9D:0A:11:82:E7:77:8F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01958F51627CF2EA1392D3BEEF9D82087C28
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Dhy_-NRXYZeCNhJx-J0KEYLnd48.roa
Signing time: Thu 13 Mar 2025 11:43:50 +0000
ROA not before: Thu 13 Mar 2025 11:43:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 146.19.102.0/24 maxlen: 24
185.238.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Mar 2025 09:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:51:62:7c:f2:ea:13:92:d3:be:ef:9d:82:08:7c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 13 11:43:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e1cbff8d457619782361271f89d0a1182e7778f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:6d:8f:3c:d8:59:1c:bc:6d:66:50:c2:1c:
26:b0:c8:10:6b:f7:c2:7b:4f:1c:13:32:25:66:5e:
8a:ef:a3:26:a7:7f:1c:61:3b:40:6a:aa:81:25:1c:
0f:4c:02:e3:a0:86:82:cd:e0:6e:a0:98:a9:21:b7:
e1:a5:fd:fc:ee:f7:75:76:1c:0b:22:6d:c6:3a:23:
68:77:d8:7e:17:ff:83:e8:44:76:58:c5:14:f1:25:
60:0f:31:55:77:c5:e9:ce:44:84:11:48:c2:c5:e6:
60:17:cd:a5:39:e1:68:4e:a9:1e:e1:43:e7:d5:b2:
3b:65:d5:5c:8d:e8:0b:e4:54:8e:d1:26:fc:86:90:
9e:45:95:56:99:c2:54:55:52:4f:29:c3:31:41:0a:
55:be:8a:61:4e:0a:4d:7f:03:8e:e1:0d:cb:79:80:
64:72:41:ed:85:e8:09:1f:6a:70:97:77:41:53:f2:
90:18:25:0b:28:fd:0e:87:c2:9f:a0:83:f7:b8:9c:
0c:87:8d:e6:1b:4b:c5:fa:8f:7d:09:fc:cd:5d:7a:
cb:cb:86:f2:22:f0:18:ff:78:76:ef:a9:08:e8:00:
02:23:8b:45:08:ec:16:27:8b:23:c1:f5:87:94:c8:
75:b7:41:a2:ce:a5:16:61:f9:bb:25:bc:3b:15:85:
f4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1C:BF:F8:D4:57:61:97:82:36:12:71:F8:9D:0A:11:82:E7:77:8F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Dhy_-NRXYZeCNhJx-J0KEYLnd48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.102.0/24
185.238.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:3f:8a:48:1d:91:21:86:e5:8d:04:43:36:01:0b:1b:42:84:
76:3f:ea:78:64:55:2b:d4:2e:51:19:dd:8a:f0:03:ed:97:71:
60:cf:67:f2:7c:a4:79:1b:6b:a0:57:43:d6:ee:af:1f:3d:c6:
26:a0:13:b3:2a:7c:7e:e2:53:d7:6d:02:2b:89:33:5e:a6:2e:
d9:b3:10:93:e0:f7:2e:6b:c5:a0:32:c4:49:df:da:e5:6e:da:
42:07:01:89:d9:28:0d:c2:03:43:db:08:ac:e5:64:35:b7:02:
b7:27:4e:e9:b4:cd:f8:dc:be:f8:05:ba:62:ff:ac:28:dc:3b:
e0:30:df:4f:38:10:22:94:81:ed:c4:6d:91:c8:0a:84:f0:9a:
53:3c:34:88:75:1e:fd:80:5e:af:a7:43:26:f4:e0:7d:a2:bf:
9b:11:e1:d3:10:79:07:eb:62:6a:86:2f:74:31:5e:16:c8:5b:
38:32:fc:0e:99:d4:ad:f9:9b:b4:cc:88:b7:96:a6:70:04:0c:
09:ff:16:d4:cd:a3:d9:e8:16:6e:bb:50:85:59:73:b7:22:c8:
7f:c9:b2:2a:af:98:82:e2:50:7d:b8:2c:cf:b3:5f:5c:a8:e7:
b5:5e:ed:c1:45:78:53:88:95:17:fb:13:f4:c0:36:85:a1:b8:
f1:92:76:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:44:04 2025 by rpki-client