Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/dkpiZUx8cQVvWhDyhwHVTQp-htM.roa
File: dkpiZUx8cQVvWhDyhwHVTQp-htM.roa (raw, json)
Hash identifier: Xmfx7gml3iInvwONOK18hjLp+rZWeVCqKDgK9BwxFMI=
Subject key identifier: 76:4A:62:65:4C:7C:71:05:6F:5A:10:F2:87:01:D5:4D:0A:7E:86:D3
Certificate issuer: /CN=a7244450d1c7855df848f34318e1f0948900d8d5
Certificate serial: 0190587851803B69EA1BCDA2CCB43E761FC1
Authority key identifier: A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/dkpiZUx8cQVvWhDyhwHVTQp-htM.roa
Signing time: Thu 27 Jun 2024 06:53:18 +0000
ROA not before: Thu 27 Jun 2024 06:53:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31319
IP address blocks: 83.149.128.0/18 maxlen: 18
91.109.48.0/21 maxlen: 21
185.119.244.0/22 maxlen: 22
185.121.156.0/22 maxlen: 22
2a01:63c0::/32 maxlen: 32
2a03:8c80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:58:78:51:80:3b:69:ea:1b:cd:a2:cc:b4:3e:76:1f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7244450d1c7855df848f34318e1f0948900d8d5
Validity
Not Before: Jun 27 06:53:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=764a62654c7c71056f5a10f28701d54d0a7e86d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:10:73:3c:23:b0:2d:ec:ae:3c:d5:ac:eb:36:
42:15:4a:c5:79:0a:14:79:4e:b3:23:73:6e:55:ba:
6a:ce:03:bb:9a:a8:fc:ab:3e:4f:7b:ac:0b:05:c7:
a6:ff:2f:2a:f0:1e:b2:a7:66:ea:95:7c:eb:76:c8:
7f:cd:b0:dc:56:54:7d:28:4b:a3:b5:50:ac:de:7f:
f0:00:2a:4a:37:7f:ed:93:c9:1c:60:ea:ae:40:c7:
15:6b:e4:84:36:c0:96:e9:65:0d:4c:b9:7b:37:80:
ea:f9:c0:0c:bc:1d:9d:be:8b:cb:a1:75:df:4b:5e:
3d:8d:19:86:92:41:c1:80:e7:70:bd:3a:04:07:b1:
a8:9c:a7:0f:56:21:01:d9:d9:22:21:f9:de:ec:cf:
e3:28:c8:26:e2:c5:9b:6e:7b:17:80:e1:59:3f:43:
aa:08:93:d0:df:1a:ca:4d:7a:4d:e6:e5:6b:7b:b5:
74:01:07:35:10:f8:91:4a:c0:30:d1:db:87:10:15:
98:3c:74:cb:3f:6c:9f:f3:cb:57:c8:35:95:5c:cb:
0a:7d:cf:08:56:2f:68:22:fa:fc:79:da:b6:d5:75:
1c:55:28:a0:87:1d:c1:f9:e1:23:2c:75:e5:df:d4:
df:ef:ca:51:6c:78:45:b8:9e:de:9f:d4:29:70:3d:
5d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4A:62:65:4C:7C:71:05:6F:5A:10:F2:87:01:D5:4D:0A:7E:86:D3
X509v3 Authority Key Identifier:
keyid:A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/dkpiZUx8cQVvWhDyhwHVTQp-htM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.149.128.0/18
91.109.48.0/21
185.119.244.0/22
185.121.156.0/22
IPv6:
2a01:63c0::/32
2a03:8c80::/29
Signature Algorithm: sha256WithRSAEncryption
62:72:85:f0:77:b0:ea:ac:c9:f3:38:93:0c:96:6f:ae:11:6e:
11:40:e7:dc:f7:4d:aa:3d:cb:dd:70:4c:99:de:a9:2f:d3:69:
ea:a3:60:81:a3:e8:5b:fe:a6:2d:ae:0f:34:d5:2d:b8:59:2e:
99:43:18:d7:2e:be:a8:c2:81:0c:db:ee:11:99:92:75:f9:2d:
27:4e:b6:8c:79:68:98:ef:4e:05:55:2e:46:11:e3:ae:cf:3a:
8a:6a:01:82:1a:56:cd:49:d9:af:74:e7:4e:5b:62:a1:6e:a0:
ec:50:ab:23:a6:52:02:4e:b1:94:3d:ed:bf:2b:0f:da:db:4b:
d0:b4:74:df:78:80:37:da:d2:e1:c5:05:9a:a8:ce:45:aa:69:
20:15:3f:03:7a:5b:fe:6e:1b:58:bb:c6:f2:9d:eb:d5:e7:99:
59:03:61:ed:3a:7d:f4:a3:33:0e:38:74:c4:bb:5e:3e:51:a0:
c5:c1:31:13:b7:a6:de:63:7b:92:ee:93:3b:50:94:03:27:d7:
3e:b6:a0:20:69:5a:48:df:93:4e:2b:34:ef:66:6e:58:ae:51:
b9:ac:32:43:fe:5f:1d:1f:87:15:da:36:3d:64:bb:ea:80:83:
a7:56:56:61:c8:56:b0:47:e4:b4:8e:f8:6d:cd:a3:d4:d0:ce:
b5:d9:df:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:21 2025 by rpki-client