Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DeYjV3Bez_D-vFpJ0Vsor7tpdT4.roa
File: DeYjV3Bez_D-vFpJ0Vsor7tpdT4.roa (raw, json)
Hash identifier: XHj8RfhgPqd8PQSy5mnD7MKEOZc8lcu9vl9NG42cc38=
Subject key identifier: 0D:E6:23:57:70:5E:CF:F0:FE:BC:5A:49:D1:5B:28:AF:BB:69:75:3E
Certificate issuer: /CN=0d0874b333e35df14fd970e189581da093bc8093
Certificate serial: 019427B41F82A45B78FD65D62E188E1E4E6A
Authority key identifier: 0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DeYjV3Bez_D-vFpJ0Vsor7tpdT4.roa
Signing time: Thu 02 Jan 2025 15:48:23 +0000
ROA not before: Thu 02 Jan 2025 15:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199496
IP address blocks: 95.129.248.0/21 maxlen: 32
185.13.76.0/22 maxlen: 32
185.65.156.0/22 maxlen: 32
185.165.252.0/22 maxlen: 32
185.235.220.0/22 maxlen: 32
185.249.76.0/22 maxlen: 32
2a00:83e0::/32 maxlen: 64
2a02:f4c0::/29 maxlen: 64
2a09:d00::/29 maxlen: 64
Validation: Failed, certificate revoked on Tue 21 Jan 2025 09:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:1f:82:a4:5b:78:fd:65:d6:2e:18:8e:1e:4e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0874b333e35df14fd970e189581da093bc8093
Validity
Not Before: Jan 2 15:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0de62357705ecff0febc5a49d15b28afbb69753e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:77:1d:da:3c:1b:14:ce:70:ad:b6:25:e4:f0:
37:4e:e0:e7:35:aa:9a:93:b5:e2:3d:c5:de:39:4b:
1a:32:d8:b2:50:5d:27:14:24:75:ef:50:56:8e:44:
62:06:93:90:76:14:83:30:77:f9:c4:c1:fd:dd:25:
41:05:c1:39:bb:bb:ef:bb:97:a0:06:4f:7a:d3:f7:
a1:fd:bc:99:54:a8:d2:d7:33:b3:9d:59:5e:e1:06:
df:80:1d:0b:a7:46:c3:0c:c7:03:1b:bb:62:59:ac:
87:9f:a8:7e:d3:9c:85:ee:a0:0f:24:39:6a:5f:6b:
55:6b:e6:cb:5a:57:95:c9:70:cb:ac:2e:9c:2f:32:
8e:26:60:14:e1:bf:de:8a:28:c6:0a:ee:9d:d1:1d:
3c:29:b4:36:67:07:6b:bf:68:2b:54:3a:47:76:f2:
19:d4:44:99:5e:f8:77:b8:d4:58:1e:59:0f:3b:84:
df:f9:31:dc:99:f8:65:3a:53:72:27:43:50:fe:b2:
3f:e8:98:b4:31:40:9d:62:d1:36:12:8a:d4:a4:ad:
69:01:81:07:8f:59:26:21:e6:e8:71:27:e6:4c:10:
3e:84:3a:91:bc:b1:d8:2d:25:d3:8b:22:62:92:fa:
84:48:cd:44:2d:81:1f:f0:37:72:fd:41:7f:10:62:
90:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E6:23:57:70:5E:CF:F0:FE:BC:5A:49:D1:5B:28:AF:BB:69:75:3E
X509v3 Authority Key Identifier:
keyid:0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DeYjV3Bez_D-vFpJ0Vsor7tpdT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.129.248.0/21
185.13.76.0/22
185.65.156.0/22
185.165.252.0/22
185.235.220.0/22
185.249.76.0/22
IPv6:
2a00:83e0::/32
2a02:f4c0::/29
2a09:d00::/29
Signature Algorithm: sha256WithRSAEncryption
1a:b0:83:40:ac:dd:0a:d6:ab:d4:dd:09:18:8a:59:46:a2:9f:
23:4e:a8:a7:ad:36:3c:da:30:25:ef:1d:f5:9a:a6:d6:b9:a4:
12:0e:9a:75:ab:10:e5:c7:cd:85:90:fd:bd:98:af:22:88:56:
73:f9:49:de:d5:73:51:c9:e1:f1:13:61:3c:e3:46:2a:f9:72:
68:5e:81:bd:3a:26:64:db:10:fc:6b:2f:8e:20:90:c1:c5:92:
a2:07:59:f8:69:4e:6c:3d:cd:0d:eb:0f:d5:f9:38:f4:32:9d:
d9:1e:cd:8b:39:f2:71:64:07:6e:db:c9:35:51:a7:02:82:7f:
e3:e8:a6:68:5f:88:70:2b:b4:3e:a6:1f:9a:3a:2b:70:fb:88:
79:4d:1b:20:93:40:d6:3d:48:57:67:ae:99:af:60:df:71:8f:
4f:ec:0c:85:fa:0b:a3:48:42:c1:fb:89:dc:ad:c7:f6:78:24:
17:82:df:de:b4:e6:85:9e:b6:f0:85:00:4c:fc:1c:58:eb:fd:
e5:96:b1:e4:b2:92:85:88:1c:09:97:4c:80:0e:d8:28:a3:52:
4d:f4:97:fd:6c:3e:5b:af:b9:e2:cc:81:8f:cf:c7:a0:97:76:
b2:94:e8:de:40:df:83:f7:f1:3a:8d:76:f8:71:cf:11:09:64:
8b:1e:d8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:35:06 2025 by rpki-client