Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/DkVCfbguuIY6yVLRV4OIEIDiP94.roa
File: DkVCfbguuIY6yVLRV4OIEIDiP94.roa (raw, json)
Hash identifier: OIhd6RDYEaOU+OhbgqMZdCgW6cEMXHQ4eLFYUCjX6bY=
Subject key identifier: 0E:45:42:7D:B8:2E:B8:86:3A:C9:52:D1:57:83:88:10:80:E2:3F:DE
Certificate issuer: /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Certificate serial: 018E5A9E916B8D16A424D4C270008F47A8E4
Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/DkVCfbguuIY6yVLRV4OIEIDiP94.roa
Signing time: Wed 20 Mar 2024 06:48:45 +0000
ROA not before: Wed 20 Mar 2024 06:48:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197453
IP address blocks: 46.183.176.0/21 maxlen: 21
91.200.86.0/23 maxlen: 23
178.57.80.0/21 maxlen: 21
178.57.88.0/22 maxlen: 22
178.57.93.0/24 maxlen: 24
178.57.95.0/24 maxlen: 24
185.9.84.0/22 maxlen: 22
185.162.232.0/24 maxlen: 24
185.195.243.0/24 maxlen: 24
185.196.116.0/24 maxlen: 24
193.47.154.0/24 maxlen: 24
213.5.224.0/23 maxlen: 23
2a01:bc40::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 16 Jul 2024 09:25:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5a:9e:91:6b:8d:16:a4:24:d4:c2:70:00:8f:47:a8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Validity
Not Before: Mar 20 06:48:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e45427db82eb8863ac952d15783881080e23fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:7d:68:df:9f:14:46:ed:61:35:f4:99:1a:
87:c4:18:c6:31:b7:5e:ef:bf:39:10:f1:e0:e1:c6:
d4:a6:20:a2:5c:a7:f3:41:eb:5a:34:38:40:82:ce:
fc:c2:2d:a4:d3:e3:69:b1:a1:19:fc:00:33:bd:99:
80:97:19:2e:c5:9a:5b:f6:ab:dc:b3:b1:f8:62:3d:
01:98:94:94:0c:8b:4d:c8:97:d5:33:4f:a3:1e:a5:
bf:18:6a:6d:fb:42:52:39:e2:64:05:38:f4:49:85:
b8:38:64:db:6f:99:7a:55:e2:0f:23:b0:f5:5f:6b:
e5:7c:db:c2:1d:31:c0:84:e0:48:43:8e:d7:58:cb:
16:65:32:0c:d9:4b:b8:34:1e:f7:ed:4d:c5:89:9d:
2c:fc:b0:d2:64:9f:5f:7b:eb:f3:2a:38:11:61:2a:
19:a4:3c:b3:f9:a1:95:31:c2:c3:e2:6d:bc:3b:7f:
7d:ca:5a:cc:f7:38:e8:ba:6e:05:b5:9c:db:e2:8d:
64:ed:6d:fb:d2:74:50:6d:12:a1:3c:a5:bb:41:b8:
0e:6f:27:6e:25:d2:c7:e3:c7:5b:5a:47:5c:4d:f8:
f5:6e:3d:9d:7d:cf:5f:c1:ba:58:df:a6:09:f7:36:
b2:c8:60:6c:e7:d3:87:75:10:46:a5:70:11:17:93:
6e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:45:42:7D:B8:2E:B8:86:3A:C9:52:D1:57:83:88:10:80:E2:3F:DE
X509v3 Authority Key Identifier:
keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/DkVCfbguuIY6yVLRV4OIEIDiP94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.176.0/21
91.200.86.0/23
178.57.80.0-178.57.91.255
178.57.93.0/24
178.57.95.0/24
185.9.84.0/22
185.162.232.0/24
185.195.243.0/24
185.196.116.0/24
193.47.154.0/24
213.5.224.0/23
IPv6:
2a01:bc40::/32
Signature Algorithm: sha256WithRSAEncryption
89:ec:ea:c5:dc:25:54:e8:32:2e:b0:48:42:d9:d4:eb:ca:54:
dc:cf:3e:d4:54:c0:c0:3d:83:65:3b:28:0c:6c:31:bd:cd:9c:
9c:ce:67:03:64:d2:89:59:41:c0:4a:a7:de:fe:f7:8f:1f:fd:
02:70:63:50:e0:f5:21:89:f2:53:8e:36:f6:b7:ce:52:5e:6c:
82:9a:03:0a:e5:a8:47:13:fb:eb:6d:7b:82:65:5b:57:d0:d0:
41:76:0d:b4:99:04:72:a0:10:27:fa:c5:2c:98:d2:47:b8:f4:
d7:23:ab:27:f5:ce:68:02:22:67:7f:ec:09:0c:69:a8:04:35:
d4:33:c5:31:f6:ee:8a:23:68:e8:19:89:92:41:67:02:d1:77:
f3:03:01:69:e4:7e:a4:b0:c5:b9:28:70:10:6c:29:3c:a6:70:
2c:66:3a:45:69:8f:7d:cf:d1:93:6f:97:38:6d:47:53:6e:f4:
56:9b:fb:82:d6:37:27:40:1f:f5:0f:e3:25:27:f1:eb:f4:7b:
cd:0d:9c:8f:1f:b1:19:ef:0e:ff:f3:77:87:b0:78:5d:5d:6a:
ce:df:1d:3e:65:2f:44:db:e3:c4:f5:97:b2:bf:80:78:b8:bc:
55:03:fe:26:5d:d9:f5:fe:56:75:96:ba:f8:30:86:9d:8f:19:
70:a8:36:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:51 2025 by rpki-client