Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DNGtkzxwGEcQc28Txt_GBRTziLM.roa
File: DNGtkzxwGEcQc28Txt_GBRTziLM.roa (raw, json)
Hash identifier: s3W+hM3+SY4iwFB/94zQe1RQqWCYf5tgdlrqiOxPI3k=
Subject key identifier: 0C:D1:AD:93:3C:70:18:47:10:73:6F:13:C6:DF:C6:05:14:F3:88:B3
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01900129C77F0FD0E347AEAFE43A35317E24
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DNGtkzxwGEcQc28Txt_GBRTziLM.roa
Signing time: Mon 10 Jun 2024 08:00:33 +0000
ROA not before: Mon 10 Jun 2024 08:00:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 81.168.122.0/24 maxlen: 24
82.152.4.0/24 maxlen: 24
82.152.5.0/24 maxlen: 24
82.152.6.0/24 maxlen: 24
82.152.98.0/24 maxlen: 24
82.152.131.0/24 maxlen: 24
82.153.55.0/24 maxlen: 24
82.153.153.0/24 maxlen: 24
82.153.156.0/24 maxlen: 24
82.153.200.0/24 maxlen: 24
82.153.207.0/24 maxlen: 24
82.163.0.0/24 maxlen: 24
89.213.97.0/24 maxlen: 24
89.213.134.0/24 maxlen: 24
89.213.197.0/24 maxlen: 24
109.176.193.0/24 maxlen: 24
109.176.229.0/24 maxlen: 24
109.176.230.0/24 maxlen: 24
109.176.244.0/24 maxlen: 24
212.38.79.0/24 maxlen: 24
213.130.150.0/24 maxlen: 24
213.130.151.0/24 maxlen: 24
213.210.63.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.224.0/24 maxlen: 24
213.218.233.0/24 maxlen: 24
213.218.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jun 2024 12:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:29:c7:7f:0f:d0:e3:47:ae:af:e4:3a:35:31:7e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 10 08:00:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cd1ad933c70184710736f13c6dfc60514f388b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:a7:1d:50:d8:d5:15:a5:49:96:6e:e9:fd:
8a:4f:7b:02:1f:ea:76:29:dd:32:5a:33:ac:cd:73:
06:63:41:df:97:bc:cc:c8:e4:8e:36:d9:00:2a:e1:
22:34:c6:bf:85:28:6f:dc:ca:8a:d5:f1:ac:c7:fd:
36:9e:8b:76:d8:3c:3d:1e:f5:f3:96:ac:8f:7d:53:
de:21:6f:38:bf:fd:e5:b6:b2:f5:b1:70:d3:32:76:
45:9b:34:f8:96:ac:41:d8:eb:79:b3:29:d9:f1:a0:
76:56:c8:ec:96:f0:8d:ad:f8:7e:1d:f7:72:29:ff:
fe:91:5d:04:cf:eb:c7:f1:bd:d3:34:72:ee:16:b8:
8a:11:ff:6c:b5:20:99:56:9a:92:59:76:f3:c4:f6:
4c:7b:6f:7e:3c:6d:b7:15:27:aa:7d:c0:28:04:e6:
f8:24:6f:ba:be:e7:85:84:d2:93:d3:c6:8a:02:66:
19:d3:ca:da:18:dd:99:4b:36:50:43:df:30:9f:fe:
bb:b8:01:51:b9:c2:5b:c2:73:3a:93:f8:43:56:eb:
80:79:3f:fe:35:c9:de:56:c7:7e:f4:18:0f:bd:38:
7c:dd:35:ca:04:d6:7e:2f:e2:ec:f4:ed:20:68:dd:
b5:e4:4e:04:33:00:97:2d:d7:6e:af:5a:e4:02:69:
31:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D1:AD:93:3C:70:18:47:10:73:6F:13:C6:DF:C6:05:14:F3:88:B3
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DNGtkzxwGEcQc28Txt_GBRTziLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.122.0/24
82.152.4.0-82.152.6.255
82.152.98.0/24
82.152.131.0/24
82.153.55.0/24
82.153.153.0/24
82.153.156.0/24
82.153.200.0/24
82.153.207.0/24
82.163.0.0/24
89.213.97.0/24
89.213.134.0/24
89.213.197.0/24
109.176.193.0/24
109.176.229.0-109.176.230.255
109.176.244.0/24
212.38.79.0/24
213.130.150.0/23
213.210.63.0/24
213.218.211.0/24
213.218.224.0/24
213.218.233.0/24
213.218.249.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:1f:3a:f2:e8:1e:70:9f:de:cf:a2:30:33:2d:d6:1b:b2:87:
e8:8f:96:f6:bf:eb:6f:d1:9c:47:8e:e0:1e:b8:65:7b:bf:20:
60:70:cc:76:0b:a8:34:28:c2:0e:68:84:9c:87:28:d1:59:d2:
cc:9e:32:35:d7:f1:51:30:b8:42:00:8c:c2:c5:b1:84:1c:a6:
4a:02:c7:ab:50:d4:fc:08:0f:c1:e7:ad:6e:81:84:96:dc:7d:
ef:95:c2:6e:40:38:45:23:a0:7b:71:8e:c4:11:e2:df:3d:f5:
cb:fc:19:8a:65:f8:1e:6d:b0:18:ba:22:d2:55:6c:55:6c:30:
55:26:74:c2:f7:71:41:51:1b:44:c2:c9:7c:93:07:66:09:d5:
a6:57:fb:ae:90:f6:9c:7e:7c:ef:0f:de:31:17:d0:b1:dc:24:
07:cc:7a:ea:63:b2:6a:e4:14:af:d6:0c:fa:d4:17:49:31:06:
00:1e:c4:8d:92:c2:32:c9:50:0d:32:72:a7:99:30:fc:4f:4e:
f5:01:3c:5e:68:c5:56:24:66:de:72:5d:35:7d:9e:f0:1f:4a:
a0:ac:9a:a1:b3:e8:e6:c8:31:86:2b:56:90:04:9c:97:cd:25:
4f:17:90:80:cb:95:fe:a3:53:8b:9f:d5:76:b3:b9:b4:01:5a:
f1:9c:37:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:27:39 2025 by rpki-client