Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/dxDgHKlUwmAhhERgwp5qhD8Obus.roa
File: dxDgHKlUwmAhhERgwp5qhD8Obus.roa (raw, json)
Hash identifier: 3lMoJ09W2SK0IQVQVC6l9G7H7+ydVSg14rBfcdmVIuM=
Subject key identifier: 77:10:E0:1C:A9:54:C2:60:21:84:44:60:C2:9E:6A:84:3F:0E:6E:EB
Certificate issuer: /CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
Certificate serial: 018CCA29E822FE1F9A85F0CA0549ACE78EF3
Authority key identifier: B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/dxDgHKlUwmAhhERgwp5qhD8Obus.roa
Signing time: Tue 02 Jan 2024 12:33:13 +0000
ROA not before: Tue 02 Jan 2024 12:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203836
IP address blocks: 185.66.132.0/24 maxlen: 24
185.66.135.0/24 maxlen: 24
185.66.133.0/24 maxlen: 24
185.66.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e8:22:fe:1f:9a:85:f0:ca:05:49:ac:e7:8e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
Validity
Not Before: Jan 2 12:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7710e01ca954c26021844460c29e6a843f0e6eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:42:59:64:ed:f7:b7:44:2a:cf:3c:d6:d9:e2:
3c:94:e2:a7:60:d2:4e:84:5a:20:0a:1f:5d:18:5c:
a4:47:a8:96:8a:ff:f5:50:27:de:40:b4:7e:c4:d0:
ea:d1:19:77:ce:ee:bb:6e:a9:7d:8b:f3:24:fe:b8:
cf:26:41:23:bf:02:0f:78:e3:f9:ae:81:dc:b0:40:
40:42:20:f3:e1:37:d9:94:d7:5f:23:37:04:6b:5f:
b2:6f:48:9b:86:6c:99:9d:dc:51:84:b0:8b:29:f2:
ee:27:38:23:ad:11:c1:bd:aa:bc:a1:1b:ad:d5:f8:
96:0e:25:fb:d8:29:bc:1e:cd:c7:27:02:19:6c:54:
a0:9e:fe:ed:54:10:a4:6a:e9:74:f8:0b:5b:70:3e:
dc:26:cd:97:f0:82:40:36:86:4b:e5:44:4b:c7:b5:
df:6c:fd:79:98:23:c5:24:7f:3e:ed:7c:11:75:83:
95:b9:0e:e1:92:cc:4a:9f:66:db:51:5c:61:e1:49:
87:1d:25:da:9c:21:46:b0:0d:12:40:f6:89:a0:2e:
fd:b1:50:a5:e9:83:4b:a3:8c:ab:16:7e:2f:eb:1a:
13:68:34:9c:aa:77:af:e5:27:33:77:42:5e:6d:08:
d1:6c:5a:a7:ce:ca:1e:91:d2:6e:ca:6c:fc:b2:f1:
7f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:10:E0:1C:A9:54:C2:60:21:84:44:60:C2:9E:6A:84:3F:0E:6E:EB
X509v3 Authority Key Identifier:
keyid:B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/dxDgHKlUwmAhhERgwp5qhD8Obus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.132.0/22
Signature Algorithm: sha256WithRSAEncryption
53:e2:29:07:8e:5c:85:f8:58:5e:a6:05:ec:aa:79:c1:82:22:
21:d7:8f:12:62:62:38:76:92:89:ca:07:0a:b4:81:63:dd:10:
c3:5a:05:59:7d:55:b2:2c:9a:b9:81:5f:a1:32:da:3e:e8:3d:
6b:aa:62:cd:dc:b8:38:57:57:ba:ea:ab:4f:a0:ba:fa:fc:07:
b3:a3:1e:e9:46:42:46:1d:57:2a:4a:cd:b8:23:f0:34:5f:6e:
89:de:79:11:9d:f8:e6:b0:ef:32:db:2a:0f:07:11:2e:36:3d:
05:ca:da:9f:21:86:ea:0f:b4:47:20:29:05:38:1c:19:7d:08:
74:32:2a:86:50:3b:88:7d:4c:77:5d:b3:38:8f:3b:be:b6:14:
cd:5d:d2:07:75:0f:a2:5f:d3:4b:fc:12:66:f0:96:c9:5d:a7:
fc:83:74:b5:15:41:05:81:0e:1c:c4:70:53:db:b2:43:a4:29:
01:a6:9a:71:58:3c:8b:54:bc:83:85:ca:99:76:4b:0a:7e:34:
d0:c2:7f:cc:89:73:f6:ac:c7:f2:25:a0:0b:9a:84:02:e8:39:
94:9c:4e:2a:6c:33:5b:2f:28:d7:8d:ca:4a:77:d1:6d:58:5e:
b2:5b:c0:95:b5:15:24:02:ad:fd:16:db:00:45:77:da:4f:11:
b0:e1:db:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:35 2025 by rpki-client