Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/rddM4blAYUNR3QeTj9PsjwpT4eY.roa
File: rddM4blAYUNR3QeTj9PsjwpT4eY.roa (raw, json)
Hash identifier: BtZujRXt1IVTWOZrXTr2rYMeJYxgaigOSOc4Ve0UWlk=
Subject key identifier: AD:D7:4C:E1:B9:40:61:43:51:DD:07:93:8F:D3:EC:8F:0A:53:E1:E6
Certificate issuer: /CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
Certificate serial: 018CCA297A5ACB1754BD1321832A022185DB
Authority key identifier: C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/rddM4blAYUNR3QeTj9PsjwpT4eY.roa
Signing time: Tue 02 Jan 2024 12:32:45 +0000
ROA not before: Tue 02 Jan 2024 12:32:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199736
IP address blocks: 5.183.220.0/22 maxlen: 22
195.211.168.0/22 maxlen: 22
185.219.136.0/22 maxlen: 22
185.87.188.0/22 maxlen: 22
185.38.128.0/22 maxlen: 22
2a00:fde0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:7a:5a:cb:17:54:bd:13:21:83:2a:02:21:85:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
Validity
Not Before: Jan 2 12:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=add74ce1b940614351dd07938fd3ec8f0a53e1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8a:6b:84:95:0a:8d:27:5b:5b:b7:a1:bd:58:
27:0d:90:aa:8f:b9:74:b3:0a:1b:94:d2:2c:45:f5:
30:fd:c5:34:31:72:3c:e6:db:c5:20:e0:c9:50:37:
24:83:06:6e:79:b4:70:94:1f:2e:7e:fb:01:b5:77:
e0:b9:ad:e2:f0:08:4b:e5:57:8d:b9:df:2d:b6:09:
89:8e:f2:20:ca:da:46:a4:55:64:6f:b0:8f:41:56:
05:50:4b:d3:8c:70:ce:86:68:dc:97:41:18:77:cb:
c8:2d:64:94:6b:9e:d0:9c:7d:1f:75:63:fa:93:b7:
e2:9a:f1:54:2a:60:82:12:12:ec:64:8b:f8:81:7d:
23:3b:99:df:2c:00:c6:c3:59:69:de:95:59:2e:f8:
f3:16:68:bc:0e:23:11:f5:4a:bf:be:ea:10:5e:05:
0c:34:d0:3c:9f:5c:80:8a:c4:0c:34:02:ab:6e:5b:
22:52:9b:3c:29:fc:3c:9c:25:f3:b4:be:1b:18:aa:
8a:95:47:27:c3:93:37:fb:99:d4:49:8b:40:4c:14:
df:a4:45:81:94:6a:0b:bb:6b:29:68:14:ef:6b:d5:
fa:8f:69:6b:9f:d7:27:71:45:b9:ca:72:1f:02:cd:
79:1c:04:f0:22:f9:1c:a9:0e:4c:0b:08:e4:68:01:
09:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D7:4C:E1:B9:40:61:43:51:DD:07:93:8F:D3:EC:8F:0A:53:E1:E6
X509v3 Authority Key Identifier:
keyid:C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/rddM4blAYUNR3QeTj9PsjwpT4eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.220.0/22
185.38.128.0/22
185.87.188.0/22
185.219.136.0/22
195.211.168.0/22
IPv6:
2a00:fde0::/32
Signature Algorithm: sha256WithRSAEncryption
47:a8:bc:b6:cf:7a:4a:65:71:da:0f:0f:95:e3:ab:04:eb:bf:
e9:8a:cc:ae:57:8f:0c:9b:dc:e2:5a:d1:a2:d7:33:a4:73:f5:
41:e2:a8:58:95:02:0b:c5:d5:8e:eb:d1:65:2f:0e:49:cc:8e:
db:bb:c9:28:f9:fc:d2:41:e5:c1:4a:24:1a:a6:55:0d:56:43:
86:77:50:f2:a3:2d:9f:3f:24:75:1f:ee:b9:36:fc:7e:d0:b1:
ff:11:14:2e:96:8d:2d:c1:fe:52:21:1f:ab:cd:e9:fc:13:6e:
86:c7:7c:f8:9d:9f:f6:2d:26:b6:de:22:e3:a5:2c:5f:c6:03:
d9:32:60:e2:36:5a:12:8c:c5:c4:00:88:6d:c2:f7:9d:81:b4:
68:9d:3c:fb:a0:20:1b:19:1f:3e:c9:87:5f:6f:f5:a0:61:ec:
51:48:28:63:01:b2:49:3a:dc:e7:ba:3e:54:95:53:f5:b7:b5:
0c:0c:6d:cd:90:72:f5:31:01:74:a5:e1:91:cd:12:80:49:f5:
9a:2f:79:24:e7:11:a4:89:33:c5:fb:e7:93:2f:a6:4c:e0:67:
db:e0:4b:ea:fa:3f:ee:09:d4:ea:6d:1d:a6:85:e8:60:6d:20:
18:fe:98:3b:ca:82:e7:d4:52:e0:98:87:cd:6e:e3:aa:1a:e0:
4a:da:70:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:04 2025 by rpki-client