Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/D07VjmMyzkYoWm_olsV-PPp0OGE.roa
File: D07VjmMyzkYoWm_olsV-PPp0OGE.roa (raw, json)
Hash identifier: wWwEjWUWbCIIfo7474Ie2Tyd9w6XZOY0eWu5Npof9TE=
Subject key identifier: 0F:4E:D5:8E:63:32:CE:46:28:5A:6F:E8:96:C5:7E:3C:FA:74:38:61
Certificate issuer: /CN=a79cf10c31f2edbb557d5540973c88079b33200f
Certificate serial: 018CC26D4F42C6DA1DB947768C6BCBF890D3
Authority key identifier: A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/D07VjmMyzkYoWm_olsV-PPp0OGE.roa
Signing time: Mon 01 Jan 2024 00:29:52 +0000
ROA not before: Mon 01 Jan 2024 00:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20565
IP address blocks: 185.113.48.0/22 maxlen: 22
45.153.204.0/22 maxlen: 22
45.81.208.0/22 maxlen: 22
185.241.0.0/22 maxlen: 22
2a06:6800::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:4f:42:c6:da:1d:b9:47:76:8c:6b:cb:f8:90:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79cf10c31f2edbb557d5540973c88079b33200f
Validity
Not Before: Jan 1 00:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f4ed58e6332ce46285a6fe896c57e3cfa743861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:4c:f9:80:22:7e:7c:86:12:62:ed:4e:4f:
a1:6e:80:f5:36:74:c3:48:55:69:24:63:17:60:c1:
03:6f:ee:07:fb:66:de:79:32:27:3e:ad:5a:7d:28:
c7:dc:59:01:b2:af:55:60:1a:a4:78:4f:e6:be:86:
96:64:32:40:a4:f7:96:b2:01:2e:14:8d:98:21:0e:
e5:11:fb:44:66:f1:e0:ca:0e:02:e3:03:00:47:ae:
39:51:cd:ab:d0:86:e3:22:fa:66:59:90:23:a4:26:
23:1c:8b:c5:16:d7:83:a7:cb:2a:2b:91:b9:ce:29:
14:fc:a1:c6:b4:1c:f5:23:a1:83:94:35:f5:44:26:
e7:e6:da:ea:f3:d6:45:4c:f5:5d:4f:18:73:7b:53:
af:d7:fe:5a:f7:c4:3e:ee:39:f3:aa:fa:f3:ee:f8:
5e:fa:4e:0a:5d:69:c8:64:f7:59:33:d1:bb:6e:4f:
2b:3f:61:c1:ef:97:0d:12:73:d6:fa:e1:f9:a8:ae:
62:13:b1:dc:94:b4:46:61:fb:50:54:d2:16:f9:de:
ca:03:ba:64:1c:95:13:19:43:00:73:af:e9:b8:6b:
57:a4:d5:4b:34:66:a2:2b:79:bc:47:4c:1f:02:99:
ea:a2:e9:1b:12:59:33:5b:63:d9:83:09:bd:bb:a0:
8c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4E:D5:8E:63:32:CE:46:28:5A:6F:E8:96:C5:7E:3C:FA:74:38:61
X509v3 Authority Key Identifier:
keyid:A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/D07VjmMyzkYoWm_olsV-PPp0OGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.208.0/22
45.153.204.0/22
185.113.48.0/22
185.241.0.0/22
IPv6:
2a06:6800::/29
Signature Algorithm: sha256WithRSAEncryption
77:0a:20:e5:6d:5a:4b:2f:72:93:09:76:97:43:26:46:ff:4a:
f9:9b:d0:28:59:f9:d2:79:c3:63:de:23:6b:b1:9a:ba:5a:0a:
33:61:47:f8:53:e4:6c:56:bc:e5:37:35:c3:4d:72:bc:7f:f5:
82:3f:11:9e:a2:2b:79:48:0b:f2:ff:a4:71:a5:fe:80:2b:58:
bc:24:e5:7f:b1:db:9c:70:58:02:be:30:78:20:b8:2a:49:2c:
37:64:7a:6a:86:61:a6:4c:ec:cf:16:ae:9e:a2:c5:3d:7f:00:
18:c7:b2:bc:bd:ca:30:d6:8d:da:dd:b8:35:43:b7:7b:e1:e9:
98:25:68:87:6f:f9:f9:73:fe:20:9d:13:95:37:94:be:76:62:
44:6a:db:06:b1:5f:95:b2:48:8f:99:a1:3e:dc:04:8a:c1:8c:
e2:ed:50:0c:6a:1a:f9:94:de:74:4a:1a:b3:16:02:65:24:28:
6f:1c:30:00:62:c6:e9:11:91:45:e4:11:e1:13:f3:8d:68:c9:
dc:53:4e:91:67:16:49:73:36:2b:5d:35:38:50:9e:1f:5e:b1:
f6:5b:08:a8:f6:a1:4f:b6:bf:d8:ac:a3:07:61:9c:5e:7d:4b:
b6:55:c8:37:69:1d:73:fb:a0:f9:a0:99:8a:b0:d3:f2:f9:fe:
fa:69:3c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:12 2025 by rpki-client