Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Dykt7IRmUBgGmAHo1eqcQV0bEgc.roa
File: Dykt7IRmUBgGmAHo1eqcQV0bEgc.roa (raw, json)
Hash identifier: wp4tYK+vBHVMCBMMT9qrExQRb1BaH1iRDlsj+W5QuRA=
Subject key identifier: 0F:29:2D:EC:84:66:50:18:06:98:01:E8:D5:EA:9C:41:5D:1B:12:07
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0191BB75755838F74583A007F398DA1C85D6
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Dykt7IRmUBgGmAHo1eqcQV0bEgc.roa
Signing time: Wed 04 Sep 2024 05:15:22 +0000
ROA not before: Wed 04 Sep 2024 05:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 45.128.199.0/24 maxlen: 24
45.146.55.0/24 maxlen: 24
45.159.246.0/24 maxlen: 24
194.5.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bb:75:75:58:38:f7:45:83:a0:07:f3:98:da:1c:85:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Sep 4 05:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f292dec84665018069801e8d5ea9c415d1b1207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ed:58:f2:3f:42:e1:26:53:1f:bf:61:63:7d:
fd:3d:19:86:6d:2a:9f:25:b4:0d:ca:d6:71:5b:1c:
d3:8e:31:c8:da:f6:b8:86:9a:01:97:d9:b2:3f:dc:
36:01:49:e4:fa:c9:b2:4e:82:3b:3d:34:a7:69:25:
10:50:a3:3a:1b:f7:0c:50:76:09:bb:ef:59:a3:6d:
ce:9c:2e:9c:97:73:e8:8a:b7:bc:09:2f:d6:df:0a:
85:68:58:90:e8:67:08:d3:0f:95:35:b6:6a:f6:f3:
5e:77:68:6f:f3:ac:af:04:9e:db:14:9f:a8:9e:6c:
58:8e:04:d9:54:7c:3b:a1:5b:19:99:2b:89:a5:f6:
db:93:d0:bb:d2:a0:8a:8d:0b:bd:5f:79:85:4d:25:
70:50:08:33:b8:78:52:27:64:78:02:5d:2f:1f:f0:
c9:83:f9:c2:e9:e7:40:23:8b:49:85:dd:da:58:75:
8f:2d:e6:a2:97:fc:4f:d9:63:da:36:66:ea:80:77:
ed:f3:dd:38:64:8c:7b:22:ca:07:3a:c6:dc:61:c8:
08:e4:99:46:91:c0:66:14:9b:d3:dd:74:26:98:34:
22:76:d3:5b:e3:81:28:af:33:2f:bd:d9:64:6e:39:
62:84:2b:d7:ae:4a:c8:e1:ef:c1:1e:87:a7:fd:3b:
6b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:29:2D:EC:84:66:50:18:06:98:01:E8:D5:EA:9C:41:5D:1B:12:07
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Dykt7IRmUBgGmAHo1eqcQV0bEgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.199.0/24
45.146.55.0/24
45.159.246.0/24
194.5.52.0/24
Signature Algorithm: sha256WithRSAEncryption
11:7f:b1:6d:ba:63:c8:7e:ee:5e:8c:d1:3d:09:da:b7:6e:3c:
14:af:c8:12:25:3f:2c:aa:25:7b:54:e6:ee:86:c6:d1:4b:79:
6d:d2:28:25:05:b9:34:d8:ab:f0:cd:8a:d3:8d:2e:2d:48:49:
c5:38:87:cc:bd:98:5a:31:c7:7b:8a:53:b6:69:14:37:26:28:
14:d9:2e:35:9c:d2:9d:6d:f1:e9:a6:ae:4b:2e:ca:4c:1e:ca:
1e:76:34:9c:8a:2f:8f:70:fd:15:75:2e:1b:c1:af:69:f7:34:
e6:65:26:57:8f:66:a2:35:b3:76:d3:da:a7:45:5c:96:5b:e6:
46:f2:55:19:e9:78:8c:3e:e7:14:ef:09:e3:76:cd:a3:d7:d2:
ce:18:fe:6e:50:4c:7d:43:8d:61:1f:b3:dd:00:73:6b:ec:9c:
ae:28:07:c1:80:e1:52:87:7e:b3:e1:c5:6a:3e:6f:21:e1:9a:
24:6b:89:07:84:47:f7:48:3b:92:d3:b1:4c:07:e0:f8:77:33:
0a:75:63:b4:8e:be:66:88:91:af:a4:1b:2f:29:41:02:95:3a:
0b:3f:7c:20:7b:f3:7b:9e:b0:42:88:b6:5a:d5:dc:87:13:30:
6c:a7:b5:64:7c:bd:dc:d5:d4:39:69:e1:e3:c4:9d:50:91:7c:
d3:d7:03:8b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZG7dXVYOPdFg6AH85jaHIXWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjQwOTA0MDUxNTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjI5MmRlYzg0NjY1MDE4MDY5ODAxZThkNWVhOWM0MTVkMWIxMjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke1Y8j9C4SZTH79hY339PRmGbSqf
JbQNytZxWxzTjjHI2va4hpoBl9myP9w2AUnk+smyToI7PTSnaSUQUKM6G/cMUHYJ
u+9Zo23OnC6cl3Poire8CS/W3wqFaFiQ6GcI0w+VNbZq9vNed2hv86yvBJ7bFJ+o
nmxYjgTZVHw7oVsZmSuJpfbbk9C70qCKjQu9X3mFTSVwUAgzuHhSJ2R4Al0vH/DJ
g/nC6edAI4tJhd3aWHWPLeail/xP2WPaNmbqgHft8904ZIx7IsoHOsbcYcgI5JlG
kcBmFJvT3XQmmDQidtNb44EorzMvvdlkbjlihCvXrkrI4e/BHoen/TtrpQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFA8pLeyEZlAYBpgB6NXqnEFdGxIHMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvRHlrdDdJUm1VQmdHbUFIbzFlcWNRVjBiRWdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYDHAwQA
LZI3AwQALZ/2AwQAwgU0MA0GCSqGSIb3DQEBCwUAA4IBAQARf7FtumPIfu5ejNE9
Cdq3bjwUr8gSJT8sqiV7VObuhsbRS3lt0iglBbk02KvwzYrTjS4tSEnFOIfMvZha
Mcd7ilO2aRQ3JigU2S41nNKdbfHppq5LLspMHsoedjScii+PcP0VdS4bwa9p9zTm
ZSZXj2aiNbN209qnRVyWW+ZG8lUZ6XiMPucU7wnjds2j19LOGP5uUEx9Q41hH7Pd
AHNr7JyuKAfBgOFSh36z4cVqPm8h4Zoka4kHhEf3SDuS07FMB+D4dzMKdWO0jr5m
iJGvpBsvKUEClToLP3wge/N7nrBCiLZa1dyHEzBsp7VkfL3c1dQ5aeHjxJ1QkXzT
1wOL
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:50 2025 by rpki-client