Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/DMKZDNkq7_OaEUgQ6LLPpNM9ToA.roa
File: DMKZDNkq7_OaEUgQ6LLPpNM9ToA.roa (raw, json)
Hash identifier: GYgXmmxKqiwgYUrHywWVNPnx7KkXU88b2XPL7vcwW9k=
Subject key identifier: 0C:C2:99:0C:D9:2A:EF:F3:9A:11:48:10:E8:B2:CF:A4:D3:3D:4E:80
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 018CC348A7F166A0A57F7E23E14579B1D6A3
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/DMKZDNkq7_OaEUgQ6LLPpNM9ToA.roa
Signing time: Mon 01 Jan 2024 04:29:27 +0000
ROA not before: Mon 01 Jan 2024 04:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24922
IP address blocks: 193.140.216.0/21 maxlen: 21
193.140.224.0/20 maxlen: 20
194.27.160.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a7:f1:66:a0:a5:7f:7e:23:e1:45:79:b1:d6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cc2990cd92aeff39a114810e8b2cfa4d33d4e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0e:35:92:52:84:4e:23:6a:ef:f3:a5:ab:e5:
e5:d0:a6:06:25:40:0e:4a:93:c6:a5:2e:fe:c8:d0:
4c:e3:b1:6f:76:97:0c:dc:c5:c3:06:68:e9:66:f1:
25:ee:7a:82:a6:2f:d9:cf:35:2e:86:76:c5:8e:58:
0a:fc:46:bc:43:53:d2:b4:e7:9e:12:73:db:6a:ca:
0f:1a:27:c4:03:d4:24:c7:a8:a8:ea:28:9e:55:57:
0d:63:e6:47:fe:5e:19:8c:32:42:27:e1:e1:9c:9b:
68:cd:1c:b0:f9:1f:47:49:97:71:c8:a4:eb:a4:e1:
12:d9:ec:91:24:e2:e0:0f:15:b3:67:b4:c1:b1:6f:
98:5e:99:f5:ae:94:f6:f8:80:38:e0:4d:95:91:d3:
7a:a7:9f:b2:f3:da:a1:a4:d1:a8:7c:b3:39:26:fd:
99:f9:d1:fa:f2:b2:13:34:24:6e:b3:8b:27:e8:c1:
55:2a:49:f1:df:fd:b2:03:af:8a:f2:51:25:e3:1d:
c6:60:d4:28:c8:fb:85:8c:7d:36:da:27:c2:37:03:
21:fa:34:e7:68:79:2b:3c:cf:88:bd:24:66:53:8a:
d1:74:5d:8f:1b:9e:9f:b6:f8:a5:f4:cc:24:63:47:
21:98:67:2f:22:0a:6b:f2:77:a2:93:a7:95:dd:36:
95:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C2:99:0C:D9:2A:EF:F3:9A:11:48:10:E8:B2:CF:A4:D3:3D:4E:80
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/DMKZDNkq7_OaEUgQ6LLPpNM9ToA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.140.216.0-193.140.239.255
194.27.160.0/21
Signature Algorithm: sha256WithRSAEncryption
75:26:5a:3e:72:fc:c6:50:ce:d7:25:d2:b3:e9:36:cf:f9:56:
2b:65:fa:6d:fe:a7:e7:f5:c6:df:7e:39:e6:d4:b8:50:6c:de:
4e:bf:30:8f:5b:0a:36:d3:1b:38:6f:15:21:a6:5f:91:c9:4b:
4d:b5:7e:3f:56:23:08:ad:17:07:2f:cf:f6:f0:aa:d4:eb:9d:
de:28:ff:10:69:97:42:b9:c8:21:bd:56:07:61:0c:84:d3:e5:
80:15:2e:09:fd:78:2b:33:8b:93:58:fe:af:d0:58:ea:e7:66:
a2:a0:ef:12:3e:f8:8f:38:81:2f:ef:54:b6:b5:89:f1:b1:fc:
80:11:16:34:a4:a1:9e:32:ae:0c:46:6e:dd:3e:23:63:75:ae:
7a:03:6d:8c:43:f5:c5:52:66:83:b7:68:01:c0:7c:f8:8f:f8:
76:c7:02:91:b1:4e:c9:20:dd:bc:de:10:83:f9:81:ea:d6:f9:
ef:7f:76:9a:a2:a7:52:2d:b9:64:eb:3b:b8:05:dd:1f:fe:1b:
a2:9c:f1:32:9b:94:f0:bb:88:20:6b:5e:9d:f1:52:29:b5:9e:
87:40:87:e9:76:2f:29:4f:c7:87:14:d9:2e:56:28:c3:6e:2f:
37:8d:98:3e:69:ba:b8:70:54:2c:c7:01:71:73:ac:22:5a:e8:
1e:8d:39:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:22:24 2025 by rpki-client