Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Da0NJTmFYJnGDW67qer5YFaD_pY.roa
File: Da0NJTmFYJnGDW67qer5YFaD_pY.roa (raw, json)
Hash identifier: 43pwBm13LUx/3aPwjZM1Z9C/64eUAJE0XQl3evWVBnY=
Subject key identifier: 0D:AD:0D:25:39:85:60:99:C6:0D:6E:BB:A9:EA:F9:60:56:83:FE:96
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018DEB6876F315F33BD42054653A1094CA9F
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Da0NJTmFYJnGDW67qer5YFaD_pY.roa
Signing time: Tue 27 Feb 2024 16:31:48 +0000
ROA not before: Tue 27 Feb 2024 16:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396356
IP address blocks: 104.232.37.0/24 maxlen: 24
185.205.207.0/24 maxlen: 24
185.230.120.0/24 maxlen: 24
2a0a:8f40:31::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 Feb 2024 16:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:eb:68:76:f3:15:f3:3b:d4:20:54:65:3a:10:94:ca:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Feb 27 16:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0dad0d2539856099c60d6ebba9eaf9605683fe96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:90:c7:ee:38:e0:e8:9c:5f:e5:8c:e3:67:
cb:4a:9a:40:2c:5b:6f:52:68:7f:96:61:0f:fc:f4:
62:2e:32:fd:51:c4:1c:d6:be:3a:07:35:ba:08:b2:
5e:69:98:31:bc:da:fe:a9:00:c0:82:a6:58:1b:26:
77:d0:24:65:71:fe:19:76:85:80:46:6d:e0:ea:06:
1c:d5:ba:35:71:6d:b4:d1:13:5d:b6:01:8c:6e:5c:
fb:87:25:69:a7:18:5c:35:86:cb:65:07:9f:88:06:
e4:3e:c7:97:f7:86:e4:06:7a:17:1e:a4:22:1c:12:
f3:9b:39:ae:92:ea:a1:1c:db:e3:e5:f4:a1:4e:c2:
52:96:63:bf:04:e4:e2:52:c0:1b:88:72:68:e8:34:
31:0e:2b:9f:dc:37:03:cb:44:85:f0:27:ef:dd:f1:
7b:4c:7b:15:a6:d1:32:c6:1c:e6:fc:e6:53:1b:55:
5b:26:0b:c1:4a:c2:43:52:7d:ac:1f:85:1a:b3:a0:
80:d3:73:94:25:d9:51:3d:30:e6:07:5b:5d:84:e6:
13:38:12:71:85:85:e5:3a:7e:20:03:52:fb:13:c9:
57:61:41:96:27:4a:07:87:95:1a:eb:e7:17:82:b2:
bc:ce:58:cb:51:31:1f:6f:5a:a3:de:28:fe:51:3a:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AD:0D:25:39:85:60:99:C6:0D:6E:BB:A9:EA:F9:60:56:83:FE:96
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Da0NJTmFYJnGDW67qer5YFaD_pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.232.37.0/24
185.205.207.0/24
185.230.120.0/24
IPv6:
2a0a:8f40:31::/48
Signature Algorithm: sha256WithRSAEncryption
24:8b:a4:a5:b3:0d:06:bf:c2:a2:d8:f1:fb:90:44:84:d7:c3:
23:a9:2e:9e:b0:78:74:e4:32:29:d9:55:61:64:5f:81:9f:1c:
1a:bc:df:2d:43:a4:7b:31:0f:6c:03:d0:5b:66:77:17:9b:ac:
b9:6a:61:88:c3:53:3c:25:a5:93:b2:98:b8:8f:04:5f:59:05:
e6:38:88:df:4f:2d:a7:1a:20:00:c8:ab:09:94:01:53:c4:31:
77:73:fd:37:ef:bc:89:b4:ea:4d:c3:02:a1:3e:f2:0e:c1:1a:
e6:6e:81:fb:53:2a:f3:33:b5:e9:b6:9d:9b:c1:55:df:90:dc:
a3:c7:f2:2a:7f:b0:6d:91:d1:09:b7:07:7a:38:a6:9e:b8:09:
94:6d:c0:f9:d6:4d:08:c1:4c:28:1a:d2:37:e6:20:1e:56:5f:
99:f9:28:e7:75:f0:c9:be:6f:fd:d0:5b:31:56:54:ca:b7:df:
06:da:08:9a:97:f8:c1:d0:0b:67:a4:c8:fa:47:cf:a0:e5:47:
04:9a:8d:ad:f2:81:92:29:fd:cb:8b:d2:50:d9:82:13:0b:77:
ed:69:f7:86:f9:cc:ab:35:cc:57:d6:2b:e9:f6:0a:cf:95:20:
1e:cf:b8:32:3f:58:02:7b:44:ce:49:90:cf:b2:0a:18:dc:a6:
29:29:eb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:47:56 2025 by rpki-client