Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/DGNRmudbuOJCTnhpGJ5XCO3aIkk.roa
File: DGNRmudbuOJCTnhpGJ5XCO3aIkk.roa (raw, json)
Hash identifier: dhJpLyqLtN/GLpueTtAiS71ho7VczfOZ0N1Odl8yGiY=
Subject key identifier: 0C:63:51:9A:E7:5B:B8:E2:42:4E:78:69:18:9E:57:08:ED:DA:22:49
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019428242C9FCB20C2ED4F8AD91DE1DF62AE
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/DGNRmudbuOJCTnhpGJ5XCO3aIkk.roa
Signing time: Thu 02 Jan 2025 17:50:46 +0000
ROA not before: Thu 02 Jan 2025 17:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212283
IP address blocks: 83.222.190.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 09:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:2c:9f:cb:20:c2:ed:4f:8a:d9:1d:e1:df:62:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c63519ae75bb8e2424e7869189e5708edda2249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d2:e4:d0:e6:98:48:59:c1:36:44:46:3c:c4:
09:57:89:a1:50:c7:67:e6:05:ff:51:f1:5a:88:82:
1f:d3:5b:ac:48:00:28:3b:18:f5:ea:93:fb:96:6e:
0c:d2:9d:85:f3:c9:3b:61:85:e4:dd:d5:57:73:46:
1c:4a:f7:6e:0c:d4:bd:87:d7:ff:f1:29:1b:25:ba:
98:81:23:41:84:d0:4c:ea:dd:66:ff:39:9b:8a:f5:
a6:a8:b7:1f:65:fb:86:4b:6a:5b:46:34:c0:dc:17:
ab:96:63:54:81:45:39:20:e6:e6:af:5a:d2:aa:2f:
9d:a2:5b:fc:bc:8d:e7:6f:68:ce:23:47:47:20:38:
6b:43:65:55:b9:d2:bb:cf:d9:a5:d0:0d:da:a7:f7:
4f:bd:0a:0a:ee:87:d3:4c:dc:9f:5c:aa:10:0d:bb:
d3:8c:54:6c:a9:45:bb:cc:55:0b:3d:19:fe:da:42:
c2:3a:1c:7b:05:7b:52:90:9d:26:79:0d:d4:d1:2b:
d7:51:0c:1f:48:f7:52:47:f8:0c:52:fc:6c:c6:af:
27:d0:59:ba:d8:50:ee:f9:37:7f:2e:f7:b9:55:ee:
bc:bf:86:e6:95:be:84:69:bb:94:a8:8e:36:a6:54:
3c:89:e6:6b:f1:ba:9d:6c:1f:b5:79:1f:9a:56:c6:
31:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:63:51:9A:E7:5B:B8:E2:42:4E:78:69:18:9E:57:08:ED:DA:22:49
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/DGNRmudbuOJCTnhpGJ5XCO3aIkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.222.190.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:65:ac:1a:13:46:21:20:40:96:53:fa:22:aa:94:5d:e1:57:
3a:a3:2b:9a:2b:34:1e:e4:60:12:ab:99:5d:e1:bf:53:e1:4b:
fd:2a:41:ce:f6:da:20:47:76:f0:ce:57:69:8b:03:bb:e8:00:
42:03:73:f2:33:cd:33:6f:59:e8:e5:79:c9:0d:75:aa:76:5d:
6e:34:42:df:9e:0d:7d:2e:5b:07:ab:ae:91:d4:61:db:52:61:
e3:f5:e1:ce:38:ff:4e:20:1b:51:3c:3c:d6:58:62:4a:0b:06:
f4:ce:54:05:6c:7f:73:e7:49:bd:9c:0d:27:a4:0d:c5:f2:ce:
8d:8b:f7:b6:99:2d:12:48:35:b9:68:62:e0:b4:20:b7:59:af:
8a:d9:f5:d2:4e:c4:0b:e4:96:60:f7:b8:a6:35:eb:01:fa:3e:
2c:35:3c:c3:64:83:40:43:db:4c:65:f1:67:90:34:a1:db:28:
a7:11:e0:d5:79:a8:50:48:0f:73:73:b3:f7:f1:54:e4:5d:19:
d2:26:a0:59:85:12:0f:bf:82:9e:de:f4:49:68:6b:e9:c6:64:
6a:16:3a:ec:b4:51:df:0c:7f:29:bd:a4:f0:39:ff:d3:5b:a8:
50:c7:72:5c:c6:16:34:f9:11:15:ed:bf:ca:e7:b3:43:e2:2a:
30:be:97:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:32:13 2025 by rpki-client