Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/DDOEKWpzaDD6iUlIKB3XXJ0MoJ8.roa
File: DDOEKWpzaDD6iUlIKB3XXJ0MoJ8.roa (raw, json)
Hash identifier: 4ngUdcR4Ygubd8ubp7Ti0uUPv2NHJs5Hr3/wjwYYCFE=
Subject key identifier: 0C:33:84:29:6A:73:68:30:FA:89:49:48:28:1D:D7:5C:9D:0C:A0:9F
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 0193D5DC435FA1A4564CA273C5D7C060ECB0
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/DDOEKWpzaDD6iUlIKB3XXJ0MoJ8.roa
Signing time: Tue 17 Dec 2024 18:23:22 +0000
ROA not before: Tue 17 Dec 2024 18:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62113
IP address blocks: 45.136.36.0/22 maxlen: 24
185.38.24.0/22 maxlen: 24
194.31.164.0/22 maxlen: 24
2a00:fbe0::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d5:dc:43:5f:a1:a4:56:4c:a2:73:c5:d7:c0:60:ec:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: Dec 17 18:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c3384296a736830fa894948281dd75c9d0ca09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:48:04:25:52:81:10:e8:ba:79:53:b1:dd:e4:
49:d2:c5:6e:b5:4f:c6:27:61:06:eb:d4:a5:cd:7f:
e1:84:1a:dc:26:ca:54:dc:4b:ef:cd:c8:05:ce:9f:
db:cc:2f:d5:d7:34:69:89:af:e6:4d:27:4a:93:0c:
00:93:be:ea:0f:60:c4:c5:da:fd:cd:71:62:a8:06:
e9:c5:3b:d3:f3:1e:85:8d:0d:fa:5c:66:bd:01:c3:
ee:e2:4e:dd:61:76:5b:2c:39:f5:2c:b7:6e:8d:c6:
17:c9:ec:97:23:00:2c:43:09:9d:b0:fe:a2:92:de:
e3:ca:d0:7f:32:b8:0a:7b:7b:13:5c:a6:6f:b6:a8:
52:7c:67:dc:ee:7b:ca:84:9d:f7:27:00:a7:41:21:
41:e5:a4:5f:a4:a4:58:45:d7:56:d3:54:cf:bf:2b:
52:a9:31:f0:f2:83:80:f1:85:09:08:4a:0c:86:bd:
d2:5b:0d:47:e1:43:18:c8:a9:cf:d6:00:41:cd:d3:
df:53:df:9a:ba:ab:9b:90:08:c4:1f:d5:f7:2e:5d:
b3:e7:44:67:d6:e1:a5:a7:66:a2:24:57:e1:52:de:
93:26:a2:a1:79:60:81:b9:fc:d6:9b:5e:cf:92:c8:
18:1a:61:16:f1:ab:e7:c6:90:67:4c:92:38:eb:ef:
fd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:33:84:29:6A:73:68:30:FA:89:49:48:28:1D:D7:5C:9D:0C:A0:9F
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/DDOEKWpzaDD6iUlIKB3XXJ0MoJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.36.0/22
185.38.24.0/22
194.31.164.0/22
IPv6:
2a00:fbe0::/29
Signature Algorithm: sha256WithRSAEncryption
28:33:9e:23:7f:97:64:35:dd:88:04:f6:7d:d1:9b:3f:2b:a3:
f3:0c:9c:f4:fa:55:23:d0:70:59:ca:8f:a7:56:ab:cc:ca:ae:
c8:3c:63:19:82:0b:a5:c7:fc:d1:2b:7e:55:81:06:97:4c:53:
d3:a7:32:7b:cb:80:d5:4e:c9:0c:92:49:4b:25:8a:ba:7e:16:
88:8f:f5:dd:90:4c:1d:e2:41:6d:c7:b8:01:f1:ea:3f:a9:3a:
75:24:ce:d2:38:65:d2:d3:34:f5:3e:d8:e5:49:92:ec:a0:e2:
06:e4:a8:9f:bd:74:cd:85:25:14:06:6a:19:38:79:da:31:08:
8d:af:af:fa:ec:62:60:1b:7a:36:3a:dc:98:e7:14:06:45:b0:
61:b9:66:56:3b:48:ff:08:2e:33:45:2e:48:49:07:4c:15:5c:
25:8e:f2:ec:16:a1:15:55:fd:50:a2:fc:55:ce:48:30:e9:66:
95:db:eb:0a:36:65:ff:97:3b:68:99:d5:45:0f:ef:01:b7:34:
3e:2a:ea:0f:ed:f6:70:1c:12:1d:c3:62:1c:08:3e:66:d9:44:
41:19:f1:e0:d2:7f:b7:e8:d5:92:60:b2:55:72:fe:e1:e5:e0:
3a:b2:c4:de:42:f2:18:71:07:b3:1f:ac:25:e4:b2:3d:df:2f:
ba:2c:42:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:42:09 2025 by rpki-client