Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Dyrr5LoS67MqRLsAM1I_i19Bxn0.roa
File: Dyrr5LoS67MqRLsAM1I_i19Bxn0.roa (raw, json)
Hash identifier: SRbQE64m3FBR8L7YNt4/D8EHAl1yuzVmJK658pvI6Fc=
Subject key identifier: 0F:2A:EB:E4:BA:12:EB:B3:2A:44:BB:00:33:52:3F:8B:5F:41:C6:7D
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 018CE93B82F342837B7EAF9AF79E9C6FAB60
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Dyrr5LoS67MqRLsAM1I_i19Bxn0.roa
Signing time: Mon 08 Jan 2024 13:20:40 +0000
ROA not before: Mon 08 Jan 2024 13:20:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34918
IP address blocks: 85.9.120.0/21 maxlen: 21
85.9.96.0/20 maxlen: 20
85.9.96.0/21 maxlen: 21
85.9.104.0/21 maxlen: 21
85.9.106.0/24 maxlen: 24
185.126.3.0/24 maxlen: 24
185.126.2.0/24 maxlen: 24
185.126.4.0/24 maxlen: 24
185.126.0.0/24 maxlen: 24
185.126.0.0/22 maxlen: 22
185.126.0.0/20 maxlen: 20
185.126.1.0/24 maxlen: 24
185.126.0.0/21 maxlen: 21
185.126.10.0/24 maxlen: 24
185.126.9.0/24 maxlen: 24
185.126.11.0/24 maxlen: 24
185.126.7.0/24 maxlen: 24
185.126.6.0/24 maxlen: 24
185.126.8.0/24 maxlen: 24
185.126.8.0/21 maxlen: 21
185.126.5.0/24 maxlen: 24
185.126.13.0/24 maxlen: 24
185.126.15.0/24 maxlen: 24
185.126.14.0/24 maxlen: 24
185.126.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Feb 2024 08:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:3b:82:f3:42:83:7b:7e:af:9a:f7:9e:9c:6f:ab:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 8 13:20:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f2aebe4ba12ebb32a44bb0033523f8b5f41c67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9a:e1:db:60:bf:fc:6e:aa:08:f3:97:99:19:
22:53:94:36:eb:c1:bd:df:80:11:6d:82:bd:18:84:
5f:fa:33:6c:c5:c0:05:4a:13:be:be:76:0d:e9:6d:
3e:6d:d1:2b:a6:75:f0:81:d9:f3:db:0c:62:af:3f:
10:44:53:a1:f2:7e:47:a5:45:76:ba:4a:d5:17:e9:
91:07:eb:15:2e:15:bf:b3:ef:e4:42:00:04:0a:77:
e3:09:9e:e7:85:4c:b8:c1:22:0e:37:c7:55:b5:a6:
27:02:f1:05:c4:ac:76:8e:d4:63:54:22:25:9f:3d:
f2:b8:f7:74:ba:2d:cb:47:f2:3a:fa:a3:70:6c:25:
82:77:ac:9c:e3:0e:6c:47:8f:fb:9b:13:81:06:99:
18:e6:fe:08:ee:64:93:0c:90:a7:17:d4:37:ec:12:
f3:22:24:eb:58:61:77:d6:b1:b2:9d:fc:d6:5d:d8:
cc:5c:27:3d:4f:b5:33:6e:5e:d8:91:5b:83:f6:3a:
d5:97:16:33:57:c6:31:5d:a8:59:fa:a4:db:21:1f:
57:2d:4a:0d:1e:f7:fa:a1:d9:db:ab:3f:9c:e1:c3:
b1:a1:0e:b5:15:cc:07:94:d6:b6:7c:4b:e1:ed:96:
3c:e3:a8:62:87:3d:d5:46:de:a7:e3:4c:d1:02:ed:
e0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2A:EB:E4:BA:12:EB:B3:2A:44:BB:00:33:52:3F:8B:5F:41:C6:7D
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Dyrr5LoS67MqRLsAM1I_i19Bxn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.9.96.0/20
85.9.120.0/21
185.126.0.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:18:b0:37:b7:cc:2c:e1:7b:25:55:0f:05:43:24:6f:9c:18:
e6:43:d0:85:2f:b2:0c:cd:a6:b6:f4:86:73:6a:87:b7:9e:57:
f1:d6:2b:9e:af:e0:7e:77:ac:50:ba:89:d4:62:b1:28:e6:bb:
99:b5:54:e6:b1:82:59:53:4f:4d:b7:db:9e:44:d9:49:88:8d:
6e:bd:11:fa:32:ca:d7:89:4a:70:3b:e0:81:35:13:44:84:29:
95:73:ad:fa:a3:a7:6e:9d:df:fe:f5:25:c3:a9:1c:39:7d:72:
87:6e:9b:d7:ce:16:66:7a:eb:de:bb:ff:64:1d:00:ee:2d:63:
1e:c1:67:97:4c:b9:64:1c:29:b9:10:d5:16:52:f0:7b:d1:c8:
f1:a0:8d:6d:64:90:63:b0:a0:8c:ef:4a:8c:29:bb:8f:35:82:
12:b4:40:cc:98:2a:35:66:77:bf:45:fb:25:dc:4f:fb:08:4d:
2b:f8:79:82:9c:b3:7d:b1:c3:f8:5c:9d:48:fa:a1:fe:14:98:
83:88:48:fe:1b:be:83:ac:e7:c6:bb:38:79:b3:22:18:a0:5f:
f2:46:12:e9:70:a4:ca:a2:5e:1b:e4:c6:80:e4:50:d3:fd:5c:
72:8a:b1:a3:44:f8:f4:ab:60:7a:dd:28:db:56:50:3d:f8:6c:
a2:1a:4e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:33 2024 by rpki-client on console-ams.rpki-client.org