Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/drxm83SdtN0XHbeY6o6G9Jzdib4.roa
File: drxm83SdtN0XHbeY6o6G9Jzdib4.roa (raw, json)
Hash identifier: Lq/4f93SKdkteLgMuRlElmD+Ija4aW/3i/0vQ4aq6C4=
Subject key identifier: 76:BC:66:F3:74:9D:B4:DD:17:1D:B7:98:EA:8E:86:F4:9C:DD:89:BE
Certificate issuer: /CN=b945674f01fec565971c950f3512165c43ffdfb6
Certificate serial: 018E57535E3CBD4B3A1DE9602033EEFD6B61
Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/drxm83SdtN0XHbeY6o6G9Jzdib4.roa
Signing time: Tue 19 Mar 2024 15:27:45 +0000
ROA not before: Tue 19 Mar 2024 15:27:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201902
IP address blocks: 5.182.8.0/22 maxlen: 24
185.59.92.0/22 maxlen: 24
2a02:6a20::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Dec 2024 07:54:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:57:53:5e:3c:bd:4b:3a:1d:e9:60:20:33:ee:fd:6b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6
Validity
Not Before: Mar 19 15:27:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76bc66f3749db4dd171db798ea8e86f49cdd89be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3b:c6:80:1d:5d:95:84:7d:40:a6:43:a8:4d:
26:20:26:89:c6:cf:29:d9:2b:11:e9:7b:81:a2:6c:
ea:75:95:04:fd:06:60:be:2f:58:81:34:d3:f2:71:
4d:71:2d:f8:00:c1:e7:0e:f7:bb:2d:db:c7:25:57:
2b:2f:3a:8a:ee:88:1c:c0:de:3b:5f:0a:46:ad:c4:
0e:84:98:a7:87:bd:02:b7:89:07:88:06:d2:97:54:
ed:1d:18:78:f1:f4:c2:f9:40:e3:72:7a:58:b0:c5:
27:07:e9:d0:f1:9d:d2:c8:95:f1:6a:45:25:d9:db:
51:b5:c3:29:15:6e:28:f8:51:60:ab:cd:fe:9b:da:
c3:5b:e4:ee:2f:0e:fa:68:86:af:d2:ed:f1:b9:aa:
ef:5d:90:28:92:20:b1:01:a7:46:48:0a:52:ba:79:
88:b2:31:0a:6b:1f:9c:8a:2f:c2:7a:a6:dd:f1:58:
29:a3:a9:dc:f9:a8:34:4e:f7:cf:68:a2:6f:45:f8:
38:fc:2c:27:25:cc:b0:05:26:90:d8:bb:cd:10:97:
75:87:4d:6b:e6:3a:73:47:06:d1:7d:e1:59:e0:4c:
4e:f0:63:10:ae:9e:49:e0:90:ad:a2:12:2c:8f:76:
c4:07:2d:03:95:f2:d3:5f:bc:61:f0:83:af:24:c9:
71:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BC:66:F3:74:9D:B4:DD:17:1D:B7:98:EA:8E:86:F4:9C:DD:89:BE
X509v3 Authority Key Identifier:
keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/drxm83SdtN0XHbeY6o6G9Jzdib4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.8.0/22
185.59.92.0/22
IPv6:
2a02:6a20::/48
Signature Algorithm: sha256WithRSAEncryption
82:60:fd:65:d6:21:87:09:e2:4c:51:c1:f4:7b:27:55:8e:45:
30:3b:a5:fe:07:36:2d:2c:e5:49:67:1f:67:86:8a:f9:3a:3b:
c0:5c:55:e7:06:31:75:46:74:b8:e3:32:03:47:6c:1f:3b:ff:
e3:34:eb:b1:e4:d0:ee:fb:90:4d:f6:d3:14:b9:3e:64:0d:27:
f1:7f:4a:c2:8e:b4:a4:eb:ec:4e:01:18:31:bb:8b:16:96:37:
4a:9c:82:6c:63:94:4d:39:19:d1:ef:45:2f:ec:7a:ad:f0:ba:
35:63:3d:31:0d:fc:a0:03:38:72:b7:b2:a2:55:cb:46:68:13:
ce:ac:bf:c2:8a:88:33:33:2b:5a:4e:22:b8:f3:30:62:ab:ca:
85:b7:82:c7:f3:5f:01:cb:06:be:5c:b9:44:3e:f3:3d:72:88:
d5:34:bd:d1:0b:c0:c1:f5:43:eb:08:54:0f:d2:53:29:8b:97:
6c:79:c8:f1:9e:66:fb:6e:05:49:77:4b:82:4d:a6:a8:06:54:
41:12:81:ef:a1:f8:a3:80:fe:bb:bb:91:f0:4c:a5:17:16:08:
d5:67:a2:b9:70:ef:0f:95:c7:be:a9:8f:bf:a3:6d:de:cd:86:
c2:ad:7c:60:9c:25:eb:63:7a:0a:0b:e9:58:38:ea:d4:38:df:
da:5c:9c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:05:19 2025 by rpki-client