Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/DinGZOFxalY2kiAyWh7NqWvt4Rc.roa
File: DinGZOFxalY2kiAyWh7NqWvt4Rc.roa (raw, json)
Hash identifier: SjhgcoOck0/oQpjT8ujGMIiIgdsmI8nqqpog1ro7nIM=
Subject key identifier: 0E:29:C6:64:E1:71:6A:56:36:92:20:32:5A:1E:CD:A9:6B:ED:E1:17
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01940266311C7E1CEFF0686953BFD2852856
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/DinGZOFxalY2kiAyWh7NqWvt4Rc.roa
Signing time: Thu 26 Dec 2024 09:57:19 +0000
ROA not before: Thu 26 Dec 2024 09:57:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204104
IP address blocks: 85.133.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:02:66:31:1c:7e:1c:ef:f0:68:69:53:bf:d2:85:28:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Dec 26 09:57:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e29c664e1716a56369220325a1ecda96bede117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d5:11:a2:b5:ad:84:d6:42:de:aa:73:60:be:
ce:ef:5c:2a:1f:84:e5:d1:a1:74:9d:48:6c:60:f0:
51:92:9f:63:e8:d7:75:a3:a6:f8:a9:d8:d2:d3:ec:
0a:65:90:8e:4b:1a:fb:63:94:e3:24:18:6a:22:28:
39:07:b8:3a:e3:f9:9c:36:65:57:86:56:97:c7:42:
6d:9b:13:ba:41:a9:59:98:f1:20:b9:00:9e:d6:56:
68:36:60:f3:ce:ee:80:6d:f4:63:8c:e4:8b:33:1c:
c3:d0:b9:45:a0:1e:51:2b:ed:ea:98:e8:b2:0c:f2:
ff:4e:be:90:f7:d5:f0:d6:8e:b3:4e:73:d8:cc:c0:
8c:24:ad:7f:42:a4:b8:d5:16:23:40:60:b5:68:35:
cf:ac:48:b9:7c:c9:99:5b:b9:13:40:3e:62:0b:23:
28:3a:19:ff:65:74:f7:ea:35:dc:7a:48:a5:eb:52:
24:71:27:f6:cb:8e:bd:fa:d8:ca:95:fe:29:9a:11:
df:de:9f:f4:7e:d3:ff:47:bc:e5:f0:d5:a4:19:12:
c7:37:5d:9f:04:0a:f6:cb:84:da:da:aa:74:7c:de:
04:cc:5c:f7:d6:b4:dc:68:be:9e:df:83:a6:4c:b1:
a9:8d:fa:0e:17:77:57:19:64:40:0d:09:1d:97:39:
c2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:29:C6:64:E1:71:6A:56:36:92:20:32:5A:1E:CD:A9:6B:ED:E1:17
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/DinGZOFxalY2kiAyWh7NqWvt4Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.194.0/24
Signature Algorithm: sha256WithRSAEncryption
02:0d:ad:57:fb:71:3f:fd:b0:d5:b5:1d:63:e2:2a:82:5e:b3:
f5:c3:3e:b9:48:e1:d5:4e:73:35:7f:55:be:69:be:67:02:cc:
9a:08:89:9f:f8:66:1f:46:6a:78:d0:ae:be:71:bb:c2:bd:6f:
be:a9:c7:0d:96:f2:92:4f:e8:5b:da:43:1b:03:4a:26:77:98:
35:7d:56:59:8b:a2:a2:3d:dc:4e:04:cd:89:09:28:8e:5e:47:
b6:e5:25:66:b9:31:54:c2:27:5c:4d:0d:13:f7:3c:db:40:63:
ac:d9:a0:09:9a:63:8c:06:3a:95:f9:53:e1:f5:6f:11:fc:85:
9f:46:16:27:df:7d:eb:53:6c:3e:c7:96:f9:ba:a4:7b:3a:1d:
0b:54:ae:72:08:62:d4:fa:95:07:91:61:75:45:33:e1:7f:6f:
ad:a5:34:44:c9:65:d7:2d:d8:eb:8b:61:f0:f4:74:d2:48:8e:
0a:21:90:80:f2:d2:32:6a:bb:76:2a:05:a2:5f:1c:08:05:28:
03:a9:37:ae:45:08:84:b4:13:7c:3a:a3:95:5e:15:16:62:f5:
a9:dd:d8:5b:d9:f9:e5:50:7e:9b:80:24:19:cc:b0:45:81:48:
37:3d:49:f8:29:ac:b9:f3:72:0b:4a:0b:83:f6:40:86:ba:4e:
57:68:0b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:33:07 2025 by rpki-client