Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/DAcpC164Ty3Syl39jIGpQzGYC48.roa
File: DAcpC164Ty3Syl39jIGpQzGYC48.roa (raw, json)
Hash identifier: GG6lJvbdpzfwdkz9blnew7asV2m/Gjpxwn2VTeJz1zg=
Subject key identifier: 0C:07:29:0B:5E:B8:4F:2D:D2:CA:5D:FD:8C:81:A9:43:31:98:0B:8F
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 018D59FD28B93A458ACADA4D80CED4BF585D
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/DAcpC164Ty3Syl39jIGpQzGYC48.roa
Signing time: Tue 30 Jan 2024 10:49:39 +0000
ROA not before: Tue 30 Jan 2024 10:49:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212165
IP address blocks: 185.224.212.0/24 maxlen: 24
2a10:9680::/29 maxlen: 29
2a10:9680::/32 maxlen: 32
2a10:9685::/32 maxlen: 32
2a11:e140::/29 maxlen: 29
2a12:6c40::/29 maxlen: 29
2a12:7f40::/29 maxlen: 29
2a12:92c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 30 Jan 2024 11:19:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:fd:28:b9:3a:45:8a:ca:da:4d:80:ce:d4:bf:58:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Jan 30 10:49:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c07290b5eb84f2dd2ca5dfd8c81a94331980b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:91:c4:5c:3b:b7:a8:f7:e1:47:09:ce:19:
12:bf:29:a9:18:6e:03:6a:9d:e6:35:e8:8b:a0:fc:
84:57:c0:cb:3e:50:74:12:2c:4c:c0:2f:30:96:a7:
ac:6e:15:40:9e:bc:86:4b:07:5e:73:84:49:ef:a9:
9a:08:0f:75:80:40:e1:95:a7:3a:c6:83:95:0d:e3:
51:29:c6:ff:78:68:1a:53:3b:36:35:1c:9f:23:d5:
36:3a:ed:ce:69:37:a1:76:a3:66:a9:12:2d:47:69:
ea:4a:2a:31:db:13:df:42:75:54:9b:7d:ce:18:c3:
d0:5f:8c:8b:44:e6:d2:77:54:07:5f:ca:b8:6d:1f:
34:eb:1b:59:0d:13:b7:4d:5a:89:f4:05:da:c4:2e:
94:a0:c9:93:5c:a6:60:48:45:d3:ab:af:89:c3:48:
22:a6:09:75:d9:eb:b9:be:1d:5a:ce:d5:d6:88:1e:
3a:4b:55:46:7d:78:9a:e6:05:80:1a:bd:e1:77:25:
da:79:09:26:07:d6:0f:2b:6c:db:00:b8:11:17:d7:
ae:f7:0d:b6:27:37:4f:90:72:70:94:0f:b7:84:e3:
01:41:ff:af:98:1b:32:4f:50:88:40:22:0a:73:75:
46:00:ce:13:d1:1b:e2:25:2a:f2:fd:24:f1:02:c6:
f5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:07:29:0B:5E:B8:4F:2D:D2:CA:5D:FD:8C:81:A9:43:31:98:0B:8F
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/DAcpC164Ty3Syl39jIGpQzGYC48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.212.0/24
IPv6:
2a10:9680::/29
2a11:e140::/29
2a12:6c40::/29
2a12:7f40::/29
2a12:92c0::/29
Signature Algorithm: sha256WithRSAEncryption
18:26:72:2c:fe:01:38:88:2f:60:61:6b:3d:fd:ac:de:01:b3:
dd:54:a3:58:cd:5b:4e:34:6c:7d:c5:cd:ea:e7:e8:bb:05:f7:
55:5c:dd:81:e1:68:47:9f:69:42:ac:de:76:9c:51:74:bd:7e:
60:63:6a:55:5b:a3:e4:f4:eb:c0:c5:26:09:fe:86:22:a2:5f:
04:78:54:9a:c8:9f:ee:87:8c:c6:76:96:c8:70:9e:3f:b9:d9:
40:30:18:03:b4:65:15:73:0f:8d:48:27:03:23:ae:df:4e:e7:
08:d1:cb:a5:7d:f8:ea:f8:05:55:45:26:60:d2:45:65:3d:2f:
76:a4:5e:15:27:a9:2b:b6:c4:63:f4:91:ab:88:14:5b:b4:9e:
e7:0a:e6:db:1f:be:cd:18:fd:90:47:a3:41:35:f1:64:8e:ff:
c0:92:8f:d7:96:47:14:9d:12:22:d5:f6:79:7e:cd:3c:ed:ae:
41:ad:26:d7:87:a5:20:4d:96:55:de:79:38:10:0b:56:7d:02:
ef:bc:c0:3a:fd:2a:b8:aa:26:2f:e7:8e:e8:45:14:01:13:36:
86:57:dc:aa:b1:a5:91:68:87:be:99:bb:c0:bc:6e:5f:6f:a2:
78:26:e9:22:a4:be:84:06:b4:f5:a6:0f:c0:2b:72:b6:c7:26:
e7:05:3b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 07:07:07 2025 by rpki-client