Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DpTybUFl3ShM5VXM2KX5UHAEPTw.roa
File: DpTybUFl3ShM5VXM2KX5UHAEPTw.roa (raw, json)
Hash identifier: K6lv8VV17qAUZtR2tSmzWDK86Wt/9R6KTco2Yx2lbi0=
Subject key identifier: 0E:94:F2:6D:41:65:DD:28:4C:E5:55:CC:D8:A5:F9:50:70:04:3D:3C
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194D5376C3221104AF016BE84BE25F27D34
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DpTybUFl3ShM5VXM2KX5UHAEPTw.roa
Signing time: Wed 05 Feb 2025 08:26:06 +0000
ROA not before: Wed 05 Feb 2025 08:26:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28546
IP address blocks: 85.92.124.0/22 maxlen: 22
85.92.124.0/23 maxlen: 23
85.92.124.0/24 maxlen: 24
85.92.125.0/24 maxlen: 24
85.92.126.0/23 maxlen: 23
85.92.126.0/24 maxlen: 24
85.92.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 13:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:37:6c:32:21:10:4a:f0:16:be:84:be:25:f2:7d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Feb 5 08:26:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e94f26d4165dd284ce555ccd8a5f95070043d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:25:80:da:dc:ec:a1:1f:93:f5:d5:5f:fa:32:
00:af:5e:df:ee:ce:fc:b9:0d:56:f6:ba:da:43:ad:
ea:41:77:b9:7d:c6:0b:46:1a:5d:10:4f:45:d8:fe:
c0:e7:70:97:9a:36:be:de:6f:1a:ac:31:7c:d0:d5:
a8:79:87:4e:ba:d5:b9:2f:8d:8d:78:d5:75:0b:36:
22:82:98:66:4f:1a:39:e4:80:e4:5a:b6:be:78:9b:
ef:20:db:68:51:a3:62:67:fd:6e:7a:8f:80:70:83:
a9:67:78:d4:49:60:dd:fb:67:ca:93:52:4a:2e:8d:
e9:26:40:38:f0:7a:86:6d:3b:e5:c8:9e:b5:bd:1e:
e4:7d:75:8d:95:49:3d:85:ce:55:f7:4c:79:6e:40:
d7:73:6b:4e:f7:27:4f:c9:5b:dc:99:ca:c5:65:73:
26:9e:07:5f:c5:29:63:6e:9a:40:40:94:d7:ee:aa:
62:68:2e:3b:f1:ec:59:1d:26:e7:e9:84:d2:e0:48:
0c:91:74:0e:bf:2b:0a:17:31:76:41:bb:d9:e7:d9:
de:37:ef:fc:4e:32:0e:47:45:01:c1:4e:07:a8:5e:
00:3d:80:07:26:60:77:cb:5e:d8:2c:75:74:26:68:
4f:7b:97:22:c9:7f:18:04:61:eb:99:6f:88:4e:eb:
71:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:94:F2:6D:41:65:DD:28:4C:E5:55:CC:D8:A5:F9:50:70:04:3D:3C
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DpTybUFl3ShM5VXM2KX5UHAEPTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.124.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:43:7b:b8:0b:54:d9:e3:c3:27:af:7e:e5:9b:bc:ad:7d:76:
58:3f:0c:21:8c:03:ab:5b:3b:91:70:1e:a5:05:37:0f:e2:cb:
aa:8f:53:f7:d7:14:d8:d0:39:d9:76:fc:9e:d0:8d:3a:9e:c5:
0c:03:a0:5e:54:0f:72:49:3d:3d:22:fb:fa:d8:16:36:a3:33:
dc:1f:50:6c:5f:f5:94:3a:09:d8:de:af:dc:a9:f2:37:4b:ba:
52:6d:b6:11:ef:90:f0:fe:b3:73:ad:4e:7d:61:a0:7a:14:3e:
98:6b:88:85:b7:02:ae:17:8a:9c:3a:16:55:df:eb:3d:35:8a:
b5:cf:b5:1e:5b:37:e0:51:41:68:0a:59:1e:14:66:66:5e:ac:
59:aa:44:71:88:46:eb:19:8c:96:11:34:8a:30:31:71:21:fb:
a2:fc:51:3e:74:38:b6:ed:3c:f7:de:c8:cc:4b:7f:18:08:b7:
c1:8c:28:58:4c:6a:60:b9:cf:81:c8:76:d2:22:ea:11:ab:e8:
53:5b:c4:e0:b9:a2:07:6c:05:97:aa:49:a1:5d:58:d5:c2:4f:
b7:35:9b:64:9e:bb:cf:b6:35:08:03:7f:ee:13:73:1b:3e:fe:
b2:ce:6d:6d:57:34:32:b4:2a:56:f2:44:37:a4:ab:b8:4d:3f:
be:f6:db:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:28:50 2025 by rpki-client