Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/drgv_252gs1zXvpoHGSpH5-_wSU.roa
File: drgv_252gs1zXvpoHGSpH5-_wSU.roa (raw, json)
Hash identifier: HFqSurasYHSHTYAmgzWrmxkv8bbJSl5uSS8nyh9hpOA=
Subject key identifier: 76:B8:2F:FF:6E:76:82:CD:73:5E:FA:68:1C:64:A9:1F:9F:BF:C1:25
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0194920768624696CEFF8EB56952C86DB2C7
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/drgv_252gs1zXvpoHGSpH5-_wSU.roa
Signing time: Thu 23 Jan 2025 07:19:06 +0000
ROA not before: Thu 23 Jan 2025 07:19:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:5387::/32 maxlen: 32
2a0e:5641::/32 maxlen: 32
2a0e:5643::/32 maxlen: 32
2a0e:5645::/32 maxlen: 32
2a0e:5647::/32 maxlen: 32
2a0e:5900::/32 maxlen: 32
2a0e:5905::/32 maxlen: 32
2a0e:5906::/32 maxlen: 32
2a0e:8084::/32 maxlen: 32
2a0e:8087::/32 maxlen: 32
2a0e:ccc0::/32 maxlen: 32
2a0e:ccc4::/32 maxlen: 32
2a0f:6fc1::/32 maxlen: 32
2a0f:6fc3::/32 maxlen: 32
2a0f:6fc7::/32 maxlen: 32
2a0f:b4c1::/32 maxlen: 32
2a0f:b4c2::/32 maxlen: 32
2a0f:b4c6::/32 maxlen: 32
2a0f:c085::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 29 Jan 2025 17:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:92:07:68:62:46:96:ce:ff:8e:b5:69:52:c8:6d:b2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 23 07:19:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76b82fff6e7682cd735efa681c64a91f9fbfc125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:b1:02:89:e4:3b:3d:4e:67:fe:e1:33:88:
a7:77:6f:11:d0:74:62:c9:be:1c:73:a1:f4:ef:b1:
1b:0e:1e:a7:d4:a0:84:99:dd:aa:3d:06:33:e1:f1:
8c:8e:dc:9c:74:7c:04:c0:84:c1:09:16:c8:3e:51:
e8:c7:2e:15:62:e6:f9:ac:a8:05:0a:ad:f0:e5:6b:
6a:a2:b0:c8:30:a0:4b:59:82:e6:18:c2:26:85:d2:
47:ba:9a:4a:cf:79:bb:4c:b6:24:89:8b:97:e8:06:
d2:6f:e9:32:bb:2f:66:1b:68:03:e2:2f:d7:e5:02:
10:c7:aa:e8:55:7a:7b:71:9d:5c:21:9e:d9:8e:09:
e0:52:b8:44:e0:81:a5:e7:2a:b5:88:e2:93:73:8f:
8d:34:0c:4d:b8:40:6e:49:c1:a7:50:6e:4a:5d:88:
04:9d:27:a5:5b:30:52:c6:93:9b:81:a5:17:d4:4b:
c3:2d:a9:0e:f8:f1:92:f4:23:ef:15:1a:71:71:35:
f1:62:58:d8:96:21:25:29:24:b2:e5:d8:58:0b:f6:
96:42:fa:fe:52:77:3e:7a:36:02:a5:50:ce:fc:a5:
ac:3b:42:0b:ea:09:1c:66:e9:4d:a6:0e:60:af:03:
da:ed:56:c6:f3:07:48:f0:bb:4d:d9:7d:1f:c6:f7:
6f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B8:2F:FF:6E:76:82:CD:73:5E:FA:68:1C:64:A9:1F:9F:BF:C1:25
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/drgv_252gs1zXvpoHGSpH5-_wSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:5387::/32
2a0e:5641::/32
2a0e:5643::/32
2a0e:5645::/32
2a0e:5647::/32
2a0e:5900::/32
2a0e:5905::-2a0e:5906:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:8084::/32
2a0e:8087::/32
2a0e:ccc0::/32
2a0e:ccc4::/32
2a0f:6fc1::/32
2a0f:6fc3::/32
2a0f:6fc7::/32
2a0f:b4c1::-2a0f:b4c2:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:b4c6::/32
2a0f:c085::/32
Signature Algorithm: sha256WithRSAEncryption
89:33:af:36:79:1d:3c:4e:77:13:3d:2f:a9:bc:d6:ce:c4:39:
d2:00:fe:d0:ba:4e:7c:0d:e5:41:50:18:ff:61:2b:69:87:1e:
e9:f6:56:83:a6:49:f4:29:91:9c:ef:a4:6f:ad:29:cb:b5:ab:
2f:43:2d:73:17:1e:17:b0:77:a3:ef:4f:4c:76:49:76:ff:56:
bd:74:b7:ea:38:7e:38:1f:81:0f:55:59:de:6e:24:bd:8f:0c:
bb:b6:c4:b1:0c:84:99:8b:c7:05:6e:28:31:a6:bc:8b:a2:8c:
7a:e4:81:4a:94:05:38:cb:5c:85:74:0a:f4:a1:dc:ff:9e:a6:
39:75:2f:2a:11:ad:d8:4b:0f:5a:bb:39:4f:22:21:59:fd:10:
fb:3e:85:2e:79:f7:20:ff:81:c8:4a:80:d1:be:90:60:ef:a9:
fe:95:51:65:9e:fb:61:7d:4c:a9:b3:a6:5c:ba:8f:ff:91:80:
9b:06:b6:18:54:a1:b4:a7:38:4d:19:f8:54:2b:6c:9e:ec:2c:
99:9f:db:53:3b:ef:71:03:ba:aa:29:61:28:67:0e:e1:d2:07:
c7:e6:96:5a:ff:b5:ba:c1:9c:b9:c3:ec:13:d9:6d:7f:f9:eb:
a3:aa:ff:fb:e3:4a:fd:9b:89:bb:6f:f6:69:c5:2c:82:e0:cd:
e9:71:b2:cf
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgISAZSSB2hiRpbO/461aVLIbbLHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTM5NDFjMjdjZmU1YzIzNGM0YmYyMjFlY2IyYTU3OWIy
ZGVhYWIwHhcNMjUwMTIzMDcxOTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmI4MmZmZjZlNzY4MmNkNzM1ZWZhNjgxYzY0YTkxZjlmYmZjMTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw2xAonkOz1OZ/7hM4ind28R0HRi
yb4cc6H077EbDh6n1KCEmd2qPQYz4fGMjtycdHwEwITBCRbIPlHoxy4VYub5rKgF
Cq3w5WtqorDIMKBLWYLmGMImhdJHuppKz3m7TLYkiYuX6AbSb+kyuy9mG2gD4i/X
5QIQx6roVXp7cZ1cIZ7ZjgngUrhE4IGl5yq1iOKTc4+NNAxNuEBuScGnUG5KXYgE
nSelWzBSxpObgaUX1EvDLakO+PGS9CPvFRpxcTXxYljYliElKSSy5dhYC/aWQvr+
Unc+ejYCpVDO/KWsO0IL6gkcZulNpg5grwPa7VbG8wdI8LtN2X0fxvdvuQIDAQAB
o4ICkTCCAo0wHQYDVR0OBBYEFHa4L/9udoLNc176aBxkqR+fv8ElMB8GA1UdIwQY
MBaAFF2jlBwnz+XCNMS/Ih7LKlebLeqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEt
ZjExYTM5ZjI2YzNiLzEvZHJndl8yNTJnczF6WHZwb0hHU3BINS1fd1NVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEtZjExYTM5ZjI2YzNi
LzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGmBggrBgEFBQcBBwEB/wSBljCBkzCBkAQCAAIwgYkDBQAq
DlOHAwUAKg5WQQMFACoOVkMDBQAqDlZFAwUAKg5WRwMFACoOWQAwDgMFACoOWQUD
BQAqDlkGAwUAKg6AhAMFACoOgIcDBQAqDszAAwUAKg7MxAMFACoPb8EDBQAqD2/D
AwUAKg9vxzAOAwUAKg+0wQMFACoPtMIDBQAqD7TGAwUAKg/AhTANBgkqhkiG9w0B
AQsFAAOCAQEAiTOvNnkdPE53Ez0vqbzWzsQ50gD+0LpOfA3lQVAY/2EraYce6fZW
g6ZJ9CmRnO+kb60py7WrL0MtcxceF7B3o+9PTHZJdv9WvXS36jh+OB+BD1VZ3m4k
vY8Mu7bEsQyEmYvHBW4oMaa8i6KMeuSBSpQFOMtchXQK9KHc/56mOXUvKhGt2EsP
Wrs5TyIhWf0Q+z6FLnn3IP+ByEqA0b6QYO+p/pVRZZ77YX1MqbOmXLqP/5GAmwa2
GFShtKc4TRn4VCtsnuwsmZ/bUzvvcQO6qilhKGcO4dIHx+aWWv+1usGcucPsE9lt
f/nro6r/++NK/ZuJu2/2acUsguDN6XGyzw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:37:55 2025 by rpki-client