Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dhyC7z0ElOtTMSulWPWeaWcDwFk.roa
File: dhyC7z0ElOtTMSulWPWeaWcDwFk.roa (raw, json)
Hash identifier: xLAMnjwthlfth+AQOnnBVotbMKPBkGL63c9kliNXSSQ=
Subject key identifier: 76:1C:82:EF:3D:04:94:EB:53:31:2B:A5:58:F5:9E:69:67:03:C0:59
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01939B4C516653B679D814759CE358BE496C
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dhyC7z0ElOtTMSulWPWeaWcDwFk.roa
Signing time: Fri 06 Dec 2024 09:28:10 +0000
ROA not before: Fri 06 Dec 2024 09:28:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212477
IP address blocks: 45.123.41.0/24 maxlen: 24
45.123.42.0/23 maxlen: 24
45.141.200.0/23 maxlen: 24
45.141.202.0/24 maxlen: 24
45.141.203.0/24 maxlen: 24
89.47.89.0/24 maxlen: 24
91.190.100.0/24 maxlen: 24
92.114.107.0/24 maxlen: 24
103.212.82.0/24 maxlen: 24
185.9.55.0/24 maxlen: 24
185.35.136.0/23 maxlen: 24
185.35.138.0/24 maxlen: 24
185.35.139.0/24 maxlen: 24
188.212.133.0/24 maxlen: 24
188.241.214.0/24 maxlen: 24
2a0b:64c0::/32 maxlen: 48
2a10:6c02::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:4c:51:66:53:b6:79:d8:14:75:9c:e3:58:be:49:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Dec 6 09:28:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=761c82ef3d0494eb53312ba558f59e696703c059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1c:78:06:75:3f:bc:1b:f8:c4:47:44:9e:51:
92:8d:0c:0d:86:43:07:57:aa:5a:03:68:7a:a2:55:
48:14:92:c6:e4:53:dd:ef:9a:59:77:96:a3:84:e3:
e4:3c:c5:41:ae:40:0b:67:d4:fd:36:4f:20:53:95:
b8:ae:45:2a:15:3a:88:b6:f5:5d:40:d9:62:2b:77:
df:17:0d:5a:9f:6e:be:76:ab:b1:31:ce:51:4f:fb:
90:61:79:f6:a2:92:09:53:4a:03:80:a8:a3:72:5a:
d1:bf:33:eb:e4:b4:d5:5b:e1:ec:8f:bc:8b:0e:79:
5b:3a:5b:73:ed:3c:82:a6:27:83:ca:75:90:e9:44:
82:17:c3:cd:da:63:fc:c5:4c:65:e2:a9:db:b1:14:
55:ff:1a:16:7c:c4:f6:76:04:07:c4:61:98:9f:aa:
ba:72:e5:ba:38:17:d6:0b:08:8c:7d:3a:94:90:f5:
3e:b7:e0:f9:19:c7:22:d5:27:19:c4:38:5d:7b:cd:
88:53:0e:41:6f:96:20:23:03:0b:f0:79:60:30:08:
2d:04:5d:72:86:8c:28:27:79:36:25:5b:4c:2f:e8:
9b:e0:bd:82:13:0e:27:52:c6:b8:05:b2:c0:f8:cb:
62:bb:4c:6d:1e:7c:67:40:3e:01:fd:2d:9a:7d:5d:
e5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1C:82:EF:3D:04:94:EB:53:31:2B:A5:58:F5:9E:69:67:03:C0:59
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dhyC7z0ElOtTMSulWPWeaWcDwFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.123.41.0-45.123.43.255
45.141.200.0/22
89.47.89.0/24
91.190.100.0/24
92.114.107.0/24
103.212.82.0/24
185.9.55.0/24
185.35.136.0/22
188.212.133.0/24
188.241.214.0/24
IPv6:
2a0b:64c0::/32
2a10:6c02::/32
Signature Algorithm: sha256WithRSAEncryption
7f:7a:02:88:9b:60:56:ec:fd:04:34:0b:9f:7e:fd:a8:cd:49:
2c:60:90:82:a1:1f:97:4f:0b:c6:02:c6:41:f5:34:26:71:33:
2e:29:33:cb:5b:d3:f6:0a:68:78:eb:c9:88:46:7f:c6:39:b7:
bb:3c:b6:1b:34:d5:24:62:ba:53:5f:84:d0:5e:23:43:06:28:
c8:1c:73:a8:29:a9:c2:a3:ff:5d:2b:d9:25:7d:a9:99:05:53:
a7:b4:0c:d6:0d:16:9d:da:b0:fa:9e:5f:65:23:9d:5f:5f:12:
fe:8c:bd:c1:b3:d8:2d:56:55:27:c9:64:a3:d1:d4:df:1a:c4:
2e:54:3a:c5:d1:c3:7e:74:5b:8c:3b:fe:d4:50:bd:44:58:88:
d3:b4:ce:39:93:ec:39:dd:17:74:67:45:4c:cd:a6:b1:8b:01:
8c:30:10:b2:3c:7d:11:2d:a9:ef:56:f3:f8:83:71:79:2a:0e:
01:82:e0:69:cb:70:ad:0f:8d:ce:7d:43:5f:f3:7d:e8:a4:2d:
d8:4e:f5:68:77:07:ff:e5:8b:59:f8:52:d0:be:b1:79:11:09:
a6:30:ed:e7:05:6e:1a:36:35:e7:84:7e:0b:d0:88:e7:3e:92:
64:6d:c3:32:68:08:24:04:1b:65:25:d4:ed:2a:c0:53:36:8b:
f8:22:96:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:24:32 2025 by rpki-client