Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/DGM9Mf1-xW-k7hpJDgsBpyoFJWs.roa
File: DGM9Mf1-xW-k7hpJDgsBpyoFJWs.roa (raw, json)
Hash identifier: I1RoZUbWGa8/EZ1Xz9P5KKMA0g7txJEb0PnNZqmSRsg=
Subject key identifier: 0C:63:3D:31:FD:7E:C5:6F:A4:EE:1A:49:0E:0B:01:A7:2A:05:25:6B
Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial: 01856D81CC2F1595CBF97C669D4181A2E256
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/DGM9Mf1-xW-k7hpJDgsBpyoFJWs.roa
Signing time: Sun 01 Jan 2023 13:25:01 +0000
ROA not before: Sun 01 Jan 2023 13:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51815
IP address blocks: 185.152.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:cc:2f:15:95:cb:f9:7c:66:9d:41:81:a2:e2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
Validity
Not Before: Jan 1 13:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c633d31fd7ec56fa4ee1a490e0b01a72a05256b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:30:18:5d:04:80:bb:e2:8e:4e:2a:b6:fd:2d:
d0:d6:c9:d1:43:2f:c5:db:ff:98:99:9a:04:cc:d7:
c7:b4:85:6d:1d:97:be:c2:fd:85:db:dc:4e:2b:1f:
7d:20:f6:94:33:6f:b0:fe:7e:0d:1d:77:7a:69:f8:
ad:3e:db:64:78:36:7c:90:1f:43:c7:ff:43:41:ea:
32:4a:bd:99:d8:ba:b0:ff:fc:2e:2b:68:4a:75:a9:
e7:d0:53:fa:a8:69:95:13:9c:b8:09:6d:03:f0:e7:
dd:4f:83:13:8e:e4:64:a6:6c:10:18:9e:d0:d9:fd:
c5:4e:0b:f5:3f:d8:55:b1:c7:48:49:dc:35:2d:cb:
bd:a1:b0:ff:bd:f8:7e:56:eb:9d:b3:23:3b:90:46:
87:65:88:16:ba:ab:0b:79:e0:c0:30:1e:3b:0e:eb:
dc:0d:01:16:be:07:3c:3e:fa:9d:73:2b:be:b5:7d:
6d:df:e4:4b:ab:45:a6:8b:af:ef:8a:46:44:e8:a8:
bb:b8:f3:90:46:20:5d:37:77:a7:29:de:03:0e:e4:
12:5e:fa:10:66:ee:6c:53:1d:7a:77:8c:1a:7a:ca:
bb:03:5f:77:ec:b9:ea:5e:82:e3:c1:80:6a:4f:7d:
7e:31:ff:86:cb:44:99:61:c2:25:45:d0:6b:18:7e:
38:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:63:3D:31:FD:7E:C5:6F:A4:EE:1A:49:0E:0B:01:A7:2A:05:25:6B
X509v3 Authority Key Identifier:
keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/DGM9Mf1-xW-k7hpJDgsBpyoFJWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.213.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:b3:12:7d:26:2d:c0:c7:2d:93:29:bf:1e:37:d6:51:73:ee:
7b:f1:e0:96:3e:8b:18:27:0f:fd:00:f9:2a:a1:fc:66:d1:2f:
43:16:f9:68:b2:ec:3d:92:b4:b4:96:30:ab:8b:af:7f:03:05:
b6:7a:2f:22:a5:34:7a:62:c9:7c:c3:fb:16:e0:7d:c2:de:13:
81:4e:2f:54:28:23:01:b3:a6:5e:7c:69:02:da:56:68:ec:3e:
d2:fa:b0:62:3a:89:e9:cf:57:d8:61:f8:1e:91:0b:39:9c:cf:
7b:02:2b:ce:76:5e:eb:e6:85:aa:4b:11:7d:e4:8a:2b:91:18:
ef:89:8b:e8:83:27:c4:e3:40:ec:d8:ff:f4:76:c5:23:aa:d2:
03:08:10:d3:ca:d1:69:6e:75:f8:df:91:53:89:b2:9c:be:5a:
af:af:d8:24:8a:3d:ff:92:f8:f7:2d:9e:ea:3e:c1:bd:0b:f8:
7e:db:01:03:1c:76:73:7f:33:0a:57:8c:40:88:50:97:5f:a0:
1e:85:39:a9:00:65:6c:11:00:9b:cb:e0:31:87:ff:60:e6:53:
f3:c8:95:40:99:65:c4:81:2e:df:c6:52:7e:be:07:d3:ef:29:
2a:08:c0:bb:14:aa:76:41:bc:99:00:77:4a:45:8f:0b:fb:43:
2d:c6:9e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:48 2024 by rpki-client on console-ams.rpki-client.org