Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/Dh6c_WAyvXDofpMXuHa3DafFqec.roa
File: Dh6c_WAyvXDofpMXuHa3DafFqec.roa (raw, json)
Hash identifier: xprYRZWJ54Ne2gb/3+nsepMuScXAVH4/p5dhwyA13pU=
Subject key identifier: 0E:1E:9C:FD:60:32:BD:70:E8:7E:93:17:B8:76:B7:0D:A7:C5:A9:E7
Certificate issuer: /CN=12a657f3424c8dd55215af853b93307c366c538a
Certificate serial: 018751AF48932EF3FD87F96DB1D02F12BF7A
Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/Dh6c_WAyvXDofpMXuHa3DafFqec.roa
Signing time: Wed 05 Apr 2023 13:50:54 +0000
ROA not before: Wed 05 Apr 2023 13:50:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211995
IP address blocks: 185.233.35.0/24 maxlen: 24
93.114.130.0/24 maxlen: 24
185.136.207.0/24 maxlen: 24
2a10:d880::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 12 Apr 2023 12:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:af:48:93:2e:f3:fd:87:f9:6d:b1:d0:2f:12:bf:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a
Validity
Not Before: Apr 5 13:50:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e1e9cfd6032bd70e87e9317b876b70da7c5a9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ec:68:3f:a9:db:90:41:d0:ec:70:cc:d2:1d:
9c:6a:11:f2:84:14:cb:26:a8:68:f7:59:27:c7:e9:
ff:ca:f8:c0:55:b3:b8:79:86:e9:ca:47:52:24:63:
97:3a:ea:db:e4:7d:4f:24:9f:57:6d:8d:7a:6b:81:
79:56:a0:7c:c3:3b:2f:f7:50:06:58:80:80:db:01:
81:c9:56:11:38:17:5d:38:a3:40:14:54:31:db:7d:
6f:90:1d:b0:b3:27:a2:1b:cb:4e:c3:cd:ca:8d:15:
52:bc:e3:d2:e9:3f:39:cd:bc:89:3c:ae:4c:d7:6a:
d2:1b:f6:87:3d:a6:e8:bc:9f:a2:30:4e:fd:fb:95:
a2:aa:5a:d5:85:e6:c6:da:34:37:6e:d7:29:0b:1d:
be:69:e9:0b:74:a7:01:43:9d:7a:7b:36:05:36:5e:
ee:02:85:13:c7:42:f7:e0:a0:80:2a:53:eb:5c:e4:
93:22:d9:b4:73:aa:38:94:c8:0f:66:a9:05:eb:d7:
5c:16:30:7f:ea:ac:17:dd:80:5c:6f:35:51:17:63:
3a:81:18:86:40:9c:62:5e:27:4f:ef:af:13:6b:de:
97:48:74:42:8d:0f:29:c7:83:e6:c2:e3:28:21:fa:
ab:88:bc:8f:e8:36:f2:43:20:16:63:1e:36:c3:89:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1E:9C:FD:60:32:BD:70:E8:7E:93:17:B8:76:B7:0D:A7:C5:A9:E7
X509v3 Authority Key Identifier:
keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/Dh6c_WAyvXDofpMXuHa3DafFqec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.130.0/24
185.136.207.0/24
185.233.35.0/24
IPv6:
2a10:d880::/29
Signature Algorithm: sha256WithRSAEncryption
68:66:51:3b:c5:e8:69:41:4f:37:d0:2d:11:00:8b:59:01:9f:
06:5b:de:21:52:84:43:69:bc:80:cc:98:b2:9d:09:39:b8:98:
8f:a2:5a:2c:be:ce:e0:fe:8e:9d:8c:a2:a4:fe:e0:d6:d1:6e:
87:4e:59:b9:ab:96:c3:1e:98:d8:b7:9f:d3:a4:0c:65:11:46:
e0:6d:70:37:38:7e:fc:5c:8a:36:72:9e:2b:ab:c7:f9:a4:f8:
4f:76:d9:0b:bb:e4:87:c7:28:42:81:26:e4:0e:ad:7c:f5:5e:
d2:4e:bd:e1:3b:c2:73:4e:31:dd:14:18:3d:98:62:90:b6:88:
02:dd:3c:a6:94:af:5b:8f:2c:91:01:b5:8f:af:e3:4f:e9:f6:
8f:c2:50:2c:b9:e5:45:96:e4:9e:b1:c1:fa:cc:8a:be:35:3c:
f1:7c:8e:86:19:c4:83:9a:aa:3b:57:6e:97:0e:3e:37:01:11:
66:6d:73:66:6e:f3:fe:25:6e:0d:b8:c9:b5:92:f8:3a:39:de:
45:94:cc:20:6e:3c:c5:8d:38:3d:41:2f:13:1e:23:78:0f:67:
5f:7c:32:10:7d:01:34:7e:b2:01:45:e1:31:f6:22:63:9f:b9:
f3:14:b1:0c:f8:d3:67:7a:3f:61:09:39:22:78:31:bc:23:f5:
e1:dc:12:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:12 2024 by rpki-client on console-ams.rpki-client.org