Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/DIX39_qqqxcixbtaKf7ePG8iFIc.roa
File: DIX39_qqqxcixbtaKf7ePG8iFIc.roa (raw, json)
Hash identifier: eGT0Q5cSFiXq8uWb57JO8z/Tfk1h5Jf2Mcvc3HulOsU=
Subject key identifier: 0C:85:F7:F7:FA:AA:AB:17:22:C5:BB:5A:29:FE:DE:3C:6F:22:14:87
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 01856DAF4E5E17527B90C5C8D224A207CE6A
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/DIX39_qqqxcixbtaKf7ePG8iFIc.roa
Signing time: Sun 01 Jan 2023 14:14:43 +0000
ROA not before: Sun 01 Jan 2023 14:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207484
IP address blocks: 94.231.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:4e:5e:17:52:7b:90:c5:c8:d2:24:a2:07:ce:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: Jan 1 14:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c85f7f7faaaab1722c5bb5a29fede3c6f221487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e3:b9:5f:c0:33:17:64:7b:01:96:80:34:93:
68:56:61:d5:9f:11:19:23:d3:34:08:ba:eb:10:1f:
51:be:fb:c1:9b:41:0c:06:d9:e6:d5:8b:c5:85:71:
03:17:ed:73:5e:7d:8b:32:fd:bd:19:7f:96:83:75:
8c:76:73:2d:e0:dd:ea:f8:01:43:d2:60:a9:50:74:
17:f6:a1:fd:02:d3:88:de:df:b6:34:cd:fa:fa:d2:
a9:ca:ec:bf:aa:e7:96:57:1b:8a:09:9b:81:4d:9e:
e5:78:a5:0c:37:e6:30:48:28:6c:c7:b6:c1:04:9c:
a8:a6:2e:2a:df:49:f6:01:32:46:d9:68:b1:b3:ba:
ec:24:bf:ab:a2:f4:70:07:5a:90:09:6a:23:62:64:
89:5b:47:ec:61:7c:5f:54:57:38:e4:f3:7d:43:de:
81:31:1b:28:7c:1e:d0:0b:f0:20:5b:c0:79:6a:05:
74:ff:a9:a1:6d:05:53:90:92:30:3f:84:b1:a6:bb:
f3:4c:db:d9:65:a2:7b:2f:87:a0:6d:42:a3:8b:d4:
cf:f6:39:7d:63:4c:51:ab:58:c5:f8:ea:05:b9:6c:
06:3b:66:ff:20:86:ef:ee:54:7b:05:0c:b9:fa:38:
42:49:aa:44:3f:6d:99:0c:a7:6d:a7:a6:57:bd:96:
d6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:85:F7:F7:FA:AA:AB:17:22:C5:BB:5A:29:FE:DE:3C:6F:22:14:87
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/DIX39_qqqxcixbtaKf7ePG8iFIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.199.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:c8:c1:d8:73:01:7f:60:54:94:95:3b:fd:89:b7:b4:b2:c1:
31:f0:bd:91:ed:4d:45:66:7b:9d:36:09:b5:11:c3:8a:52:cf:
67:9f:ff:24:bb:18:aa:e2:84:6f:da:01:56:39:6e:92:86:c8:
3c:a7:62:67:f2:0b:01:bd:c8:c7:f6:1b:2c:6a:6e:50:dc:1d:
7a:41:c0:a9:ab:a2:73:fa:ea:39:ca:9c:33:06:95:fb:08:da:
dd:e5:c7:6b:98:41:a2:a8:58:01:ad:ca:50:4f:59:10:5b:32:
04:2d:92:76:5f:4d:c1:7f:cd:35:bd:13:01:df:a2:a8:34:09:
d6:d2:f4:6a:25:06:f9:72:f7:e8:26:c0:68:b6:2c:79:8c:6f:
a7:2b:ac:6e:8c:7e:9b:c7:79:d6:cc:c5:2d:42:c2:ab:8d:5e:
f3:0d:09:7c:16:1e:e7:92:8d:93:53:41:60:a3:0f:4b:2b:bd:
7d:71:6e:e3:64:6c:1a:66:db:db:f3:7a:18:f4:c4:72:97:d1:
74:bd:8f:be:2b:bd:cd:58:15:e0:e4:3d:29:a9:47:71:23:1a:
49:b9:8c:e8:c1:ce:d5:09:4e:ff:4d:86:af:5c:9f:5f:92:c8:
67:26:bd:38:b3:6d:0d:ba:c8:84:0d:79:7c:21:cd:cd:d8:52:
33:a5:46:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:32 2024 by rpki-client on console-ams.rpki-client.org