Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/DAPS69mp-hpYUoQN_P8HM15nYBk.roa
File: DAPS69mp-hpYUoQN_P8HM15nYBk.roa (raw, json)
Hash identifier: oShD54z0iHEQt+ZutsOTDODvVjjFZTcKlR6M/p22oGg=
Subject key identifier: 0C:03:D2:EB:D9:A9:FA:1A:58:52:84:0D:FC:FF:07:33:5E:67:60:19
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 0185718C18455C92B1AB489BEACDE34D0857
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/DAPS69mp-hpYUoQN_P8HM15nYBk.roa
Signing time: Mon 02 Jan 2023 08:14:44 +0000
ROA not before: Mon 02 Jan 2023 08:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 45.140.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Aug 2023 04:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:18:45:5c:92:b1:ab:48:9b:ea:cd:e3:4d:08:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Jan 2 08:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c03d2ebd9a9fa1a5852840dfcff07335e676019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:44:9c:67:37:08:4e:fb:4e:a5:c1:6e:2a:d8:
62:04:31:89:90:fc:ef:e9:a2:fb:d1:aa:dd:82:3d:
fc:c0:6c:0d:5e:1e:2d:22:1b:21:10:4d:21:7d:ff:
f8:27:a7:f0:18:9c:74:91:22:09:5e:e6:2a:d7:0b:
68:c4:87:34:ef:3c:e7:ba:f8:d7:22:d1:10:76:56:
ca:7d:da:31:6a:12:ed:0d:ed:86:30:22:73:f3:e0:
67:56:78:e5:6b:66:8c:58:02:6f:44:6b:11:e0:70:
65:b4:35:60:c2:ea:6d:d2:77:0e:ca:62:63:96:8b:
7d:8c:c0:a3:a3:9f:07:b5:47:93:14:bb:80:70:f7:
c4:60:70:46:32:16:4f:45:47:b4:31:52:df:e8:d9:
87:6f:15:02:1d:c4:a3:ee:17:53:d3:f2:67:75:a9:
ad:79:cd:1a:a7:d5:4d:6b:5a:27:7b:e3:68:ed:f3:
29:b5:de:bb:b8:7d:30:d2:8f:68:a7:ed:ea:74:70:
6b:ad:c4:2e:57:4b:36:7a:c5:3d:8a:8e:73:41:f5:
31:0a:1b:f9:9f:1c:8d:25:0d:15:02:1a:df:b0:99:
d8:32:81:3a:3e:15:ba:3b:66:c0:f7:dc:6d:83:10:
36:6d:7f:06:5b:7e:d4:81:b9:9e:18:ec:88:89:eb:
79:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:03:D2:EB:D9:A9:FA:1A:58:52:84:0D:FC:FF:07:33:5E:67:60:19
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/DAPS69mp-hpYUoQN_P8HM15nYBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.194.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:8c:56:16:a9:cf:6c:29:0b:0c:64:7b:57:08:29:98:b9:66:
36:56:9a:c7:0a:79:7d:9a:d7:e2:53:d3:4c:bf:ce:68:c5:81:
e1:b3:00:67:14:35:26:3a:e5:f7:97:e6:1a:d7:34:c7:88:98:
f7:0b:07:51:d8:9c:81:c5:f2:1e:41:d4:75:dc:91:60:48:3c:
61:8c:9d:59:3c:5a:a0:15:3f:d7:c1:4a:59:10:3c:e1:50:a5:
35:37:48:31:10:d7:5b:dd:8e:eb:d9:a3:ed:17:ba:53:81:55:
a4:d4:64:ec:d9:ad:4d:01:29:42:7b:75:7d:1c:79:9e:aa:61:
31:41:79:c1:66:5b:6e:a7:ad:de:8e:c5:13:bc:01:d1:0d:00:
ec:ca:4f:19:45:17:4a:2c:af:42:64:65:e4:1e:0c:bb:43:de:
28:6b:49:2e:02:4b:e7:67:13:37:08:c8:70:e4:d0:ea:d6:3c:
57:77:e0:a5:59:38:f4:ee:37:81:eb:c5:a6:6f:e2:97:59:cd:
58:88:b3:8f:d1:1a:86:dc:08:bb:f4:1f:30:c3:62:6a:d2:9d:
b7:59:84:a3:2e:db:53:f2:80:b5:05:f3:37:57:e8:9b:18:08:
80:32:02:a0:17:98:52:2e:ce:ca:88:64:fc:05:94:af:40:4a:
d9:a7:4f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:45 2024 by rpki-client on console-ams.rpki-client.org