Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/DOCORYRpakHw9uUX7-2WK2OPJLo.roa
File: DOCORYRpakHw9uUX7-2WK2OPJLo.roa (raw, json)
Hash identifier: dc5dfrMNd7TjtxTPgWWErP1G1Zs/NbDbYijOMw4kfz4=
Subject key identifier: 0C:E0:8E:45:84:69:6A:41:F0:F6:E5:17:EF:ED:96:2B:63:8F:24:BA
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018BB600A4927D3EB3DEBB06DD3499F63221
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/DOCORYRpakHw9uUX7-2WK2OPJLo.roa
Signing time: Thu 09 Nov 2023 21:32:57 +0000
ROA not before: Thu 09 Nov 2023 21:32:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213360
IP address blocks: 193.38.251.0/24 maxlen: 24
45.86.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b6:00:a4:92:7d:3e:b3:de:bb:06:dd:34:99:f6:32:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Nov 9 21:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ce08e4584696a41f0f6e517efed962b638f24ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:76:b9:f4:27:eb:9e:3b:0a:93:31:ce:f9:97:
6f:55:8b:cb:64:8b:20:7a:14:0e:6a:ce:8d:64:c4:
83:2a:60:92:8c:8a:5b:b4:09:71:42:83:de:7a:ff:
f9:19:8d:57:c5:ec:b7:d5:96:06:09:44:fd:2e:9f:
68:c1:43:a7:a9:97:27:ca:b1:d5:ba:81:f6:86:7e:
7e:7b:5d:14:0f:5a:fe:5e:3b:b4:8d:94:d0:a6:ad:
48:38:63:b6:ab:c9:ea:b0:69:4c:54:44:c8:4b:56:
74:a4:a9:34:44:95:d1:1e:0d:6b:46:9d:39:bd:36:
04:e4:95:62:52:83:ae:20:55:b7:6c:d4:6b:55:ef:
97:2a:1e:91:b3:d6:af:b3:15:be:28:f6:51:92:30:
d1:d2:c6:4b:06:b5:e2:39:14:1f:5a:72:2e:5e:d7:
3f:5e:32:16:ab:6a:7a:51:a2:db:84:75:b5:b4:cf:
44:65:01:33:0f:0b:38:e3:88:60:cf:6e:47:06:79:
38:a2:63:03:1b:5e:a0:c8:91:db:35:88:b1:c4:3f:
4e:c5:53:2e:b9:9d:43:f7:8d:14:35:1c:3c:3b:7e:
99:59:0c:5e:4c:b3:f2:42:62:9d:41:6e:5b:d8:e8:
6b:11:fb:14:73:b5:af:75:b5:c8:ee:da:25:95:23:
4a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E0:8E:45:84:69:6A:41:F0:F6:E5:17:EF:ED:96:2B:63:8F:24:BA
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/DOCORYRpakHw9uUX7-2WK2OPJLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.157.0/24
193.38.251.0/24
Signature Algorithm: sha256WithRSAEncryption
82:80:10:c7:e9:78:8a:a9:e5:a5:44:27:3f:3c:b9:01:ea:ed:
6d:a1:8c:fd:7e:12:4b:06:ea:9f:6f:62:8f:48:29:18:30:d8:
a4:b8:71:8c:c9:d5:66:c4:8d:c9:2d:f6:69:66:49:e1:83:83:
1d:78:38:54:df:82:42:1e:05:5a:e3:86:01:ca:92:c6:79:99:
e2:33:40:c2:a3:a5:de:bf:43:d6:45:b2:da:02:15:51:15:e6:
42:cc:c0:ca:fd:a3:77:8c:ef:9e:68:4c:42:65:76:88:94:57:
55:ba:af:7f:e7:42:46:4c:29:3a:7a:68:19:2f:7b:76:ce:85:
3c:4b:e8:96:e0:ca:6f:f9:6f:7b:f3:42:4f:f9:6b:ad:03:9e:
50:c8:d8:4d:15:a5:9a:0b:2b:58:f8:d5:02:71:c7:f4:07:42:
68:f1:1b:0c:e5:96:ff:d6:cb:5b:ac:6e:dc:5e:05:9f:16:37:
d2:17:27:12:ba:a1:b2:92:81:66:36:4b:2e:76:fe:59:f6:cb:
11:85:f5:2a:5e:48:b4:65:09:d1:bd:b6:57:b8:80:28:04:4e:
0d:4d:37:1c:0c:cb:b1:82:aa:c2:13:dc:78:09:df:95:cc:93:
1d:b3:00:2b:15:a1:ea:82:ea:83:18:c1:73:6b:20:c7:ed:d3:
7c:4b:c5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:23 2024 by rpki-client on console-fra.rpki-client.org