Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/dcnsRZioM62-B-4dWrnqcpThcCI.roa
File: dcnsRZioM62-B-4dWrnqcpThcCI.roa (raw, json)
Hash identifier: GeeWYqg2OkCfkKOg8t9JDJ3FFV4ZcUqQ0rJUNobyotU=
Subject key identifier: 75:C9:EC:45:98:A8:33:AD:BE:07:EE:1D:5A:B9:EA:72:94:E1:70:22
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018CC50041016F3CC72B17859EB995A3C8D6
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/dcnsRZioM62-B-4dWrnqcpThcCI.roa
Signing time: Mon 01 Jan 2024 12:29:37 +0000
ROA not before: Mon 01 Jan 2024 12:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210512
IP address blocks: 45.143.166.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 05 Jun 2024 05:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:41:01:6f:3c:c7:2b:17:85:9e:b9:95:a3:c8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 1 12:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75c9ec4598a833adbe07ee1d5ab9ea7294e17022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:8f:8b:d7:78:2d:5f:1f:76:31:26:1f:45:
b5:b9:81:fa:fa:48:77:16:e9:72:ec:83:0d:7e:09:
fd:37:63:66:91:ea:7e:e0:41:a8:70:11:5d:c2:74:
d9:2e:1a:ac:6b:98:e4:9e:79:be:e5:53:29:a3:a1:
0b:c6:56:08:a0:b9:41:d4:c1:ca:f9:19:93:a5:b5:
aa:3b:72:bb:66:6b:71:c7:dd:2c:6b:f9:9a:ed:fc:
31:a6:32:dc:56:92:3a:2a:1d:ec:23:20:8a:f1:3f:
f1:b4:bd:e3:b0:d1:3a:78:02:76:81:8b:10:0b:ff:
86:d5:eb:ba:73:2c:69:fb:cc:34:f2:33:9c:9b:81:
12:3d:c2:c8:4a:d3:27:31:14:41:85:81:b7:48:71:
f5:5e:23:ce:81:b0:6a:33:a6:0a:2f:7e:e3:6d:76:
97:bd:ae:12:d0:1d:77:ff:7a:13:e6:11:8e:8a:ac:
78:cd:ef:c7:56:a8:d6:db:b4:cc:ec:40:b2:7f:72:
1b:eb:0a:34:4c:3c:17:8a:3c:85:68:ea:0f:35:f0:
48:2d:e1:f4:68:89:9f:ba:20:1c:41:e1:9d:af:5a:
b3:ae:22:54:bd:b8:10:f8:66:38:b9:ed:ff:4a:a8:
4f:9b:9b:4d:ac:70:af:2f:23:b0:e4:87:8a:7f:81:
70:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C9:EC:45:98:A8:33:AD:BE:07:EE:1D:5A:B9:EA:72:94:E1:70:22
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/dcnsRZioM62-B-4dWrnqcpThcCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.166.0/23
Signature Algorithm: sha256WithRSAEncryption
28:9f:6d:31:86:a5:bd:af:0f:da:c0:e2:77:f5:8e:fe:8c:09:
53:0d:82:dd:30:69:d7:95:be:d9:18:5a:f9:44:6f:5e:44:94:
87:1d:39:ad:62:5b:91:04:7a:0f:aa:ab:fe:1f:bd:47:73:89:
55:01:f5:dc:af:23:7e:62:5a:05:0c:00:88:6d:aa:e1:de:41:
e4:f7:db:bb:90:e3:06:76:50:42:3b:f4:71:7b:88:58:cd:ee:
7c:f3:cc:d1:dc:7b:38:42:97:d8:29:f1:89:89:bb:3c:e8:c4:
00:c3:07:9f:e1:58:e6:6d:08:89:55:39:3f:f6:ee:6e:48:41:
00:4f:68:8b:d2:3d:9f:cc:9f:8d:81:b5:93:35:24:2d:12:8f:
cb:29:3a:23:cb:64:06:dc:6c:90:33:bc:ee:a7:d7:e4:78:0f:
52:be:d6:09:c2:19:9b:37:ef:d5:d8:3b:44:a4:bb:ce:8d:f6:
99:a6:a3:28:95:85:7d:0e:d2:de:f0:89:01:53:12:49:8c:c9:
94:98:5a:50:c9:a8:5f:07:d2:53:e5:54:f4:c2:98:7b:24:55:
b6:23:e6:7f:fa:83:f1:77:44:f6:76:0b:4b:85:8f:bf:fb:6f:
48:2b:8b:38:3b:73:22:6d:44:14:9e:de:3f:ef:e9:41:6a:36:
c8:ca:3d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org