Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/DMKG0Mfe2FKEBn0FSXGI40x9EGg.roa
File: DMKG0Mfe2FKEBn0FSXGI40x9EGg.roa (raw, json)
Hash identifier: noNHIsapTqBtMHFCLSg5gK4mn3W0e2cbETo74PRAf2I=
Subject key identifier: 0C:C2:86:D0:C7:DE:D8:52:84:06:7D:05:49:71:88:E3:4C:7D:10:68
Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial: 018572B438BCB076562C0ECFEC13F74AE3E0
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/DMKG0Mfe2FKEBn0FSXGI40x9EGg.roa
Signing time: Mon 02 Jan 2023 13:38:11 +0000
ROA not before: Mon 02 Jan 2023 13:38:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12886
IP address blocks: 193.96.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:38:bc:b0:76:56:2c:0e:cf:ec:13:f7:4a:e3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
Validity
Not Before: Jan 2 13:38:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cc286d0c7ded85284067d05497188e34c7d1068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:22:28:92:c8:6f:fc:e1:79:6a:8f:48:e6:d1:
2e:d0:0c:06:e1:f2:7a:76:01:55:45:55:63:06:f9:
36:db:04:3c:7c:62:fb:5d:07:e6:f7:67:0f:25:ef:
a1:05:b4:85:3c:d9:69:99:4a:f1:a6:88:ea:36:62:
8a:2a:9e:a6:94:f4:8e:36:56:18:c2:3a:7c:b2:0d:
8b:75:b5:aa:c2:d1:87:a5:51:af:e3:15:97:78:93:
f0:36:a5:75:f7:37:4f:35:c9:6f:5c:44:e0:b1:51:
12:f4:34:7b:72:9c:40:6e:28:12:a4:19:8a:b2:c1:
92:52:29:b9:79:df:2c:7c:4a:0e:9e:30:11:20:0c:
af:19:cc:8d:6a:5c:ac:9d:fb:a9:46:8b:89:0e:a4:
58:cb:5d:62:b1:af:3f:ea:c5:e1:1b:46:71:2d:da:
fd:50:4f:9b:05:c2:10:ad:3a:df:52:0b:5e:e9:85:
27:b3:95:6b:27:aa:4e:44:c3:64:3c:c1:57:83:58:
11:8a:20:b0:7b:d5:8a:a5:cf:73:6e:05:69:7b:b8:
79:aa:11:5b:99:ef:71:52:db:73:c4:1f:e0:cd:0b:
d3:fd:b9:14:60:0f:55:05:8f:71:6a:10:12:2f:ac:
12:52:1d:91:74:59:e2:84:21:92:2a:54:fa:56:1c:
50:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C2:86:D0:C7:DE:D8:52:84:06:7D:05:49:71:88:E3:4C:7D:10:68
X509v3 Authority Key Identifier:
keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/DMKG0Mfe2FKEBn0FSXGI40x9EGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.96.173.0/24
Signature Algorithm: sha256WithRSAEncryption
12:51:31:96:7c:ee:86:76:0e:7d:85:8c:f6:b3:25:f3:4a:95:
f7:82:f0:48:92:6c:2e:b1:39:58:c1:5d:96:6c:33:14:22:19:
e0:95:1c:02:44:22:7d:86:b6:e8:88:c1:95:1d:e8:cc:b4:5a:
88:34:48:16:67:cd:8d:84:23:c8:43:80:4d:fa:ee:cd:03:34:
55:84:21:16:11:35:da:f9:c9:f9:44:e3:f2:0b:c9:bc:9b:8b:
ed:e5:ea:61:c0:ab:a8:da:cf:29:36:79:e8:c6:18:7f:08:69:
1c:81:67:cd:c6:68:c9:c2:be:1a:fa:77:03:cd:a5:28:0e:35:
74:ec:68:6f:5d:b8:d3:02:36:b6:d1:db:fb:d5:56:a4:b3:54:
5f:49:b4:1a:cb:b8:86:df:72:90:0e:2a:f1:94:85:86:39:69:
92:f3:6e:20:0d:1b:d6:5a:d9:2e:8a:40:1f:bb:e6:bc:9a:93:
b6:74:67:0b:01:20:9f:4f:88:84:5f:2b:16:07:75:a6:87:12:
fc:41:1f:91:1b:a9:f8:45:7a:90:0d:1c:bd:82:9d:a7:54:b2:
77:1b:88:34:c6:59:d8:87:4e:f1:d9:02:9e:87:4c:0a:cd:34:
2b:08:52:9c:b4:fa:04:12:4e:c0:cd:b6:48:6f:67:89:60:a8:
79:47:e5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:16 2024 by rpki-client on console-ams.rpki-client.org