Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DLFBwvQytCDb-fhtJMj2BX_cXAk.roa
File: DLFBwvQytCDb-fhtJMj2BX_cXAk.roa (raw, json)
Hash identifier: +1DIGMWabnBHpgzgcQikv/v12fJc4zg34vbipvJVF9I=
Subject key identifier: 0C:B1:41:C2:F4:32:B4:20:DB:F9:F8:6D:24:C8:F6:05:7F:DC:5C:09
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A4F652B4B61B6B9ED310B274C3F22EFAE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DLFBwvQytCDb-fhtJMj2BX_cXAk.roa
Signing time: Fri 01 Sep 2023 06:19:04 +0000
ROA not before: Fri 01 Sep 2023 06:19:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 194.31.204.0/24 maxlen: 24
45.90.88.0/22 maxlen: 24
193.58.120.0/24 maxlen: 24
45.149.241.0/24 maxlen: 24
193.25.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4f:65:2b:4b:61:b6:b9:ed:31:0b:27:4c:3f:22:ef:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 1 06:19:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cb141c2f432b420dbf9f86d24c8f6057fdc5c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:55:ae:a3:e5:d2:dd:ad:f3:04:04:2e:57:85:
6c:6a:aa:f5:10:b9:f4:c5:87:ac:80:bf:79:ee:00:
23:84:fd:7c:a2:5b:eb:42:42:c8:31:b2:08:53:81:
a3:04:3d:bc:0f:4c:40:40:16:75:16:0a:05:73:e2:
84:5f:ed:59:e2:27:17:c9:e7:d3:df:c9:51:61:35:
2a:4e:0f:36:ce:d9:72:b6:92:0a:e8:ca:9d:a4:4d:
ac:8e:1e:39:f3:49:6c:0e:f0:aa:45:9e:31:19:ed:
a7:25:07:ce:e3:d7:d2:1f:b9:b8:1f:4e:f5:8d:bb:
32:02:f4:b1:ab:7a:a6:27:59:81:aa:5c:65:0e:74:
ea:58:74:5c:45:49:45:fd:77:98:6c:4d:19:42:91:
49:58:fe:08:bb:9c:9c:e3:91:1a:48:e6:23:a4:8c:
54:2c:dc:ee:16:61:20:eb:de:0a:5d:49:69:c1:5e:
93:f1:0b:bf:70:c0:df:2e:f7:63:96:1b:d5:3d:47:
ad:26:d3:86:58:df:f9:69:f8:a9:91:8c:85:95:6e:
2d:3f:eb:79:02:7c:1f:56:04:83:6d:77:35:e9:1f:
6d:0c:62:c1:32:e4:a3:c6:55:b1:5d:79:c4:97:3c:
6c:a6:be:83:19:8d:1d:e7:62:01:18:fb:1d:be:c8:
14:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B1:41:C2:F4:32:B4:20:DB:F9:F8:6D:24:C8:F6:05:7F:DC:5C:09
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DLFBwvQytCDb-fhtJMj2BX_cXAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.88.0/22
45.149.241.0/24
193.25.218.0/24
193.58.120.0/24
194.31.204.0/24
Signature Algorithm: sha256WithRSAEncryption
24:15:30:af:ae:4f:9f:10:1a:35:de:b8:79:2a:25:fc:96:42:
45:56:6d:d4:52:e5:22:cb:9d:be:c4:5b:90:df:72:2d:6a:2b:
a6:37:29:2d:16:5d:34:8b:f1:60:3d:f4:38:db:e8:7c:ca:b6:
99:0a:d8:2d:45:fe:6c:64:d4:67:95:d1:de:21:79:a7:c5:ed:
1e:6c:50:d5:a1:ff:cc:39:ee:7a:ce:61:c7:90:67:c7:1a:0d:
4e:d0:97:c5:b0:83:07:a6:a0:b3:23:dc:47:a5:83:2c:c1:e8:
af:31:5b:53:bd:79:31:a9:db:16:d5:48:31:6e:41:07:ad:06:
6e:7c:25:a1:b1:36:fa:6c:bf:af:dd:64:35:7d:a2:23:99:67:
4b:4f:96:da:6f:79:e7:9e:92:1c:35:ee:b2:be:24:9c:56:bf:
d5:7c:97:6b:4e:dc:54:b4:fc:50:f9:df:4c:16:db:7a:73:9e:
52:53:35:0b:67:38:8c:cd:f7:4c:ae:c5:34:bc:78:ae:16:a0:
de:61:0e:d1:f5:12:e5:b2:d2:be:85:57:13:ff:4c:b0:69:d9:
09:fa:43:d3:a4:85:67:2f:8c:7d:2c:8e:0b:c2:0c:37:82:cc:
dc:98:d3:d3:86:5f:ab:02:ed:f5:5f:2f:8b:55:36:db:be:6d:
6b:77:d0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 11:10:20 2023 by rpki-client on console-ams.rpki-client.org