Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DcD_VMZcRi3jbJWSl72sKp6YACg.roa
File: DcD_VMZcRi3jbJWSl72sKp6YACg.roa (raw, json)
Hash identifier: J3uQIJ3lM+K/qxryqXSZCIvUc+yFm1nWwruF6pA0b/A=
Subject key identifier: 0D:C0:FF:54:C6:5C:46:2D:E3:6C:95:92:97:BD:AC:2A:9E:98:00:28
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D821930A9CE3ED94DD99171ABE24EEF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DcD_VMZcRi3jbJWSl72sKp6YACg.roa
Signing time: Sun 01 Jan 2023 13:25:20 +0000
ROA not before: Sun 01 Jan 2023 13:25:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 212.87.204.0/24 maxlen: 24
109.206.242.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
185.218.138.0/24 maxlen: 24
185.225.74.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:82:19:30:a9:ce:3e:d9:4d:d9:91:71:ab:e2:4e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dc0ff54c65c462de36c959297bdac2a9e980028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:69:09:71:be:e9:65:1b:51:a2:73:fb:18:
8e:3f:10:b3:91:2b:71:63:8b:29:49:0c:bb:e8:69:
52:a9:78:84:1e:ac:97:c3:f1:ae:19:26:33:62:8e:
f2:df:0b:05:68:ae:3b:da:3b:79:de:14:54:f7:d6:
14:4c:f0:b1:5a:5e:7b:0c:57:92:f7:ac:ff:c4:1b:
98:d0:5d:42:c7:99:c5:e4:52:6b:15:14:3f:a4:dc:
68:e2:39:49:89:23:c3:fe:de:d1:20:4a:e3:59:e9:
82:78:28:c1:61:79:4e:7b:30:46:a1:f8:7f:83:bc:
e8:b0:58:bb:5b:1b:cd:97:fa:47:98:8d:4f:12:c2:
c6:22:14:66:a0:c1:ab:db:c2:3a:81:53:7f:24:99:
2c:b3:55:11:d2:fe:7b:9d:b6:9f:e3:91:4f:a8:02:
e1:c1:f2:e3:b1:35:19:ad:6a:97:e4:3e:3f:4e:31:
66:dd:7f:cc:c6:05:f1:bb:fb:df:10:95:6f:1f:45:
10:82:1c:cd:5d:f8:10:09:a6:f6:09:ca:a8:e0:ac:
a2:d9:95:ca:cc:b1:67:a5:02:4a:a3:e9:6b:6d:8d:
47:17:b4:fd:57:2b:1c:f7:29:1b:2f:ac:d5:d5:7e:
fb:14:ce:18:92:56:19:e1:d0:ff:b1:3a:b3:65:92:
b2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C0:FF:54:C6:5C:46:2D:E3:6C:95:92:97:BD:AC:2A:9E:98:00:28
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DcD_VMZcRi3jbJWSl72sKp6YACg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.51.0/24
109.206.237.0/24
109.206.242.0/24
185.218.138.0/24
185.225.74.0/24
185.246.222.0/24
212.87.204.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:15:1e:17:78:f0:a9:79:71:8f:18:a4:4f:16:04:cd:26:2a:
22:11:88:b0:11:87:75:6c:82:bc:e2:17:f7:45:da:9f:da:f4:
ec:4d:31:ac:3a:48:f5:6a:58:a6:5e:eb:7a:8f:22:eb:6f:3e:
5c:8c:2a:0e:78:e5:10:2b:8b:6e:93:0a:6a:84:cc:cf:5a:ec:
0b:65:40:b0:a4:c4:ad:d3:6c:2a:3b:dd:53:8e:6c:ed:d0:26:
78:b4:04:9f:26:5a:bc:b1:54:8f:6a:9a:66:1b:80:04:05:88:
27:97:bf:11:1b:5a:dc:ad:4d:c5:0d:1d:0c:0a:dd:95:49:83:
a7:e1:c1:d6:20:47:69:19:bb:e9:43:82:bd:f7:d9:c8:8a:59:
a5:21:48:ff:9e:e3:48:7f:72:7b:86:e7:d7:aa:3d:55:b8:a5:
65:8d:1b:db:7f:c3:3e:a8:98:1a:50:7e:fa:17:d0:56:e5:69:
11:eb:25:36:97:4c:9a:4b:c0:b2:d8:1c:06:1f:d8:45:15:a4:
7c:dc:d3:ff:dc:0f:51:5f:1b:86:9a:25:1e:0e:58:f5:18:8b:
d3:bd:45:dd:44:09:3f:ea:1d:70:ed:55:58:33:04:76:77:2c:
09:d1:61:7f:b8:3e:b8:98:70:5a:82:23:b6:e3:2e:7d:5d:e7:
06:49:77:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org