Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Dd3mCkKl5-QYgk37Wmr1jQqpe_U.roa
File: Dd3mCkKl5-QYgk37Wmr1jQqpe_U.roa (raw, json)
Hash identifier: vZgMThNAiKv49yABeuRvr793etgw38ZV0bEDQfQNnWw=
Subject key identifier: 0D:DD:E6:0A:42:A5:E7:E4:18:82:4D:FB:5A:6A:F5:8D:0A:A9:7B:F5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C3A531E9A1254B73849F6BE16E4465D3B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Dd3mCkKl5-QYgk37Wmr1jQqpe_U.roa
Signing time: Tue 05 Dec 2023 14:12:54 +0000
ROA not before: Tue 05 Dec 2023 14:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215987
IP address blocks: 178.215.226.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3a:53:1e:9a:12:54:b7:38:49:f6:be:16:e4:46:5d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 5 14:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ddde60a42a5e7e418824dfb5a6af58d0aa97bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ce:23:49:1f:da:8d:20:fa:67:83:92:44:43:
b5:b0:c8:28:cd:07:7a:4b:7f:e4:c4:a6:77:4a:58:
64:b0:fb:21:df:20:a7:87:0d:bb:3f:61:85:4c:7d:
1e:cb:98:36:ac:74:1c:c6:8e:1b:4a:ee:9c:f2:a1:
9b:11:6b:64:58:2a:d5:be:74:fb:3c:f0:b9:77:6c:
47:ff:56:39:af:e6:61:cf:c3:30:5c:0a:23:65:43:
4f:7f:fd:c7:d0:7e:0b:95:9d:e7:2d:93:2d:0a:9d:
25:59:cd:d3:21:b4:80:20:17:35:d8:5c:60:3e:40:
53:a4:d5:33:57:bf:2c:1d:45:13:39:38:be:98:5f:
e9:4d:3d:0c:67:1e:0f:c4:8e:c0:1d:4d:e5:56:77:
7f:f8:a0:fa:95:d8:8f:0b:f4:ed:01:67:97:08:97:
b0:c6:c7:8d:c1:e8:e4:03:d1:64:57:3e:e9:b0:dd:
91:19:73:fb:15:f5:5b:10:93:4f:fb:8a:d6:c6:f5:
1b:31:f1:28:86:98:36:3c:59:80:7b:f9:7d:63:ef:
f2:04:20:05:ee:24:bc:d0:e9:e0:8d:cd:e6:db:e5:
11:fa:89:83:55:9d:bd:ea:e0:22:a2:51:32:55:0a:
1d:7d:4f:8a:07:3e:28:19:5f:eb:94:98:d5:a5:e0:
d3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DD:E6:0A:42:A5:E7:E4:18:82:4D:FB:5A:6A:F5:8D:0A:A9:7B:F5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Dd3mCkKl5-QYgk37Wmr1jQqpe_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.7.0/24
178.215.226.0/24
Signature Algorithm: sha256WithRSAEncryption
66:2c:2c:4f:d8:50:c3:41:32:26:e3:67:a5:ae:a1:7d:2c:73:
bb:4a:fc:ba:14:61:08:a3:94:0b:89:2e:c4:87:92:05:97:72:
f1:33:da:c9:9a:2d:64:8c:6d:59:7e:1d:f7:fd:4f:4d:b1:3b:
13:70:9d:0c:30:f9:c0:d3:61:f7:7d:64:fc:89:ae:c0:9f:e9:
63:81:52:51:15:d2:ac:6c:97:78:d3:4e:dd:3c:cb:bc:40:a4:
4b:b6:9b:7a:d5:c8:22:5c:c1:99:73:db:b6:6d:59:16:50:87:
ee:3c:2f:18:54:7e:45:1e:eb:ba:c9:bf:a6:f9:8a:23:86:a7:
e4:5a:9a:2b:df:65:c8:9b:73:2d:9a:09:94:76:30:a5:f9:d4:
46:e9:67:f8:42:1b:84:7e:ad:bd:02:d9:c5:8e:5e:74:d5:05:
09:26:63:84:b4:3c:5d:0f:47:47:4b:c7:0f:df:08:64:69:93:
4c:3b:f4:ed:d4:ac:00:93:98:54:ea:6b:c8:8a:1e:ae:08:0e:
e1:a2:cb:75:0e:18:75:76:04:70:d7:f0:8d:61:0f:ff:41:0a:
50:69:31:ce:83:91:ac:f6:2a:93:8a:5f:1d:c9:e8:b7:4b:ae:
4a:d3:bb:18:1c:f2:9b:a8:2c:fa:a8:fa:fc:10:9e:6b:1c:64:
19:47:5a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:10 2024 by rpki-client on console-ams.rpki-client.org