Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DpWl9pjKBFkwr0feAFkB_D5vCY0.roa
File: DpWl9pjKBFkwr0feAFkB_D5vCY0.roa (raw, json)
Hash identifier: DLVo33DCL9PizdTsyn6ntAAjst6vTKGBfxAq2KURxX8=
Subject key identifier: 0E:95:A5:F6:98:CA:04:59:30:AF:47:DE:00:59:01:FC:3E:6F:09:8D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E5A136A4956999620362FDA559A2A68DF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DpWl9pjKBFkwr0feAFkB_D5vCY0.roa
Signing time: Wed 20 Mar 2024 04:16:45 +0000
ROA not before: Wed 20 Mar 2024 04:16:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.94.0/24 maxlen: 24
87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 23
93.123.75.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 02:18:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5a:13:6a:49:56:99:96:20:36:2f:da:55:9a:2a:68:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 20 04:16:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e95a5f698ca045930af47de005901fc3e6f098d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:31:35:79:78:5d:04:47:99:dc:ef:70:b2:5c:
d4:fe:ad:76:cc:a6:0e:46:b3:f6:80:91:b0:cc:c2:
e6:39:09:de:83:37:ca:51:32:86:3f:ac:f7:18:dd:
15:6d:a8:e4:8f:ea:c8:cf:8a:bd:bb:84:e9:f3:bd:
0d:ad:1d:91:8f:3a:4f:80:7c:c2:2c:fa:be:42:18:
42:81:3a:cb:30:ba:2a:44:1b:20:6e:b9:d6:33:6a:
f3:aa:86:6d:19:e0:b8:b0:b0:02:22:49:49:e7:0b:
2e:3d:4a:15:7f:6a:41:9d:d1:3c:61:a7:ab:bd:fb:
56:1d:0b:22:37:7e:20:0e:98:e2:62:34:3d:1b:ca:
6e:f7:51:38:d8:d6:34:b3:82:c2:26:5b:7a:eb:d1:
d6:e2:b1:32:55:67:f5:4b:15:48:10:ed:d9:44:b5:
0e:03:c1:0b:98:dd:9d:44:89:68:82:6e:5a:9c:59:
9b:25:43:e7:ab:82:96:7a:b3:f5:9b:79:1c:58:b9:
df:22:19:5f:79:75:10:ba:07:a7:4f:0e:5b:7e:d6:
aa:7f:e3:07:dd:a5:0a:55:bb:bf:ec:36:cf:44:8b:
9b:55:2d:35:ca:98:f9:ba:6e:23:02:11:90:bd:65:
31:e0:b4:70:63:fb:ab:35:dd:c8:04:2d:6d:2e:b1:
d7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:95:A5:F6:98:CA:04:59:30:AF:47:DE:00:59:01:FC:3E:6F:09:8D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DpWl9pjKBFkwr0feAFkB_D5vCY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.94.0/24
87.120.68.0/23
93.123.74.0/23
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
67:70:73:7f:51:d0:01:9a:3c:60:7a:99:32:8c:e2:8f:20:aa:
c1:61:e2:29:0a:b8:46:72:00:b4:b9:e2:9a:07:9a:09:30:87:
e0:c2:3f:e4:bd:00:b8:98:1d:a5:89:e9:6e:7d:ec:0b:7d:79:
07:48:06:ba:63:29:76:d5:f4:20:5f:a7:1d:b8:ce:c2:3d:64:
8f:64:77:6f:ff:5a:ad:b3:18:68:9f:8f:66:10:6a:92:af:44:
5d:13:bd:81:dd:d4:06:ff:cf:a8:c5:45:f4:25:32:1f:f1:5f:
b8:e1:0f:4c:48:86:92:f1:1a:e4:d2:e9:6f:a8:72:92:74:dc:
84:d5:4e:3c:3c:dc:57:84:24:33:f0:0a:68:59:90:3a:70:8e:
a6:d9:1e:3a:69:cc:9d:11:36:27:5c:fc:30:91:43:80:6b:4d:
6e:10:c9:f6:48:ab:04:f0:dd:07:e7:c6:ae:3d:c0:13:2f:fc:
95:e3:3d:c4:1f:c3:30:86:b2:27:21:dc:c4:8e:31:83:a4:c5:
ff:f9:9b:ea:95:93:e1:56:cd:63:89:3f:36:16:1e:7f:15:57:
86:03:3e:3c:a1:aa:e0:b9:d0:57:40:2c:fd:3e:b5:e8:d8:a5:
fc:0f:68:b3:92:40:ae:07:1e:8e:08:7d:11:9c:fb:75:c7:4c:
51:b5:b1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 03:55:16 2024 by rpki-client on console-ams.rpki-client.org