Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dgmWr_IND7PfkmHsB_ovvPatjOU.roa
File: dgmWr_IND7PfkmHsB_ovvPatjOU.roa (raw, json)
Hash identifier: NzCIlBUNIjZs8iB1DVuho93nO37iFBs8elfrkQ2TNZY=
Subject key identifier: 76:09:96:AF:F2:0D:0F:B3:DF:92:61:EC:07:FA:2F:BC:F6:AD:8C:E5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193214DDA11DB7FC32A731D1EA6CF445F77
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dgmWr_IND7PfkmHsB_ovvPatjOU.roa
Signing time: Tue 12 Nov 2024 16:56:10 +0000
ROA not before: Tue 12 Nov 2024 16:56:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Nov 2024 00:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:21:4d:da:11:db:7f:c3:2a:73:1d:1e:a6:cf:44:5f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 12 16:56:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=760996aff20d0fb3df9261ec07fa2fbcf6ad8ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:ef:22:8b:a0:b2:d5:b6:0f:de:36:e4:e5:
07:c1:af:63:6d:72:ff:0f:ab:57:f8:c3:93:5c:da:
89:e3:d8:c7:5f:66:c5:93:ca:b4:83:5b:58:6d:b9:
48:f2:15:1b:dc:8a:48:7a:ba:2d:ed:cf:84:cb:21:
59:78:3f:9f:2f:22:9c:1f:e2:31:ca:54:30:38:73:
0e:fa:8e:0c:1e:a3:3e:ff:0c:2e:0e:8e:64:d8:b5:
19:1f:c8:0f:41:9a:a0:88:dd:a5:b0:2e:03:f4:a2:
d8:08:01:4a:fe:10:6a:3a:46:e9:be:2a:5e:7c:e5:
25:74:40:8d:9c:d1:ac:5a:23:93:f5:fa:a1:a4:99:
2c:21:4a:90:66:45:1c:67:a3:af:b6:c4:d1:17:91:
bf:8f:f4:63:63:8c:55:56:0d:2b:2e:8d:ec:60:c2:
21:ef:78:96:10:7d:16:ae:07:75:73:30:9b:95:1c:
0a:08:76:b9:b4:14:f7:1f:45:79:30:6a:46:ae:ac:
d7:8a:cf:7c:68:33:ff:d3:9d:80:94:b5:15:e6:03:
c6:22:f3:fe:21:d7:41:72:af:37:6c:b6:72:4a:c6:
39:14:3b:55:fc:0c:a0:7d:89:b5:b8:77:73:e5:0d:
4a:cb:9f:85:ee:25:dd:ed:4e:92:fd:5e:d4:bf:0e:
24:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:09:96:AF:F2:0D:0F:B3:DF:92:61:EC:07:FA:2F:BC:F6:AD:8C:E5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dgmWr_IND7PfkmHsB_ovvPatjOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
71:95:86:6c:06:01:42:c7:ba:36:4f:75:16:be:5f:05:4e:a6:
40:b6:7b:67:ef:2f:39:01:bb:a5:c6:49:bf:85:90:87:bb:e2:
17:46:d4:46:aa:e6:ba:a4:8a:bd:1b:67:34:af:c7:2c:78:ea:
f7:ea:cf:4d:39:0d:85:c6:17:49:ff:34:30:da:84:63:4b:ca:
16:0a:2a:1b:1d:8d:30:21:ed:13:c3:f5:54:6a:cd:ed:50:23:
f1:82:8c:26:17:be:48:6d:56:dd:81:5e:68:1e:2c:36:0d:8e:
71:74:11:96:06:4f:12:a0:d3:8e:a5:a0:c9:21:6a:1a:37:90:
09:57:0d:da:9b:6c:2e:62:be:66:20:30:c5:75:ba:5b:d4:49:
06:1f:54:cd:61:c0:50:5c:9b:48:b7:95:42:3a:fd:2b:26:48:
30:e9:1e:8f:13:f3:b2:80:b9:01:fc:ac:f5:e4:fb:79:74:4f:
bf:9b:2a:56:4f:81:b8:c1:b8:1f:53:91:a0:3b:49:cf:f2:62:
e6:db:a5:0b:c9:c3:ad:04:0b:51:87:80:d6:0e:5f:fb:3c:5b:
e7:03:43:11:64:f0:39:5f:eb:de:a3:5d:7e:63:1a:79:f3:25:
e1:1c:56:94:a7:32:3f:6f:9e:9e:8c:9a:2d:8a:74:23:5e:c2:
9a:0c:be:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 01:36:28 2024 by rpki-client on console-ams.rpki-client.org