Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dux-W3HWsfZ2J81C88CudW7rExE.roa
File: dux-W3HWsfZ2J81C88CudW7rExE.roa (raw, json)
Hash identifier: mwKf3D6lXyIekrFgmfF4BAHB/JfxAy8wAbnpW2FHNS4=
Subject key identifier: 76:EC:7E:5B:71:D6:B1:F6:76:27:CD:42:F3:C0:AE:75:6E:EB:13:11
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD0DF7F6AF2A67B87C9D9ABB746754
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dux-W3HWsfZ2J81C88CudW7rExE.roa
Signing time: Tue 02 Jan 2024 06:29:39 +0000
ROA not before: Tue 02 Jan 2024 06:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211975
IP address blocks: 164.40.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Mar 2024 20:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:0d:f7:f6:af:2a:67:b8:7c:9d:9a:bb:74:67:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76ec7e5b71d6b1f67627cd42f3c0ae756eeb1311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4c:e2:91:cd:08:65:d5:9e:fb:31:d3:9f:87:
d0:93:cb:bb:89:ff:7b:7e:fa:d2:49:0d:a2:78:1c:
b7:be:7a:2e:a9:fd:64:81:b8:f9:44:ff:f9:aa:57:
33:23:d2:b2:be:eb:2a:69:64:b2:ab:fc:18:6d:d1:
76:45:dd:5d:f7:3f:7d:40:b7:d3:98:09:3f:4a:03:
67:c9:41:68:5b:bf:04:de:04:7d:be:34:a1:6d:cd:
66:53:37:fb:63:ae:ec:b1:a3:1a:e5:b6:76:d6:43:
f3:02:4a:f8:f3:bf:74:f8:78:19:5c:bf:12:d5:67:
7b:41:a5:63:2e:78:bb:1b:31:91:8a:9b:e3:67:92:
f0:dd:fc:ad:5d:49:41:48:52:52:0f:59:71:54:4d:
91:2a:4c:96:28:cb:26:c2:00:3b:a5:c3:42:d9:45:
96:e6:fe:04:ef:60:0b:64:be:50:c3:e3:71:d2:05:
5b:bd:61:91:c6:9b:4f:a7:e7:93:ec:87:01:29:50:
f5:2b:4a:a7:a9:38:b7:3c:39:60:37:f1:c2:b2:73:
28:41:05:c2:2f:5e:14:ab:6a:14:d6:a8:00:30:63:
29:07:8b:11:38:14:ca:a7:88:af:9c:0e:1f:ef:f2:
b7:f8:52:a5:ba:57:31:54:eb:60:5c:dc:05:75:e6:
60:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EC:7E:5B:71:D6:B1:F6:76:27:CD:42:F3:C0:AE:75:6E:EB:13:11
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dux-W3HWsfZ2J81C88CudW7rExE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.40.185.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:1d:cb:b2:0e:26:ce:96:58:cc:9f:28:2e:81:ce:dc:24:86:
b0:1f:a7:cf:61:e2:26:f0:ec:5e:3d:77:91:4f:5a:14:67:01:
5d:aa:59:0a:6c:0b:e2:c8:11:32:5e:76:92:1c:2c:1d:51:fc:
9b:37:50:cd:6b:1b:ae:a0:4b:bf:7c:a2:a2:52:4c:41:a8:e6:
9c:1c:89:79:4f:e7:e4:91:e7:86:a8:e3:17:e2:a8:e8:47:1d:
cf:0f:6b:af:35:22:a4:5b:ce:f1:a1:f5:4b:b0:3a:af:a0:0f:
94:6f:45:7d:ec:33:e6:1d:24:12:04:a1:0e:b7:6b:17:9a:8c:
e2:ec:dc:89:e3:d0:7a:eb:94:07:1c:af:a3:f0:97:91:aa:30:
e2:5c:73:84:77:59:b9:ce:fe:60:05:e3:dd:36:98:ee:81:32:
9b:0c:79:ca:da:5d:35:44:ac:b5:ab:cd:cc:f7:aa:29:16:ec:
28:fb:38:22:5a:21:63:a4:1e:a4:76:ac:73:71:5a:ca:2a:b3:
11:1d:df:2c:d2:18:d3:1a:2f:78:e9:d7:1f:e9:95:33:86:64:
9d:de:1a:43:3c:55:dc:6e:ce:c1:0f:e3:49:81:86:f0:fe:82:
13:30:b1:90:17:d6:31:f3:05:18:13:d4:b8:35:b3:5a:47:ac:
d4:09:12:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 16 21:25:33 2024 by rpki-client on console-ams.rpki-client.org