Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/DtnQLMAV3QL-6zfMQh9dHqoIXmM.roa
File: DtnQLMAV3QL-6zfMQh9dHqoIXmM.roa (raw, json)
Hash identifier: XdzOZOpOmRgsNVIirh1eygK8Y4VeIrhbv22U0YJTOwo=
Subject key identifier: 0E:D9:D0:2C:C0:15:DD:02:FE:EB:37:CC:42:1F:5D:1E:AA:08:5E:63
Certificate issuer: /CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Certificate serial: 0189911D44A47516D42122531A2084950071
Authority key identifier: 2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/DtnQLMAV3QL-6zfMQh9dHqoIXmM.roa
Signing time: Wed 26 Jul 2023 07:32:41 +0000
ROA not before: Wed 26 Jul 2023 07:32:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 195.234.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Aug 2023 05:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:91:1d:44:a4:75:16:d4:21:22:53:1a:20:84:95:00:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Validity
Not Before: Jul 26 07:32:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ed9d02cc015dd02feeb37cc421f5d1eaa085e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a0:2f:46:23:7b:ae:f5:bf:7f:59:9c:71:8d:
29:e1:7a:7f:a7:b6:d4:04:b0:ef:c6:f6:1f:bc:eb:
d1:ee:8e:4b:f9:cf:16:7f:69:d0:38:20:49:6b:95:
5a:c4:dc:6a:48:a3:38:da:10:9e:18:f4:29:7b:f1:
8e:61:f7:53:10:2a:af:0e:d6:a7:0d:30:0e:f0:87:
05:a9:dc:c0:f5:fa:91:c4:9b:25:ea:c2:ce:21:55:
3d:0f:c7:b6:f7:cf:73:6f:70:f3:c7:6c:f8:9e:57:
34:49:d9:67:b1:c3:f3:fe:68:5e:f5:1d:d7:95:b7:
97:76:83:7f:66:a2:be:3d:4a:75:81:e9:05:17:0c:
4f:b5:0a:c8:b2:9f:7e:51:9d:84:e6:2d:0a:a8:44:
e3:57:5c:b1:54:6a:20:e0:12:f3:25:07:0a:db:b0:
fd:9e:05:a9:a4:a6:3e:18:a0:59:b3:d3:c1:a7:6e:
76:4f:ce:9e:d1:23:a8:7a:15:81:8d:54:2a:4e:ad:
94:40:3e:c8:d8:43:40:f8:f3:09:d1:ea:88:83:1e:
4f:5c:42:5b:9c:81:50:aa:43:ef:63:26:c0:16:55:
56:17:17:4b:29:c7:13:71:ba:c4:dc:9b:bb:e7:75:
07:89:1c:03:0a:75:fe:e5:64:3e:0c:3e:25:fd:74:
5a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D9:D0:2C:C0:15:DD:02:FE:EB:37:CC:42:1F:5D:1E:AA:08:5E:63
X509v3 Authority Key Identifier:
keyid:2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/DtnQLMAV3QL-6zfMQh9dHqoIXmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.153.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:d3:73:49:14:ad:1c:3b:1b:94:d3:0b:72:03:3d:98:22:da:
f5:e6:ef:97:d0:91:f5:36:0e:2b:40:02:37:90:b9:7b:b9:4c:
6b:01:77:86:33:e5:4e:86:57:1d:de:cf:e3:b7:b4:8d:b9:10:
a7:93:f0:0f:a2:57:7a:aa:8c:f2:83:c6:39:0c:9f:24:5f:d9:
0e:89:66:b7:3d:d0:81:3d:9e:48:ad:d5:21:85:f8:07:aa:50:
86:57:b8:e0:76:3b:b0:68:46:6c:5a:92:c2:46:13:78:2d:56:
3e:ea:05:f1:80:ec:7f:6b:84:ef:4a:20:e4:f8:2f:dd:a8:83:
a6:b2:cc:35:81:b6:ee:03:16:a9:06:e9:fe:45:ff:29:7a:9c:
72:a3:42:8b:90:45:33:a8:ca:c6:d0:d8:ce:41:5f:1a:9d:6d:
9d:51:aa:67:e5:0d:8f:78:1d:65:55:14:b6:1a:aa:1d:93:17:
59:d4:45:d8:9b:00:1e:4a:c2:dc:45:8a:1e:6c:d7:36:02:d6:
0d:06:92:bc:db:02:6f:93:01:8e:7d:83:02:33:3d:1d:98:92:
85:07:86:d8:b0:ea:d2:23:31:cc:fc:30:62:8b:43:f8:a9:c1:
23:51:ee:db:4e:75:22:1f:cb:f2:d2:e2:4a:81:fd:12:d5:9d:
c4:53:85:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:18 2024 by rpki-client on console-ams.rpki-client.org