Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/DLzxKcQzy2LUHD58QCS8UxvAXt0.roa
File: DLzxKcQzy2LUHD58QCS8UxvAXt0.roa (raw, json)
Hash identifier: eqQSdQVpNKRMQJAiZsRw2OFykUtokjNuv6Dteo6bEZ0=
Subject key identifier: 0C:BC:F1:29:C4:33:CB:62:D4:1C:3E:7C:40:24:BC:53:1B:C0:5E:DD
Certificate issuer: /CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
Certificate serial: 0189641B88FD0C63C40D5A2A6125A0EFB294
Authority key identifier: E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/DLzxKcQzy2LUHD58QCS8UxvAXt0.roa
Signing time: Mon 17 Jul 2023 13:47:53 +0000
ROA not before: Mon 17 Jul 2023 13:47:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201330
IP address blocks: 185.78.96.0/22 maxlen: 22
2a03:58a0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:1b:88:fd:0c:63:c4:0d:5a:2a:61:25:a0:ef:b2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
Validity
Not Before: Jul 17 13:47:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cbcf129c433cb62d41c3e7c4024bc531bc05edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:cb:1a:e5:7d:c9:9e:e0:db:94:e3:09:e1:
8e:65:bd:37:af:c6:5f:7e:f6:8f:54:6e:9b:4a:8d:
92:0e:a2:9c:c3:97:31:8b:b2:c1:92:8b:a1:14:4f:
98:fb:6e:6b:83:00:40:40:eb:c8:2c:64:c4:f2:d8:
9c:30:88:38:c0:c1:d8:7c:35:5e:d2:b9:ae:6a:e5:
9c:11:72:be:7e:95:1d:85:bc:25:7c:4e:59:1a:29:
38:9d:0c:02:90:e0:d0:25:91:0a:84:04:c6:97:8d:
c7:26:42:f0:cb:52:9c:9a:be:67:95:eb:64:8e:fb:
74:29:93:44:a2:7e:14:a3:bf:53:df:c4:3a:3b:e2:
0e:cb:54:8b:fa:d6:8a:bb:dc:85:45:20:55:3f:4c:
ae:0c:68:00:7b:ae:f7:13:3f:23:d3:58:1f:44:2b:
ec:02:c9:70:fe:c4:26:c5:1e:46:70:08:fa:7a:07:
6c:df:5c:46:a5:06:e6:de:7d:95:37:0b:2c:20:d5:
6b:fc:63:f9:4a:3c:99:36:fd:e5:a3:0c:68:fb:00:
f6:16:3f:f6:61:5e:07:56:40:79:fa:9c:42:4a:c3:
87:f1:f8:03:33:6b:eb:51:c7:7c:a5:53:a8:1d:8b:
d4:da:b9:a6:7a:70:a1:cf:b1:82:77:cd:06:e0:fb:
53:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BC:F1:29:C4:33:CB:62:D4:1C:3E:7C:40:24:BC:53:1B:C0:5E:DD
X509v3 Authority Key Identifier:
keyid:E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/DLzxKcQzy2LUHD58QCS8UxvAXt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.96.0/22
IPv6:
2a03:58a0::/32
Signature Algorithm: sha256WithRSAEncryption
6c:ed:88:e2:88:b5:91:1e:13:fe:f7:00:48:2d:60:fd:3f:ea:
08:d1:fe:bb:c3:50:0e:67:11:f1:33:67:86:7f:5e:31:56:eb:
92:3d:0e:17:b4:30:ef:e4:56:d9:e0:5c:e1:b7:b5:95:86:98:
95:ee:e9:8e:77:70:ab:59:a0:fe:ca:22:03:0d:41:eb:a9:8c:
7c:14:6e:46:5f:65:d3:e0:8e:5a:ff:18:60:90:f5:2c:8a:c9:
8b:a0:8b:7f:52:8a:1d:65:97:1c:82:5e:12:60:b4:41:c2:0a:
8e:0b:f8:38:a8:74:97:24:ca:88:11:4e:a1:78:5d:b0:74:ad:
11:4e:bd:6a:94:50:8e:3b:15:e0:bf:9e:89:8c:d0:da:3a:4a:
38:e8:7d:a8:41:ef:43:84:c4:bf:38:3e:19:c1:db:38:1b:a6:
eb:e7:58:81:0e:4b:2e:14:54:4e:db:9d:fe:66:45:55:08:da:
5e:3d:be:50:10:8e:1d:1f:38:7d:27:ad:3b:ac:88:8f:96:ad:
ec:5e:49:cc:b9:b0:0a:08:4d:ed:74:b3:54:48:20:5d:c3:ce:
9a:a2:d4:db:52:88:ad:df:02:35:6d:bc:37:52:1f:cb:05:c4:
3a:17:5f:6e:ec:e8:0d:d8:38:6b:e4:c6:a5:da:52:22:4c:7e:
34:fa:6a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:49 2024 by rpki-client on console-fra.rpki-client.org