Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/DSQkuZ4dMDWs0WrfT1Q6T4Qqc-Y.roa
File: DSQkuZ4dMDWs0WrfT1Q6T4Qqc-Y.roa (raw, json)
Hash identifier: hmJw0NhyHJN06pqsgxDQWm8PFD4UK7c4hHnozJtnn64=
Subject key identifier: 0D:24:24:B9:9E:1D:30:35:AC:D1:6A:DF:4F:54:3A:4F:84:2A:73:E6
Certificate issuer: /CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Certificate serial: 018572D5B2A043D7D006607F824AE495B92F
Authority key identifier: 0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/DSQkuZ4dMDWs0WrfT1Q6T4Qqc-Y.roa
Signing time: Mon 02 Jan 2023 14:14:45 +0000
ROA not before: Mon 02 Jan 2023 14:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36492
IP address blocks: 185.150.148.0/22 maxlen: 22
185.150.149.0/24 maxlen: 24
185.150.150.0/23 maxlen: 23
185.150.150.0/24 maxlen: 24
185.150.148.0/24 maxlen: 24
185.150.148.0/23 maxlen: 23
185.150.151.0/24 maxlen: 24
2a03:ace0::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:b2:a0:43:d7:d0:06:60:7f:82:4a:e4:95:b9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Validity
Not Before: Jan 2 14:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d2424b99e1d3035acd16adf4f543a4f842a73e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:56:b6:1a:99:b6:c8:ed:f8:34:4e:e8:90:
29:8e:a1:49:60:6e:e2:f6:34:00:38:58:7f:2d:7a:
b8:67:ab:1b:d8:33:95:21:49:74:21:37:69:7a:2b:
41:ed:1f:16:db:6f:f8:13:64:b5:80:0d:ea:b2:d1:
ff:f9:52:13:fb:88:0c:18:29:5b:8d:6c:bb:de:0b:
f0:53:07:6b:64:3f:3c:ee:d3:7c:7e:1c:7e:9d:18:
7d:65:99:4b:3e:92:8a:5a:99:7c:49:f2:cc:e0:c9:
ae:9f:04:af:68:d1:e2:ad:bf:ff:0d:f8:26:d5:96:
6b:ba:07:65:95:c6:c3:90:75:a5:e3:dd:c4:f9:ef:
30:48:ff:48:ad:a2:c2:f7:44:f8:9d:e3:62:cf:18:
40:07:9d:30:c6:b7:09:33:31:e1:60:7c:6d:fc:0d:
73:6f:3e:8b:6d:89:ae:ed:0a:5a:09:ef:48:1c:ea:
72:8e:8d:81:3e:0e:58:38:74:43:7f:58:09:cf:fe:
7f:90:57:6f:22:0e:d4:2d:98:64:03:92:d7:35:dc:
09:cb:14:61:40:87:fe:58:76:b6:47:40:e5:4c:f3:
9b:91:d6:44:8e:02:75:c4:39:f9:7a:83:3a:28:a7:
e4:02:7e:83:06:72:80:b4:62:72:35:2d:ff:26:38:
f6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:24:24:B9:9E:1D:30:35:AC:D1:6A:DF:4F:54:3A:4F:84:2A:73:E6
X509v3 Authority Key Identifier:
keyid:0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/DSQkuZ4dMDWs0WrfT1Q6T4Qqc-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.148.0/22
IPv6:
2a03:ace0::/32
Signature Algorithm: sha256WithRSAEncryption
00:12:b8:0a:35:e9:11:b0:0b:d7:a5:9f:cc:2d:7b:ef:74:ef:
40:ff:ba:62:ee:59:e0:50:7e:c2:aa:5f:4b:30:cc:55:ad:1f:
bb:f5:d3:8e:e7:98:ad:b9:49:e7:e8:51:c7:8d:70:98:c7:55:
ac:6f:9e:ab:7c:39:cd:c5:30:fa:ea:61:02:e3:c1:b5:05:74:
05:3e:00:1c:d6:cb:57:b2:fc:5b:bf:45:d2:ed:7f:ce:8a:b3:
8d:9c:0b:d3:4d:09:11:47:b6:45:f8:9e:55:91:c1:27:a7:23:
c6:a8:a9:ec:31:20:b6:65:1a:c3:72:d6:1d:57:2c:7f:71:83:
b1:cd:a0:6b:69:0a:0e:73:f1:e7:79:d0:98:09:2a:e7:11:db:
57:8e:6d:9d:38:87:c0:eb:0e:5c:47:96:68:8d:54:6b:e2:d3:
c6:af:a4:4c:4b:6e:bf:35:a4:ba:a6:e4:dc:0d:17:d9:3e:c2:
ae:7a:38:35:5e:44:ec:fa:38:a4:3c:cb:70:d3:7d:83:bc:5b:
cf:4d:34:6d:64:a8:ab:51:90:c1:00:29:c3:57:ed:30:90:66:
f5:58:70:67:d9:09:ea:14:30:04:67:c3:15:20:ed:d0:36:cc:
a7:b5:3e:2e:9d:be:4d:86:5e:6a:49:10:b8:c1:62:80:cc:91:
0d:47:ec:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:19 2024 by rpki-client on console-ams.rpki-client.org