Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/dw-cPkH7dgbVTUJQ7QqWgLtAhXI.roa
File: dw-cPkH7dgbVTUJQ7QqWgLtAhXI.roa (raw, json)
Hash identifier: K1DQA3gqgJHsnh/XY+/W8jMguSi952vLSV+KiBXaXfs=
Subject key identifier: 77:0F:9C:3E:41:FB:76:06:D5:4D:42:50:ED:0A:96:80:BB:40:85:72
Certificate issuer: /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial: 018ABD659EE9B4200E2EF7B1769639419437
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/dw-cPkH7dgbVTUJQ7QqWgLtAhXI.roa
Signing time: Fri 22 Sep 2023 14:57:48 +0000
ROA not before: Fri 22 Sep 2023 14:57:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 85.119.0.0/21 maxlen: 21
178.250.56.0/21 maxlen: 21
185.172.92.0/22 maxlen: 22
2a03:bd81::/32 maxlen: 32
2a03:bd82::/32 maxlen: 32
2a03:bd80::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bd:65:9e:e9:b4:20:0e:2e:f7:b1:76:96:39:41:94:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Validity
Not Before: Sep 22 14:57:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=770f9c3e41fb7606d54d4250ed0a9680bb408572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:af:b2:a0:9b:d0:a9:be:87:d1:ac:25:45:14:
23:9f:00:6d:8e:da:fb:c0:d5:27:cd:85:36:a7:29:
38:7a:ef:45:96:0f:54:e3:7d:c7:65:d1:cd:da:e4:
f3:8a:ae:1d:41:49:b5:b4:7f:fa:86:d3:e1:cb:59:
51:4a:f8:40:d0:1a:ca:f5:bd:20:f8:b1:5a:68:4b:
3b:08:4a:0b:06:01:1c:60:6b:5d:55:d3:10:cd:d3:
df:62:e1:bb:04:ae:28:95:5a:f6:17:17:95:5e:71:
fc:bf:62:00:68:06:19:84:ac:a4:51:a1:70:2f:45:
40:23:05:c6:41:9d:fc:76:73:99:2c:97:35:c3:ca:
18:74:4d:0c:3a:27:79:bb:25:26:77:72:20:06:4a:
6e:27:2f:01:6c:12:a5:d2:81:67:a0:d1:32:c5:87:
f6:76:2b:90:8b:9f:5b:3f:bb:fc:93:58:03:7a:3d:
cf:d5:18:c2:82:02:ef:92:7f:b9:10:63:12:81:f8:
52:b0:cb:e2:ac:b5:96:34:fa:d1:7a:9b:de:63:c2:
a9:e9:89:80:42:ce:4c:a4:d8:52:70:94:4e:ea:7c:
8d:17:db:df:5c:8a:51:cd:88:76:9a:c9:68:81:2b:
8a:0d:07:ee:4b:ad:8f:1e:37:2a:27:41:7b:ce:c3:
14:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0F:9C:3E:41:FB:76:06:D5:4D:42:50:ED:0A:96:80:BB:40:85:72
X509v3 Authority Key Identifier:
keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/dw-cPkH7dgbVTUJQ7QqWgLtAhXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.0.0/21
178.250.56.0/21
185.172.92.0/22
IPv6:
2a03:bd80::-2a03:bd82:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
67:b4:a2:97:32:bc:a0:db:a3:9f:36:24:57:54:ee:f6:7a:7c:
7d:eb:f1:cd:8d:d8:6d:7a:8a:75:e0:91:b2:e0:91:9e:1f:88:
b6:19:90:fd:6a:d0:7b:18:08:68:b9:b1:a3:64:cf:31:48:5f:
71:5e:bc:bd:e3:67:a9:d8:3d:3b:b1:78:c9:6b:9f:de:11:1e:
f2:9c:29:88:66:25:52:11:4d:f8:e3:54:ef:22:df:6c:8e:df:
a6:1d:53:f5:92:f2:13:64:3c:c9:c4:09:ba:89:77:0a:ad:2d:
38:85:db:ea:0f:29:be:eb:a8:9f:5e:e7:8e:fc:85:49:35:b4:
11:d9:37:6f:a4:4d:88:ea:bb:63:88:5b:81:07:ad:4e:7b:69:
51:6a:e9:90:a5:6d:09:89:ac:ad:0b:7e:aa:61:e5:67:67:20:
b6:b7:10:9c:cb:aa:24:e3:d4:9f:4b:d4:5c:3d:48:5e:35:61:
d1:14:c4:1e:5d:0a:53:13:93:89:90:d2:0b:f5:a1:68:e4:d4:
8a:5d:91:68:75:a0:34:2c:22:1f:1f:20:5d:ec:8f:f2:e3:23:
0e:e4:79:bd:ad:65:7e:4d:8e:29:45:ec:8a:34:96:c4:69:a2:
4e:02:a4:17:cb:3c:13:69:42:58:47:3b:53:23:22:ad:fb:3f:
57:59:84:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:09 2024 by rpki-client on console-fra.rpki-client.org