Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/DeZycJNO0yjAWWTVQniMwD9ZPvw.roa
File: DeZycJNO0yjAWWTVQniMwD9ZPvw.roa (raw, json)
Hash identifier: tZ72WtqZI9d11EvqW0o9MnO0gN4+nwKpE0qQo5M3MH8=
Subject key identifier: 0D:E6:72:70:93:4E:D3:28:C0:59:64:D5:42:78:8C:C0:3F:59:3E:FC
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 018583D0901C13F9190B80B36654438A113E
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/DeZycJNO0yjAWWTVQniMwD9ZPvw.roa
Signing time: Thu 05 Jan 2023 21:22:41 +0000
ROA not before: Thu 05 Jan 2023 21:22:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212322
IP address blocks: 45.143.98.0/24 maxlen: 24
185.148.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Feb 2023 12:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:83:d0:90:1c:13:f9:19:0b:80:b3:66:54:43:8a:11:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jan 5 21:22:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0de67270934ed328c05964d542788cc03f593efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b6:1c:3d:81:40:8e:3e:b8:19:b1:6b:fc:85:
f7:4c:b9:de:68:36:ca:77:dd:68:d7:12:64:13:3b:
8b:97:70:a5:86:a9:d2:43:81:82:e8:fd:6a:f1:3b:
a6:a4:61:e1:28:ef:a9:ee:da:7f:08:95:a5:8f:60:
73:48:8e:70:b0:9a:90:a6:9d:a6:c4:4f:9c:24:c1:
0a:bd:6a:b3:a4:22:ea:d5:72:c5:ef:65:bc:ba:50:
08:55:ec:e0:c4:cd:65:aa:3a:17:87:64:af:78:c0:
9d:8c:45:a5:48:b7:dd:09:ee:c1:48:05:bb:16:b3:
c1:ae:06:bd:a3:1b:ac:15:48:a2:2c:bd:a0:ba:06:
da:11:7a:c2:3e:b2:8c:97:72:15:c7:38:d7:78:48:
05:eb:61:71:2d:55:a0:bf:c2:7a:d5:79:a3:60:55:
53:32:c1:cf:a8:a5:e5:23:9c:ba:78:1d:45:de:83:
32:eb:be:c8:47:f9:0b:66:2d:1b:60:54:99:c6:e3:
ce:48:f1:40:77:b3:a6:71:58:04:ba:18:39:f8:8c:
c5:51:ee:22:ec:c7:34:af:73:9b:08:bd:6f:07:20:
98:72:c5:e7:bc:85:9b:a4:a1:67:70:c3:04:0b:d0:
43:e6:59:3b:1c:e6:14:e8:dc:db:4d:b7:4f:2c:38:
42:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E6:72:70:93:4E:D3:28:C0:59:64:D5:42:78:8C:C0:3F:59:3E:FC
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/DeZycJNO0yjAWWTVQniMwD9ZPvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.98.0/24
185.148.240.0/24
Signature Algorithm: sha256WithRSAEncryption
84:1b:ae:77:09:dd:09:e7:bf:64:df:97:79:47:7d:c0:1c:95:
ca:79:52:e7:d8:a3:9e:95:7c:03:a9:b8:a2:de:64:53:42:9c:
00:86:87:ef:34:c3:21:08:a4:91:00:c1:9f:d3:11:14:16:ec:
ad:d6:cc:76:4f:67:25:21:8c:d4:32:0e:49:bf:a7:54:24:23:
94:56:a7:a5:df:fd:a2:4a:7a:9c:fc:40:c9:42:7f:50:ba:fe:
23:65:27:98:e8:2c:0a:0c:bd:d0:d7:21:49:6a:17:0a:4f:53:
4b:3c:d2:fb:60:c3:ca:73:6f:47:28:23:70:ef:f7:68:da:2f:
72:94:7a:ac:03:16:cd:3c:f7:34:63:87:fd:42:b3:68:cc:48:
ba:97:3c:45:a0:31:6e:26:49:ed:43:7f:33:c8:7a:69:36:dc:
26:79:4a:bc:ce:a5:26:b7:e4:c3:4a:00:c3:db:67:1b:c4:a4:
1a:6b:81:ff:b8:1f:05:bb:56:90:38:8e:cb:ed:8b:1b:85:2a:
ee:31:e4:cb:9e:9d:53:fd:5e:b4:b8:3f:62:1b:5f:33:f4:87:
ff:92:7c:32:5a:e4:20:4d:15:46:7e:d7:71:68:ed:65:c0:91:
2a:4b:56:bb:7b:53:c7:d8:36:91:2f:83:82:8b:25:2f:77:0f:
33:65:0e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:49 2024 by rpki-client on console-fra.rpki-client.org