Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/dkkCap57k-sHcJ2ZzEtG57L5xtE.roa
File: dkkCap57k-sHcJ2ZzEtG57L5xtE.roa (raw, json)
Hash identifier: Uvg1Q8z7bA7XjWCwF7hc2dUb9yWXoHIESA5pQPn6iVc=
Subject key identifier: 76:49:02:6A:9E:7B:93:EB:07:70:9D:99:CC:4B:46:E7:B2:F9:C6:D1
Certificate issuer: /CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Certificate serial: 01885C382BA717A26172F9F6B35417EE56AB
Authority key identifier: D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/dkkCap57k-sHcJ2ZzEtG57L5xtE.roa
Signing time: Sat 27 May 2023 07:59:25 +0000
ROA not before: Sat 27 May 2023 07:59:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 176.117.84.0/22 maxlen: 22
176.117.64.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5c:38:2b:a7:17:a2:61:72:f9:f6:b3:54:17:ee:56:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Validity
Not Before: May 27 07:59:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7649026a9e7b93eb07709d99cc4b46e7b2f9c6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:70:e5:a3:2d:22:b3:c3:05:41:fd:b5:c5:be:
25:b0:30:9d:7f:d8:ff:0d:eb:a0:46:a1:8f:99:36:
56:55:45:af:3c:2a:b0:ac:f8:7b:97:95:fc:2a:f6:
41:29:54:c6:f8:4f:99:42:cc:ab:da:47:dd:af:1a:
ac:8d:d5:ce:c3:29:e3:5d:44:2b:95:28:ce:21:27:
52:9f:f4:59:03:8d:8a:18:c6:e0:8e:e5:0a:4f:da:
a0:cd:ba:2a:ae:73:ed:91:1e:07:f7:8e:fd:95:b8:
8d:98:d6:d2:eb:f5:73:d5:3a:c5:02:6d:6d:58:10:
dd:59:6a:13:65:e4:79:18:e6:4d:77:b5:1e:be:7c:
43:34:c6:11:8d:b8:ec:e7:66:f7:a3:d0:27:9b:1f:
e4:1a:65:e5:52:35:d6:fc:4a:33:62:2a:b4:b9:d0:
dc:35:1f:f8:94:9f:33:14:57:fa:21:43:04:eb:9f:
aa:a4:13:dd:46:d3:7d:b1:12:99:00:fd:c8:24:b3:
26:d8:87:4c:75:6f:23:7e:56:a0:b4:a2:29:78:ad:
aa:5e:ff:b1:de:9c:eb:73:64:ba:6d:0a:b3:9a:d6:
85:c7:8f:26:35:37:b0:44:dd:a0:5f:3a:ec:ce:26:
cb:cc:7a:39:9b:46:00:0d:08:57:e0:ba:d9:f3:56:
ff:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:49:02:6A:9E:7B:93:EB:07:70:9D:99:CC:4B:46:E7:B2:F9:C6:D1
X509v3 Authority Key Identifier:
keyid:D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/dkkCap57k-sHcJ2ZzEtG57L5xtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.64.0/22
176.117.84.0/22
Signature Algorithm: sha256WithRSAEncryption
19:f1:ea:26:69:5e:42:6e:fa:66:70:81:68:6e:b3:16:11:61:
52:6b:e8:21:7d:87:c1:ac:0a:49:0f:d1:ee:25:b1:1d:90:b3:
76:49:d2:29:fe:af:cc:63:e4:95:38:72:89:c0:b8:0b:94:67:
91:15:f0:0d:1d:f1:7c:bf:57:c1:26:79:d5:3e:be:f9:f0:58:
a7:b2:a6:e1:27:46:04:35:a7:d8:7e:ad:38:ef:db:0f:49:f2:
bd:60:0a:70:30:c3:ab:a8:af:c5:e6:ba:8d:0d:22:1b:ca:d0:
eb:93:25:96:8a:e6:e4:7f:21:09:39:6d:c2:fc:ac:c6:b8:77:
61:93:f8:dc:11:b7:36:7c:1e:a6:fe:ff:e2:65:8e:0f:31:ef:
f7:29:68:f3:e4:8c:24:45:e2:b6:82:1d:72:d9:86:3e:bc:c3:
f1:5f:59:fd:59:b4:60:e7:cc:5a:03:57:e6:7e:28:e6:ad:c3:
dc:19:b9:b2:a5:2e:32:88:b5:9c:e3:3b:7d:22:be:24:48:df:
d0:18:f5:01:a0:d6:03:58:64:7b:a9:42:0b:fa:a3:61:5f:c0:
71:03:01:34:a7:f4:91:2d:f1:29:7a:21:91:44:c1:4e:49:f1:
dd:87:e4:32:ac:cf:28:c7:a9:1b:32:9d:16:d9:cf:1d:54:f1:
19:f0:66:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 16:42:32 2023 by rpki-client on console-ams.rpki-client.org