Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/dODtp3N-vu1o7nludBh9f2TuHAY.roa
File: dODtp3N-vu1o7nludBh9f2TuHAY.roa (raw, json)
Hash identifier: O3EbFAXTjzBj+AgxA92zoTWHGumFG+1uoHXSYSS116M=
Subject key identifier: 74:E0:ED:A7:73:7E:BE:ED:68:EE:79:6E:74:18:7D:7F:64:EE:1C:06
Certificate issuer: /CN=098643201a2aa24a0b877a3adfca7a892047dbfc
Certificate serial: 0185714C1DE31F8390768EEEA939F4F93758
Authority key identifier: 09:86:43:20:1A:2A:A2:4A:0B:87:7A:3A:DF:CA:7A:89:20:47:DB:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/dODtp3N-vu1o7nludBh9f2TuHAY.roa
Signing time: Mon 02 Jan 2023 07:04:51 +0000
ROA not before: Mon 02 Jan 2023 07:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58243
IP address blocks: 185.84.120.0/22 maxlen: 22
193.163.169.0/24 maxlen: 24
45.14.96.0/22 maxlen: 22
2a03:70e0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:1d:e3:1f:83:90:76:8e:ee:a9:39:f4:f9:37:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098643201a2aa24a0b877a3adfca7a892047dbfc
Validity
Not Before: Jan 2 07:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74e0eda7737ebeed68ee796e74187d7f64ee1c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:60:59:fe:9c:bd:84:39:b4:5d:71:f1:b4:c7:
fc:40:df:70:ec:6c:23:2c:f0:a2:66:bb:16:51:57:
df:c1:e5:3b:2c:be:56:05:a8:79:11:b0:30:08:bc:
1b:25:5a:79:d8:70:57:bb:c6:c4:15:48:74:8d:20:
37:9c:a9:db:ec:a5:3b:50:16:c6:32:85:b1:24:a8:
5c:29:8d:52:08:de:db:26:f5:71:6d:80:f4:b3:71:
51:97:30:21:78:12:75:5b:55:f3:b7:fc:62:06:7a:
4c:a0:14:b3:3c:13:e5:47:6b:da:8a:58:4e:6a:70:
ff:cb:b5:94:bc:7b:34:99:b4:3d:32:eb:85:3d:4f:
46:ba:99:a4:4c:e9:30:d4:94:71:71:17:94:2d:e3:
01:1e:86:75:78:f7:93:5a:f1:5f:ea:11:cd:01:63:
56:1b:ef:69:b3:f9:79:ac:e1:fa:83:e5:66:82:c7:
d4:05:95:36:d8:34:43:97:79:7b:bc:9b:49:da:2a:
bc:f3:1a:df:46:3a:9f:3f:f7:a8:12:30:2f:db:b9:
4b:29:94:21:ec:2a:85:c9:19:5c:fa:c9:a0:a8:ae:
90:14:1b:21:30:1e:27:8c:56:c1:cc:e9:42:9b:83:
ad:df:e8:a9:9c:fc:68:74:c3:16:7c:41:fd:dc:20:
95:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E0:ED:A7:73:7E:BE:ED:68:EE:79:6E:74:18:7D:7F:64:EE:1C:06
X509v3 Authority Key Identifier:
keyid:09:86:43:20:1A:2A:A2:4A:0B:87:7A:3A:DF:CA:7A:89:20:47:DB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/dODtp3N-vu1o7nludBh9f2TuHAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.96.0/22
185.84.120.0/22
193.163.169.0/24
IPv6:
2a03:70e0::/32
Signature Algorithm: sha256WithRSAEncryption
4c:d6:6d:64:f4:07:df:2d:1e:c8:c5:8d:35:d2:ed:3f:81:7a:
59:e7:78:70:cd:16:9d:93:8b:e3:2d:5b:0b:ee:3a:98:df:82:
ad:2e:aa:1d:68:5e:68:cc:5c:b3:6f:06:f8:9d:8e:17:24:9b:
ae:c4:b3:d9:22:0e:3e:0c:86:0a:52:b4:cf:f4:87:0d:e0:e0:
06:47:60:a5:fa:4a:32:6c:f9:d3:84:1c:af:8b:38:7b:e2:25:
57:96:10:43:1d:45:a6:d6:6e:c9:17:d5:c2:53:3c:38:48:32:
ae:42:26:85:b7:d2:ac:9e:d0:50:ab:b0:5f:f4:6c:fb:73:26:
75:d6:d2:15:b5:5b:f5:30:f2:a1:41:77:fd:ac:5a:1d:96:e4:
d1:0a:cb:d7:84:d8:c4:ad:5c:53:ad:36:95:f6:de:00:fb:6f:
53:65:a2:fb:2c:81:7f:d9:7a:be:17:9d:70:26:b5:9d:44:36:
c5:f4:48:3b:3a:89:26:50:7d:4a:ce:3a:bb:7a:23:7c:ac:d6:
58:ce:72:7a:5d:69:b9:ea:0f:3e:c2:17:fc:c6:5b:89:43:0a:
6d:fd:93:a7:2c:7b:a0:a6:70:1b:ef:b7:9e:58:0b:85:c8:66:
5d:58:3e:61:ec:db:8f:98:e5:83:78:e6:6e:0a:bd:a7:6c:44:
41:ac:d4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:40 2024 by rpki-client on console-ams.rpki-client.org