Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/D0Nc-q4AY6B2KTzBJdjsBd9h3zM.roa
File: D0Nc-q4AY6B2KTzBJdjsBd9h3zM.roa (raw, json)
Hash identifier: J4uWVdzTkyafCF5oQZ6562ViMfX/2sCSdjwmbJgV1uM=
Subject key identifier: 0F:43:5C:FA:AE:00:63:A0:76:29:3C:C1:25:D8:EC:05:DF:61:DF:33
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F14FDAE42D83C6A21690199F685FABB
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/D0Nc-q4AY6B2KTzBJdjsBd9h3zM.roa
Signing time: Sun 01 Jan 2023 20:45:24 +0000
ROA not before: Sun 01 Jan 2023 20:45:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44271
IP address blocks: 85.121.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:fd:ae:42:d8:3c:6a:21:69:01:99:f6:85:fa:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f435cfaae0063a076293cc125d8ec05df61df33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:8c:6f:02:45:5b:5c:ff:91:4c:82:3a:de:
bb:72:b9:9e:31:ec:95:73:85:5f:b7:2a:02:16:f6:
0a:98:d1:ef:50:a0:f4:5c:9c:3d:b4:3f:38:47:6b:
15:a4:18:73:d8:c4:ee:3f:52:2f:54:1c:68:9f:09:
ef:c9:4d:f4:d3:73:ca:21:26:b3:f5:1e:54:32:85:
45:2e:41:37:bb:b8:ad:b6:45:d1:4d:09:d0:91:01:
c9:eb:d3:cb:3e:e1:0e:b0:4d:d4:cb:b2:ff:d0:e3:
63:0b:d3:84:eb:95:c1:8f:94:69:5b:9c:0d:94:dc:
3f:eb:44:7c:a9:fc:74:5f:58:7a:28:12:9c:89:4c:
9a:90:be:e8:d5:4f:81:9d:b8:23:69:ae:94:3a:d0:
dd:fa:6a:e4:f5:93:38:ea:87:0f:a0:64:a6:b6:5f:
83:9b:7a:f9:75:70:6c:c9:bb:aa:f3:9c:e4:29:56:
2b:f9:b8:de:42:73:ce:83:9e:6f:bc:7f:12:1c:3f:
1a:7a:90:1f:f1:f4:df:4b:d8:68:f8:c5:0f:a7:85:
f5:97:ea:25:8c:93:a8:81:bf:00:b5:38:cb:ff:80:
8b:25:93:9b:b6:a2:3d:36:a2:f5:96:e2:44:34:84:
03:67:50:3b:be:65:dc:21:ff:a3:c0:e8:21:30:70:
f1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:43:5C:FA:AE:00:63:A0:76:29:3C:C1:25:D8:EC:05:DF:61:DF:33
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/D0Nc-q4AY6B2KTzBJdjsBd9h3zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.121.182.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:d3:95:fc:16:b1:23:5f:a5:11:1e:33:16:56:2b:8f:22:20:
21:0a:ca:d9:6a:5a:4e:b6:e3:a0:dd:9c:7c:9b:ed:15:98:6a:
c8:e2:67:d6:2b:4e:ff:d3:82:ae:85:02:e3:c4:bb:3c:5f:92:
4b:f3:e2:f8:94:6e:6b:a8:46:c2:97:df:cb:5d:a6:9f:1c:f6:
8e:b4:97:99:4a:8a:c8:36:e8:02:d6:5b:01:a9:a9:f4:ef:bf:
de:5d:70:7a:a9:e6:15:1e:f0:8e:5a:b2:8b:22:d6:2d:76:9f:
68:1e:c2:53:cf:bf:e7:69:ca:73:ff:27:e6:23:51:6e:cd:54:
27:18:47:0d:4d:ee:72:2e:55:a3:35:06:50:74:81:a9:3a:85:
dd:c1:11:a7:43:39:8d:cc:e1:30:37:1c:18:86:2a:b6:9b:98:
52:17:53:e6:9d:55:03:42:ce:7d:e2:61:95:e6:c2:69:e2:bd:
c1:fd:09:d8:15:9b:ab:d4:b7:21:1c:4b:1f:7a:f6:be:06:af:
fc:a7:06:0d:e7:9a:15:87:ef:85:e4:60:ce:33:74:86:5b:b3:
c8:2c:04:45:52:0d:74:9e:a2:0e:f8:d1:9f:23:11:97:56:fa:
9b:e6:73:ec:04:70:18:52:40:ab:33:e3:e8:d2:52:61:6c:23:
d8:0b:7b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org