Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Dna027YNklL2ZEwTxQdmUOEFAkQ.roa
File: Dna027YNklL2ZEwTxQdmUOEFAkQ.roa (raw, json)
Hash identifier: 8gPtjeSiwxTpoVfv18TI1yNLVq/0xuf+1lBnfbrlkk0=
Subject key identifier: 0E:76:B4:DB:B6:0D:92:52:F6:64:4C:13:C5:07:66:50:E1:05:02:44
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F14EF9B2E41085BD63CB07ED1F75D02
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Dna027YNklL2ZEwTxQdmUOEFAkQ.roa
Signing time: Sun 01 Jan 2023 20:45:21 +0000
ROA not before: Sun 01 Jan 2023 20:45:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16157
IP address blocks: 194.176.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:ef:9b:2e:41:08:5b:d6:3c:b0:7e:d1:f7:5d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e76b4dbb60d9252f6644c13c5076650e1050244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:03:e0:66:00:2e:15:7b:2f:29:bc:7c:9e:
4f:78:bb:a4:6a:73:d8:7a:25:86:9f:b7:ed:f9:80:
d7:53:da:c8:40:11:09:11:62:b8:0a:91:ea:06:7e:
af:96:03:02:7d:24:d5:04:32:74:42:08:61:d1:1b:
17:a7:78:e1:3b:f7:43:90:75:99:de:57:4b:ae:b4:
43:c4:03:93:6c:e2:17:ef:a8:2e:60:94:f8:3f:af:
be:1b:50:5f:01:2f:ba:24:bf:21:35:8a:19:1f:d6:
8e:2b:f0:97:0e:73:89:a1:23:a6:15:ab:41:08:bb:
37:86:56:05:52:0d:89:ad:3d:ed:91:bf:94:b0:0a:
3a:78:52:80:22:00:f4:70:eb:fa:c9:bb:3d:53:6d:
bd:5e:63:19:f5:c2:11:65:9b:13:b0:b1:2a:91:8e:
80:c7:03:ee:bd:41:f1:37:5e:df:1d:f8:60:f9:4b:
37:ec:ab:6a:55:2c:85:71:01:19:69:dc:28:fb:b0:
8c:43:ab:c8:c9:79:af:44:76:28:99:84:10:8a:c5:
37:8a:af:b0:36:47:07:18:db:43:f3:16:b8:23:ff:
58:f8:be:ba:c2:a0:23:e2:20:d3:ee:09:ee:62:62:
39:fb:33:46:e7:c9:b1:8c:0c:3a:df:95:bb:dc:d8:
30:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:76:B4:DB:B6:0D:92:52:F6:64:4C:13:C5:07:66:50:E1:05:02:44
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Dna027YNklL2ZEwTxQdmUOEFAkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.185.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d1:22:9b:9f:f6:62:d0:3a:07:aa:ac:37:43:70:64:39:72:
e7:2b:be:4a:e7:ac:cb:35:7e:f8:41:5f:a3:3b:72:1c:1e:3c:
90:70:37:dc:1f:29:f1:fc:9b:65:9c:d7:39:7a:59:fe:7c:08:
f5:60:4d:dc:ad:65:88:37:f3:dd:55:ae:d9:09:b8:c6:71:a1:
bc:4f:75:56:cd:94:46:0d:7a:f9:97:f2:23:19:ff:ec:11:3f:
0b:a5:c6:c2:d0:86:dc:56:38:b4:76:e6:03:b5:02:61:19:f7:
c8:4d:95:63:50:61:d1:b6:1f:db:4d:41:d1:62:89:c0:cd:96:
4d:50:41:79:fc:43:08:30:7b:28:d4:01:05:12:07:3b:5b:96:
8b:d2:d1:37:df:ab:22:f2:bd:63:e7:6b:f0:ab:22:dd:1c:5b:
aa:ec:a6:75:a4:dd:3e:99:d7:33:eb:54:8d:9e:60:29:09:ed:
fd:03:15:bc:11:29:1f:2f:36:8b:40:16:ef:7f:a8:a1:b9:97:
03:6b:5b:dc:65:36:2b:91:b7:1c:10:f8:98:6b:4e:78:61:6c:
a0:06:4f:d6:11:3d:bf:1c:e2:e6:2b:56:15:83:dc:15:cc:08:
9a:6e:a3:96:32:32:ea:c7:ba:65:fb:d9:c3:bd:f8:92:ba:99:
db:b5:8f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:48 2024 by rpki-client on console-ams.rpki-client.org