Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/DcSOBMO_kQDVGx32x9zo1nksXxk.roa
File: DcSOBMO_kQDVGx32x9zo1nksXxk.roa (raw, json)
Hash identifier: 1LcMiXt0XldlTM7RtYyWnmheqd2rH3YTCxEj4K0Q7os=
Subject key identifier: 0D:C4:8E:04:C3:BF:91:00:D5:1B:1D:F6:C7:DC:E8:D6:79:2C:5F:19
Certificate issuer: /CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Certificate serial: 0185710C08C75EF7108863C63494C5D494F9
Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/DcSOBMO_kQDVGx32x9zo1nksXxk.roa
Signing time: Mon 02 Jan 2023 05:54:52 +0000
ROA not before: Mon 02 Jan 2023 05:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31290
IP address blocks: 95.172.224.0/19 maxlen: 24
212.105.160.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:08:c7:5e:f7:10:88:63:c6:34:94:c5:d4:94:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Validity
Not Before: Jan 2 05:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dc48e04c3bf9100d51b1df6c7dce8d6792c5f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:82:b4:52:5e:5b:1b:72:52:02:c5:f4:1b:cf:
55:54:09:43:e7:a8:b2:52:39:78:d1:2b:da:9a:19:
13:6d:d9:06:54:b7:97:55:a6:74:12:96:3c:1a:f7:
35:c8:84:74:13:be:3d:de:1a:f1:d3:1d:c3:57:ca:
f5:81:f5:2c:c9:7a:ac:53:59:c2:7a:85:00:f2:65:
ed:d6:3e:b5:cc:48:3b:19:9d:5c:6f:56:65:c7:b0:
6b:c5:02:35:ec:18:40:15:93:1b:71:84:79:8c:ce:
07:f8:8d:44:34:49:ca:8c:4d:59:21:a1:90:64:15:
40:5a:db:d7:fa:cd:d8:cc:26:59:3a:f4:b9:6d:f5:
80:e6:7f:ee:2f:30:8e:5e:26:b9:39:7d:64:4f:57:
2e:57:06:bc:32:0d:99:7e:76:38:02:91:b6:7d:27:
13:31:30:60:2e:e3:8f:15:bf:8b:70:a8:0a:49:99:
7b:b9:41:27:a3:3f:a4:b6:a9:b1:0c:7e:1a:93:f3:
44:8f:0c:91:94:24:e3:19:e4:bf:26:28:ab:82:1c:
77:f8:8b:f4:dc:22:ba:96:a1:53:0d:51:fd:96:3f:
88:0c:80:17:e1:e6:09:28:f4:fc:1c:6d:cb:b1:20:
ec:9b:45:d1:a2:d5:17:2d:2f:d9:ec:f4:48:c2:53:
52:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C4:8E:04:C3:BF:91:00:D5:1B:1D:F6:C7:DC:E8:D6:79:2C:5F:19
X509v3 Authority Key Identifier:
keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/DcSOBMO_kQDVGx32x9zo1nksXxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.172.224.0/19
212.105.160.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:6c:bc:26:c5:73:cd:7f:3d:1c:30:5b:48:7a:e5:e6:17:39:
af:6d:f4:69:8a:84:60:ba:1a:28:cd:4c:ae:f9:16:52:97:2c:
66:56:75:12:9c:68:b8:01:4b:d8:14:dc:19:3c:d9:0a:34:c4:
1a:ad:e0:6e:0c:c9:d4:71:34:dc:d5:4c:6c:a8:89:45:9e:a4:
fc:f3:57:95:14:24:42:07:d4:a3:36:72:8a:86:4e:1f:86:40:
d4:3f:03:c0:55:84:2f:ab:c4:1f:cf:90:e6:5e:e3:36:82:ef:
2d:f1:38:df:ec:c2:3d:81:01:d6:19:74:0f:40:10:67:74:cf:
80:5d:53:ac:b5:71:b9:ef:52:54:41:5c:4d:75:82:8a:ef:0a:
73:f2:1c:3e:59:23:b0:7d:ce:aa:23:2d:3f:45:10:df:5f:0b:
92:6e:32:10:f7:04:ea:c3:bb:e1:af:09:b3:99:f4:45:ac:6c:
67:46:32:d7:51:fb:36:70:8d:26:eb:dc:75:32:58:06:28:0d:
7b:4e:aa:f5:28:19:0d:a3:cf:ac:9d:e0:e5:88:62:08:8b:4b:
99:c2:5a:e9:65:b4:4c:8e:76:af:fd:c3:7d:1b:76:61:37:2d:
ec:a7:8f:f1:69:76:de:92:aa:3b:40:f0:11:e2:56:6e:26:fc:
96:c5:40:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:22 2023 by rpki-client on console-ams.rpki-client.org