Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/ckOfDsgavSNV6-x9zhI9OnrD_4k.roa
File: ckOfDsgavSNV6-x9zhI9OnrD_4k.roa (raw, json)
Hash identifier: S6iJImbTw1/Kn9iiHys1d4LRwSf4QbXgzingEygQU0w=
Subject key identifier: 72:43:9F:0E:C8:1A:BD:23:55:EB:EC:7D:CE:12:3D:3A:7A:C3:FF:89
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 0185D666C53C1983DC0FABBC13F9108E49E1
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/ckOfDsgavSNV6-x9zhI9OnrD_4k.roa
Signing time: Sat 21 Jan 2023 22:15:37 +0000
ROA not before: Sat 21 Jan 2023 22:15:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 192.94.58.0/24 maxlen: 24
193.150.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Mar 2023 06:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d6:66:c5:3c:19:83:dc:0f:ab:bc:13:f9:10:8e:49:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Jan 21 22:15:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72439f0ec81abd2355ebec7dce123d3a7ac3ff89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dc:b1:2b:41:74:af:17:91:c4:b8:ec:ce:19:
40:9d:15:3b:db:f1:1c:23:b9:35:e0:ce:11:4f:f7:
6c:7c:df:a9:a3:9f:df:58:3d:e1:09:79:1b:49:ab:
31:a8:02:73:f4:7d:2f:a2:80:e7:c2:31:c5:83:1f:
6e:59:70:0d:ce:aa:fd:ae:57:95:c7:79:8c:3a:d1:
fb:3b:ed:a9:de:0b:40:ab:80:c0:85:cc:da:62:46:
f6:a0:ea:24:d5:37:e3:f0:bc:3b:ef:10:75:61:0e:
6d:21:2d:51:cc:49:f6:9b:aa:72:5a:5a:e9:de:6e:
64:51:3a:b5:c9:61:d7:ab:c1:2a:91:30:11:9b:da:
86:15:09:4d:a3:51:57:45:73:6a:ee:e3:d8:6f:d0:
58:cc:94:fd:75:b4:22:c2:c3:e9:ad:b7:1c:86:ef:
65:6e:88:54:68:f1:17:a3:67:69:ea:f2:e0:89:9c:
50:9d:0f:97:d1:02:12:88:40:9f:7f:8c:f1:56:d7:
08:17:b3:45:52:47:01:51:f6:da:48:22:17:8d:8b:
63:e5:d3:52:2b:91:92:2f:33:69:1d:c9:1d:b5:81:
51:63:3b:a4:07:e9:cb:2f:35:5e:8c:2d:f5:bb:54:
3d:24:3a:d8:1f:b4:6c:93:c0:63:86:41:ed:fd:41:
13:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:43:9F:0E:C8:1A:BD:23:55:EB:EC:7D:CE:12:3D:3A:7A:C3:FF:89
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/ckOfDsgavSNV6-x9zhI9OnrD_4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.94.58.0/24
193.150.188.0/22
Signature Algorithm: sha256WithRSAEncryption
44:7c:51:f9:47:52:b3:dc:eb:cc:21:1c:f4:df:bb:02:5b:c0:
19:c2:79:49:8d:f7:2b:6c:39:fc:8a:fc:68:c8:05:40:80:bb:
a2:69:e0:fc:e5:fb:78:d6:5f:61:b8:64:b5:01:ad:cc:d3:46:
e6:7f:dd:a2:37:96:a1:df:90:fb:3c:da:7c:d1:25:d6:b8:a2:
7a:c8:15:15:d9:f3:35:28:83:30:c6:d3:97:ae:08:6d:84:51:
4d:b7:b2:47:d1:eb:c4:eb:44:4f:97:93:87:7e:49:ff:8d:78:
4a:d4:90:e6:af:72:db:6a:3a:bc:85:b4:25:cb:9c:fd:ca:0f:
f5:b7:b9:71:b4:e3:72:e4:3e:09:29:5d:15:15:23:2c:77:1c:
06:29:f8:41:d3:5e:45:97:60:11:e2:2d:cb:12:52:7c:91:a1:
a3:bc:aa:97:98:ff:1f:80:35:39:28:fb:6a:cf:1c:25:0b:70:
0a:b9:14:32:ca:02:8e:b7:ed:f1:01:23:dc:21:6d:5e:af:d9:
e0:b0:fc:ba:1f:47:96:1a:63:23:8d:9d:77:b9:bd:00:ca:45:
be:cc:f4:ab:49:4d:4e:bc:d6:08:f4:26:d5:b8:c2:85:52:2c:
5e:48:8c:78:32:c8:27:6b:1b:40:3a:b1:ca:8f:0a:28:a7:4c:
e9:dc:5a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:17 2024 by rpki-client on console-ams.rpki-client.org