Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/DKBEm6ovmb4k9f9BKaNWK9bTQqE.roa
File: DKBEm6ovmb4k9f9BKaNWK9bTQqE.roa (raw, json)
Hash identifier: AT4LRDAQ2EVyY2BnNjJVctnuXSroNEZ5J4u203GsrKk=
Subject key identifier: 0C:A0:44:9B:AA:2F:99:BE:24:F5:FF:41:29:A3:56:2B:D6:D3:42:A1
Certificate issuer: /CN=c4729af13d3d156f411976b176e554fa671d76f7
Certificate serial: 01857127859E464A52C8FF52CE7B5689806E
Authority key identifier: C4:72:9A:F1:3D:3D:15:6F:41:19:76:B1:76:E5:54:FA:67:1D:76:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHKa8T09FW9BGXaxduVU-mcddvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/DKBEm6ovmb4k9f9BKaNWK9bTQqE.roa
Signing time: Mon 02 Jan 2023 06:24:53 +0000
ROA not before: Mon 02 Jan 2023 06:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202629
IP address blocks: 45.153.28.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 08 Jun 2023 11:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:85:9e:46:4a:52:c8:ff:52:ce:7b:56:89:80:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4729af13d3d156f411976b176e554fa671d76f7
Validity
Not Before: Jan 2 06:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ca0449baa2f99be24f5ff4129a3562bd6d342a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6c:24:21:87:76:fb:e2:b8:dd:4f:3a:d1:3f:
55:91:17:5f:0f:57:47:07:59:b9:d6:56:d7:47:23:
d0:1a:b4:0f:a3:42:c8:0e:02:89:5a:96:4c:8a:91:
ab:0e:4e:41:83:f6:91:e2:5c:25:82:41:f4:10:36:
1a:2a:b1:03:0d:cd:47:41:19:dd:85:1b:ff:d1:64:
e5:d8:f1:d5:3e:66:eb:49:52:6c:19:f0:cb:f1:c9:
bd:ad:dc:f5:e8:5a:cf:59:45:0a:59:e8:02:bb:07:
e2:0f:31:de:47:58:2a:d1:97:a1:2c:bf:2c:ff:17:
f1:89:6e:f4:e7:f0:23:54:dc:ab:fb:71:5c:0b:de:
82:53:f7:a6:b3:88:7a:5c:3e:07:d9:54:d4:13:f9:
0e:f9:63:b7:bd:a8:ef:0b:35:49:ea:3f:6c:4f:77:
12:73:e7:0b:68:6e:99:14:da:30:6c:5d:9d:7c:03:
97:73:bb:bb:ee:fb:a9:3a:a4:a2:06:a8:e0:a5:b0:
c5:ff:00:0b:94:84:3a:2d:70:d6:ec:47:70:30:b1:
35:dc:ea:b6:11:cc:1f:14:62:83:fe:64:51:0c:d6:
de:15:a3:82:3c:31:d4:cc:df:cb:ac:f9:e9:51:64:
20:be:2e:d0:3d:82:87:a4:e6:7b:d7:a2:d8:95:17:
b4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A0:44:9B:AA:2F:99:BE:24:F5:FF:41:29:A3:56:2B:D6:D3:42:A1
X509v3 Authority Key Identifier:
keyid:C4:72:9A:F1:3D:3D:15:6F:41:19:76:B1:76:E5:54:FA:67:1D:76:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHKa8T09FW9BGXaxduVU-mcddvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/DKBEm6ovmb4k9f9BKaNWK9bTQqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.28.0/22
Signature Algorithm: sha256WithRSAEncryption
22:09:69:6c:5e:0d:80:88:f8:46:aa:0b:99:a7:c3:26:30:20:
af:7e:db:66:7f:1d:1c:30:6b:c8:bc:f3:b0:be:82:48:6a:ce:
62:f3:1b:1d:65:41:ca:0e:9c:9c:43:28:8a:4c:c7:98:8e:74:
54:96:98:98:b7:7a:db:11:22:7f:df:41:7b:dc:7e:85:1d:4c:
83:ce:09:16:54:85:0c:71:40:1b:b5:c7:70:40:5f:9a:d1:60:
e8:71:db:74:2d:50:5b:40:c4:61:09:d5:03:59:e7:54:f1:9d:
9d:ac:63:33:38:b6:49:ae:4b:a2:03:29:50:3f:90:e0:b0:c3:
f5:ba:91:a4:45:08:e4:a4:7e:e6:5d:cc:7e:f4:57:3a:b7:25:
c4:85:cc:ef:ea:05:bf:56:9e:9d:e4:6c:82:86:ef:9f:0c:fb:
42:71:72:27:35:88:12:6c:34:3c:0f:7a:9e:ec:91:b7:83:3a:
2f:9c:03:42:45:0e:8b:86:cf:92:2c:7e:31:38:7d:46:86:e7:
5a:1a:ff:41:d2:b6:9a:90:36:f6:34:a8:03:ac:0f:ef:0b:64:
cc:e6:68:bf:dc:bd:f7:c0:bd:bd:1a:c4:42:8b:59:5c:9c:eb:
82:eb:a4:36:af:a4:cd:c5:45:94:62:d3:07:e2:45:8e:cd:b9:
18:54:74:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:43 2024 by rpki-client on console-ams.rpki-client.org