Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/Dnb6foXkXnr58AzG_uYWyPs_xh4.roa
File: Dnb6foXkXnr58AzG_uYWyPs_xh4.roa (raw, json)
Hash identifier: zQfhFGZ7jDlMXbSDi4M7qy1IDmRO6q9pmZPnyNrjE1k=
Subject key identifier: 0E:76:FA:7E:85:E4:5E:7A:F9:F0:0C:C6:FE:E6:16:C8:FB:3F:C6:1E
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 01856D53FF20B7C23781F321B67BFE2E5348
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/Dnb6foXkXnr58AzG_uYWyPs_xh4.roa
Signing time: Sun 01 Jan 2023 12:34:59 +0000
ROA not before: Sun 01 Jan 2023 12:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 194.147.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Jan 2023 14:44:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:ff:20:b7:c2:37:81:f3:21:b6:7b:fe:2e:53:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Jan 1 12:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e76fa7e85e45e7af9f00cc6fee616c8fb3fc61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:2e:4b:ab:27:fc:01:d7:9f:02:51:45:05:
a4:f5:20:df:32:b4:3c:af:6f:95:ce:d7:e4:84:28:
95:f1:c0:5e:14:9c:a1:cc:e3:f2:84:ca:5b:bd:ff:
3a:a3:75:8d:be:6b:9c:74:06:c5:6b:31:07:cc:40:
54:ba:07:4f:e9:00:ac:55:13:2c:98:a8:2c:cc:d5:
25:1d:dc:6f:f6:ca:e9:2e:52:dd:0c:6e:3a:92:8c:
f2:eb:5e:64:74:a5:b2:2d:12:cd:f8:5e:ce:cf:7f:
ef:af:bc:a8:38:ea:d2:f9:90:21:6d:3a:68:b0:4f:
bd:fa:c5:10:35:4d:b5:22:0b:d1:6a:95:6d:f8:0b:
18:84:a4:29:b4:b1:19:65:4f:b0:d9:b4:7e:ec:ec:
e5:f5:c2:7d:97:4c:4a:fb:2a:b3:14:93:a1:9d:ad:
d8:d1:36:5b:a9:00:4b:30:0f:55:5c:e0:e7:24:65:
a9:01:03:d7:6c:4d:59:bc:d1:eb:dc:19:4c:12:2f:
bc:d8:e6:12:0e:26:46:f1:51:17:24:3a:e0:89:d6:
aa:d3:d4:76:39:42:4a:ab:89:b6:35:29:c7:cf:77:
dd:d6:da:c3:f0:46:f2:4e:8a:3b:cd:df:f0:b1:2a:
9f:20:d8:b1:6c:38:53:29:55:82:f5:97:3d:a8:32:
45:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:76:FA:7E:85:E4:5E:7A:F9:F0:0C:C6:FE:E6:16:C8:FB:3F:C6:1E
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/Dnb6foXkXnr58AzG_uYWyPs_xh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.216.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:ad:ce:21:15:46:3d:fa:0c:7d:03:f3:3f:7c:a9:95:18:a7:
71:c9:80:2a:ea:d4:63:e6:63:21:7c:1d:66:13:3a:f2:7a:38:
e4:f9:3f:94:fb:f9:cc:96:38:9c:5c:d4:07:23:d6:be:0f:13:
fc:91:b7:8f:4c:30:e1:59:71:22:f6:9c:d3:aa:9b:3c:77:a5:
1d:9a:92:19:42:83:de:d3:2f:7e:e6:ca:50:a9:11:95:c5:88:
6a:07:da:51:5c:23:ce:65:2d:9d:f7:8b:42:42:93:73:c4:80:
ea:87:08:b7:3a:bd:a2:e8:f6:e0:79:4d:a9:53:fe:ac:c7:66:
20:56:51:fe:55:8a:df:3d:23:01:1e:a4:34:02:7a:ff:10:e3:
62:f3:39:46:3a:63:32:c8:50:26:57:41:6e:38:a5:2a:c2:c0:
d4:3d:a8:25:f9:31:ec:f3:f1:e3:da:c9:e4:46:57:84:c3:0e:
05:5b:4c:c0:02:38:2a:ed:94:26:28:4f:39:e7:7d:3f:e8:7a:
6c:89:64:57:b3:8a:6e:2d:1e:d8:2a:d3:e4:e4:ef:91:4c:36:
33:ab:5c:a3:e5:3d:9f:80:5d:d6:0d:b8:2a:36:86:ce:e1:fc:
32:ce:0c:a6:84:1f:cb:77:f7:26:70:fc:cd:bb:69:38:27:2a:
c8:93:2e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:19 2024 by rpki-client on console-fra.rpki-client.org