Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/DNRdQ4CVL7P5Uu4D-93cjnwMq5w.roa
File: DNRdQ4CVL7P5Uu4D-93cjnwMq5w.roa (raw, json)
Hash identifier: JbHoMwxYC2w0U+DsPsyWIf8X9fqTqHXGljHr51pxlJc=
Subject key identifier: 0C:D4:5D:43:80:95:2F:B3:F9:52:EE:03:FB:DD:DC:8E:7C:0C:AB:9C
Certificate issuer: /CN=b415beef9ea1dd4772c2ee952761d655d9865026
Certificate serial: 0187BD47A3CAB8F1F487A0C99D781ABD93B8
Authority key identifier: B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/DNRdQ4CVL7P5Uu4D-93cjnwMq5w.roa
Signing time: Wed 26 Apr 2023 11:16:41 +0000
ROA not before: Wed 26 Apr 2023 11:16:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202546
IP address blocks: 185.127.4.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:47:a3:ca:b8:f1:f4:87:a0:c9:9d:78:1a:bd:93:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b415beef9ea1dd4772c2ee952761d655d9865026
Validity
Not Before: Apr 26 11:16:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cd45d4380952fb3f952ee03fbdddc8e7c0cab9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:67:40:51:9f:5d:8d:31:bc:67:b6:e7:cd:
78:13:48:93:30:76:49:68:dd:4d:a5:5e:7e:2f:76:
9c:3c:f6:26:4e:c5:ef:6c:b0:b0:8b:22:91:cc:d7:
93:0a:87:03:21:57:fe:36:02:c9:db:da:e7:95:72:
ca:a3:c6:8f:71:3f:2b:ca:ec:d1:7e:d5:26:8e:59:
97:1a:80:e6:98:ca:52:28:7e:ec:05:68:ab:d6:39:
d8:72:d6:41:00:d2:23:94:fb:c6:82:25:4e:d4:21:
b5:4a:4f:3b:7f:fd:ff:f3:f1:c7:12:de:dc:1b:9a:
29:d8:79:20:1a:95:2b:af:57:bc:69:b8:d6:f6:c6:
67:99:f3:f9:b4:e6:1b:04:af:d9:af:23:cd:95:86:
f7:01:19:91:83:ce:4e:a5:f7:59:89:d0:17:b5:33:
4b:62:b7:e7:20:b2:7b:ab:63:27:b4:04:47:78:0e:
ae:ec:8f:59:fb:ca:2c:43:92:f1:75:32:5a:e2:4d:
d4:23:12:b1:75:c5:2f:81:fa:40:19:e2:82:f1:fd:
bd:b0:01:62:98:ab:47:ff:ea:38:c4:0f:cf:9d:1e:
fd:43:03:7b:aa:bc:a5:20:14:e9:7e:7a:bc:52:24:
b6:bb:6f:e7:2e:0a:83:c1:31:cc:04:0f:2b:87:bf:
46:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D4:5D:43:80:95:2F:B3:F9:52:EE:03:FB:DD:DC:8E:7C:0C:AB:9C
X509v3 Authority Key Identifier:
keyid:B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/DNRdQ4CVL7P5Uu4D-93cjnwMq5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.4.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:a5:30:f2:b5:33:de:b9:c2:32:86:32:5e:bb:d9:4b:4e:8e:
ba:0f:c6:f0:a7:53:72:97:77:61:31:08:91:ae:da:a5:8c:23:
11:c3:ed:bf:bd:0b:ae:dc:f6:5d:f8:53:a4:ba:37:ab:66:be:
ad:4e:55:12:4c:b7:11:a8:db:89:c0:c1:94:be:4b:64:47:51:
80:a1:af:a5:e6:b2:e9:25:8f:f4:7f:57:2d:33:2f:ae:c9:9a:
63:5f:99:32:8e:1a:ec:33:e3:3f:4d:2e:40:c7:ab:6e:8c:a0:
a6:a5:32:17:7e:ca:98:fd:f1:ac:16:ec:1e:7b:a4:f1:94:2a:
5f:00:c9:9a:5b:27:5c:0e:c2:2a:1f:4a:86:97:1f:d9:5c:91:
1a:d5:78:33:f7:2d:a2:23:d2:74:66:eb:91:09:63:05:16:8e:
7c:bd:50:fd:bc:c8:48:3f:97:1c:ed:6f:fa:07:5f:bf:58:d9:
7c:2a:02:31:34:9d:da:ca:74:6e:2c:9c:a3:1b:f1:46:01:21:
88:23:49:7c:60:61:9d:9a:94:7b:3d:27:35:f6:67:85:c9:56:
a5:a5:d1:57:c5:6a:99:57:d8:ed:72:85:3f:10:a6:bf:14:9e:
f6:3c:69:4f:6d:c5:8e:bb:bb:76:31:12:ac:74:04:67:b7:5e:
cd:97:b3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:44 2024 by rpki-client on console-fra.rpki-client.org