Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/dk-mMZ705f4pzjZ-7KU5fdHVIcc.roa
File: dk-mMZ705f4pzjZ-7KU5fdHVIcc.roa (raw, json)
Hash identifier: L/A6Ju6v/0lMMR+CrqYAaMdb9yRwvEaViYU7ggqXN8o=
Subject key identifier: 76:4F:A6:31:9E:F4:E5:FE:29:CE:36:7E:EC:A5:39:7D:D1:D5:21:C7
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 018626F74104EAF13C96C4EF08864F4A1503
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/dk-mMZ705f4pzjZ-7KU5fdHVIcc.roa
Signing time: Mon 06 Feb 2023 13:43:03 +0000
ROA not before: Mon 06 Feb 2023 13:43:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39305
IP address blocks: 5.183.16.0/22 maxlen: 24
5.183.16.0/24 maxlen: 24
5.183.17.0/24 maxlen: 24
2a0e:7400::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:26:f7:41:04:ea:f1:3c:96:c4:ef:08:86:4f:4a:15:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: Feb 6 13:43:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=764fa6319ef4e5fe29ce367eeca5397dd1d521c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d9:61:b6:09:80:92:3e:80:78:f8:74:8d:bb:
a3:b7:56:b3:f7:40:46:95:a3:c7:fe:51:64:2b:65:
a8:d6:90:85:aa:cc:bd:c4:12:51:9b:28:72:f8:df:
ed:0b:e2:65:64:ae:ac:63:48:1e:d9:42:47:72:a2:
31:54:b2:67:a9:60:18:48:fe:9f:28:47:cd:3a:ae:
37:c5:36:f0:0a:3e:1c:1d:b7:d1:27:5c:48:ff:79:
ac:84:5c:71:fe:87:6c:57:e1:e7:e9:e3:be:98:22:
82:d4:07:d4:e3:ff:3d:10:45:a1:74:21:3a:4a:1e:
9c:8e:6f:8d:89:11:ad:12:f0:54:85:a4:f6:2b:fc:
f4:df:3c:fa:ff:a2:29:d2:61:4f:47:4e:59:2d:8a:
eb:64:f8:8d:a6:00:7e:56:c1:74:fb:97:e9:21:a3:
11:67:85:c4:86:23:4e:3a:fa:dd:45:38:c2:f9:61:
63:c6:e8:ff:47:e2:a9:f9:59:98:7b:f5:bd:43:f8:
6a:9a:12:e5:e1:56:e5:9b:45:4f:05:d1:1f:97:60:
ed:9e:77:67:1b:29:87:73:12:ff:18:b8:0c:5f:46:
cf:9a:be:8b:a8:13:52:8c:a4:71:a9:b3:a6:ee:45:
9b:34:a4:d0:6b:40:86:7b:80:0b:ef:a8:c3:48:21:
67:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4F:A6:31:9E:F4:E5:FE:29:CE:36:7E:EC:A5:39:7D:D1:D5:21:C7
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/dk-mMZ705f4pzjZ-7KU5fdHVIcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.16.0/22
IPv6:
2a0e:7400::/29
Signature Algorithm: sha256WithRSAEncryption
7d:d9:fc:e6:66:b7:4b:79:f0:4f:b9:f7:18:b4:3f:33:c2:55:
09:4e:0e:be:ba:62:7b:45:72:82:d7:41:19:7d:2b:a1:ab:90:
80:cc:50:71:eb:d9:17:56:ea:b8:1d:44:45:6f:e8:7c:0d:3d:
e9:f5:d1:13:f1:c2:3c:68:80:d2:54:18:38:ea:cc:8b:7b:94:
41:13:c3:11:6f:1b:6a:03:c9:d5:e9:15:ef:97:2a:7c:fd:28:
cc:5a:05:b2:99:b5:ac:1e:cb:a5:07:a3:30:ec:66:7d:69:99:
f4:cb:af:6e:4c:ad:99:1f:3f:94:76:ba:f0:00:4c:27:42:52:
5d:a7:ed:f2:08:a3:6e:19:ea:12:6e:8e:6f:0d:69:e8:17:c1:
93:6f:de:72:0f:fa:9b:6f:b6:35:15:6a:05:72:6e:67:32:90:
bd:a4:28:f7:19:33:71:a5:7b:30:dc:46:52:b2:47:99:d1:79:
b6:1b:e2:b7:a4:9c:8a:c9:16:0f:7d:a8:84:d1:f0:6d:4b:1f:
f3:34:98:9a:01:f8:d5:9c:6e:98:d4:8e:04:4f:50:98:b1:0e:
47:ba:1d:92:df:8a:79:7e:83:2e:07:b7:b0:62:66:53:df:b4:
c9:dc:f7:89:bc:f8:91:64:91:8c:6c:9f:22:49:4a:a6:75:95:
f4:07:27:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:48 2023 by rpki-client on console-ams.rpki-client.org