Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/dnXaTfZUUDdytNRTpXTlbqqXOeI.roa
File: dnXaTfZUUDdytNRTpXTlbqqXOeI.roa (raw, json)
Hash identifier: +HUZj4KOP87/IpxQDRYTGJR8OJPbZhFbzNouNOZLOiw=
Subject key identifier: 76:75:DA:4D:F6:54:50:37:72:B4:D4:53:A5:74:E5:6E:AA:97:39:E2
Certificate issuer: /CN=caf44942a29fac612cd44f83ad317a1c0f5b8eea
Certificate serial: 01877A3FE9993859A6DA42FBB7A6304B51A3
Authority key identifier: CA:F4:49:42:A2:9F:AC:61:2C:D4:4F:83:AD:31:7A:1C:0F:5B:8E:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvRJQqKfrGEs1E-DrTF6HA9bjuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/dnXaTfZUUDdytNRTpXTlbqqXOeI.roa
Signing time: Thu 13 Apr 2023 10:53:41 +0000
ROA not before: Thu 13 Apr 2023 10:53:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198926
IP address blocks: 185.136.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:3f:e9:99:38:59:a6:da:42:fb:b7:a6:30:4b:51:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf44942a29fac612cd44f83ad317a1c0f5b8eea
Validity
Not Before: Apr 13 10:53:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7675da4df654503772b4d453a574e56eaa9739e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:50:44:ac:2d:36:a1:c6:4f:db:7e:1f:6a:16:
c1:ae:b8:14:2a:ea:b2:93:d6:7a:1e:68:0f:58:7a:
83:1e:6f:71:da:be:2b:12:61:84:ae:79:32:bd:36:
06:cd:50:18:76:3a:43:87:a3:19:73:26:72:01:74:
6f:b6:f4:32:d5:00:00:5b:75:89:67:18:1a:f1:e8:
98:a0:06:b6:96:5f:54:d2:c6:80:13:44:c2:20:6f:
d7:bb:61:9b:09:b9:6d:c0:87:31:86:a1:7d:78:1b:
1d:eb:03:67:08:6a:ba:75:18:7a:9a:1b:82:4e:6f:
bc:b0:9a:49:b3:8d:a3:18:75:81:f0:89:cd:c9:49:
26:da:e5:da:c7:cf:4d:28:ff:4d:5f:df:09:68:e5:
e7:c4:ce:65:d0:4e:53:c0:2b:4c:3b:53:e0:34:ee:
0f:ca:d4:6f:77:ae:09:bd:8c:21:f4:a7:a9:69:ca:
18:3a:be:0d:79:70:d9:53:81:0f:85:fe:a5:8b:c8:
0e:a3:a1:17:5a:2c:58:2c:e7:ab:f5:4f:7b:1d:56:
9e:ae:81:80:be:0c:b5:bc:5a:ef:48:a0:90:68:93:
7d:4c:33:d4:e4:48:ed:c2:f3:be:8d:67:5f:fb:5c:
b3:cb:2a:62:02:0f:48:3e:f5:25:30:32:f0:f0:cb:
2d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:75:DA:4D:F6:54:50:37:72:B4:D4:53:A5:74:E5:6E:AA:97:39:E2
X509v3 Authority Key Identifier:
keyid:CA:F4:49:42:A2:9F:AC:61:2C:D4:4F:83:AD:31:7A:1C:0F:5B:8E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvRJQqKfrGEs1E-DrTF6HA9bjuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/dnXaTfZUUDdytNRTpXTlbqqXOeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/yvRJQqKfrGEs1E-DrTF6HA9bjuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.135.0/24
Signature Algorithm: sha256WithRSAEncryption
43:85:b4:2d:b4:a4:b5:b8:17:13:f6:6f:f5:ed:3d:9b:5d:72:
12:3a:c9:d9:6f:8d:b8:e2:55:7f:a6:e9:fa:80:ac:e0:03:7e:
3f:27:21:e9:0a:fa:6c:ca:48:1d:25:90:f3:68:0e:13:ac:4f:
6f:45:88:3f:e1:59:49:74:de:5c:1b:2b:e1:82:c0:76:05:c7:
ea:67:2b:50:0b:47:0c:74:11:d9:0e:43:1b:87:ab:d0:3a:08:
85:31:e5:be:32:68:6b:34:97:b7:41:28:ac:93:ea:c5:0e:32:
42:e3:40:9c:97:70:89:d2:26:56:f0:31:ee:d9:01:8d:81:9f:
19:cf:b6:e2:47:a5:b1:c8:4b:45:03:cf:ca:8a:09:12:5f:f6:
26:7f:18:30:91:f0:83:fd:cb:63:40:16:73:15:83:1e:0b:cc:
dd:c4:a0:df:f1:d9:b8:89:86:a3:8b:af:6b:5b:20:83:6e:1a:
ec:d7:6c:37:88:87:03:00:5c:4d:31:c8:d3:10:02:57:65:35:
9e:01:2a:23:f6:34:31:fb:8a:fc:60:e1:e3:34:e6:0a:36:ef:
54:7e:fe:b4:5a:49:3e:30:a1:16:1b:90:cb:be:de:28:70:76:
3f:90:ef:12:ee:dd:83:60:f4:a0:33:89:52:65:ee:78:28:a9:
18:3c:d3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:32 2023 by rpki-client on console-ams.rpki-client.org