Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/DmCif3Ffs88IkcjNwwgrdQmwqVE.roa
File: DmCif3Ffs88IkcjNwwgrdQmwqVE.roa (raw, json)
Hash identifier: adjGGA66CuycCTOCPmtiyEKgILbtzv1i5BlrcUekv58=
Subject key identifier: 0E:60:A2:7F:71:5F:B3:CF:08:91:C8:CD:C3:08:2B:75:09:B0:A9:51
Certificate issuer: /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial: 0188B9556C4E0350414918A886E69A783B7F
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/DmCif3Ffs88IkcjNwwgrdQmwqVE.roa
Signing time: Wed 14 Jun 2023 09:56:03 +0000
ROA not before: Wed 14 Jun 2023 09:56:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205368
IP address blocks: 185.215.52.0/22 maxlen: 22
185.215.52.0/24 maxlen: 24
185.215.55.0/24 maxlen: 24
185.215.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:55:6c:4e:03:50:41:49:18:a8:86:e6:9a:78:3b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Validity
Not Before: Jun 14 09:56:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e60a27f715fb3cf0891c8cdc3082b7509b0a951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:d9:f5:e9:16:1f:4a:d5:cd:fe:f8:61:86:
3f:6c:99:0c:41:12:e9:c1:2e:d6:73:95:0f:64:17:
0c:39:70:6e:b2:b0:8b:cb:c2:20:58:6e:2a:36:80:
98:3b:19:42:84:77:7e:df:88:c1:81:e7:08:7e:93:
45:73:ab:a4:4c:ea:d7:89:9d:9e:ee:24:6d:5f:30:
71:1b:78:ce:29:6b:b9:39:d9:c1:5d:12:3e:07:b2:
d4:cc:d3:1b:4c:23:15:08:fa:db:b6:02:d0:15:64:
06:d1:3f:b4:5b:15:55:e6:a9:0f:e8:0c:24:78:59:
34:e8:cf:f9:cd:63:d2:3f:da:12:11:f0:51:c0:b3:
e7:c1:96:a3:2f:41:43:c4:dc:5e:10:ca:10:a8:4f:
51:3d:29:97:df:b0:19:8d:d7:94:03:2f:2f:53:27:
1c:92:0b:93:40:00:f2:dc:4a:9d:e2:e6:70:d2:78:
6e:eb:77:64:e3:bb:51:bf:a8:d8:4f:3b:b2:f0:90:
b8:cc:b1:aa:76:8e:c0:bc:47:e8:54:65:38:c4:cb:
33:9f:07:29:4d:19:3b:e7:01:0d:17:e7:7f:f1:71:
d6:1a:62:75:5d:4b:09:ba:55:23:60:d3:a6:80:67:
96:90:28:f1:00:95:26:90:f1:69:60:a5:46:a8:ab:
0d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:60:A2:7F:71:5F:B3:CF:08:91:C8:CD:C3:08:2B:75:09:B0:A9:51
X509v3 Authority Key Identifier:
keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/DmCif3Ffs88IkcjNwwgrdQmwqVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.52.0/22
Signature Algorithm: sha256WithRSAEncryption
06:62:7d:67:eb:ac:3d:a7:61:34:b5:31:a1:9b:06:70:c5:cd:
d8:e8:d1:07:d9:da:85:6c:e2:6b:ae:74:6c:d6:94:bb:8b:52:
02:1a:b1:a1:8e:1b:0b:a1:8b:ad:eb:20:d6:a7:b2:0e:ce:39:
b6:49:72:27:8f:10:a7:02:c7:09:51:fc:15:5b:29:2d:ac:48:
93:a1:99:e8:55:33:c4:7f:d8:7b:5c:c5:16:d8:dc:71:d9:de:
a8:3a:a3:69:17:24:16:8f:76:d4:97:51:65:99:93:8a:ba:50:
36:15:b9:72:5a:81:20:6b:c8:14:ae:05:77:fd:a3:18:fe:81:
88:a8:01:70:8c:75:b7:3e:e1:88:02:0b:1b:78:d9:23:cb:73:
62:c1:1d:42:17:27:29:09:da:66:7e:8b:ac:12:73:86:5c:11:
90:64:fd:f7:09:1f:60:52:90:54:8c:69:42:14:7b:d0:a7:23:
63:d4:06:99:75:10:ac:c8:f2:ab:8f:33:59:b1:a9:df:6c:59:
4f:2f:bc:53:60:c7:23:9c:01:29:01:5a:2f:f2:d7:74:0f:63:
5a:43:30:70:87:b7:a7:0b:46:6e:e3:7b:4f:79:54:eb:5e:47:
1e:76:c3:e0:d9:7f:28:e5:46:ea:5b:cf:db:47:89:e5:53:c7:
fe:34:f1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:31 2024 by rpki-client on console-ams.rpki-client.org