Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/vDNOHKGyzj1OSbi2uKfE5afY85Y.roa
File: vDNOHKGyzj1OSbi2uKfE5afY85Y.roa (raw, json)
Hash identifier: 5fSl+SoS0iR9OQjaQA/WjgrLapUfSD5gvbN2TrfIVXA=
Subject key identifier: BC:33:4E:1C:A1:B2:CE:3D:4E:49:B8:B6:B8:A7:C4:E5:A7:D8:F3:96
Certificate issuer: /CN=0ef47d753d25289fd98794974aa0536010567bd9
Certificate serial: 018C19BF12C9D208F71F0307D6D0EE18D903
Authority key identifier: 0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/vDNOHKGyzj1OSbi2uKfE5afY85Y.roa
Signing time: Wed 29 Nov 2023 06:23:21 +0000
ROA not before: Wed 29 Nov 2023 06:23:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 104.129.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:19:bf:12:c9:d2:08:f7:1f:03:07:d6:d0:ee:18:d9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef47d753d25289fd98794974aa0536010567bd9
Validity
Not Before: Nov 29 06:23:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc334e1ca1b2ce3d4e49b8b6b8a7c4e5a7d8f396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:37:15:37:27:a0:57:ad:50:8c:7e:e3:4e:bb:
0a:a7:2b:60:cf:cb:bc:15:62:1d:b4:f1:89:19:82:
d3:ee:64:92:bb:b6:a6:f0:11:d5:22:84:4c:58:31:
da:62:eb:80:4f:42:32:e3:6b:7c:ef:ea:1d:46:d8:
13:b3:25:92:f8:92:84:83:8e:b9:16:aa:ea:e6:4c:
39:c8:08:20:9b:bb:00:03:e6:cd:80:5a:a8:e8:78:
71:1b:9a:ce:eb:c3:c8:80:dd:c5:52:b3:07:18:a3:
89:23:4a:53:dd:c1:3c:43:a4:10:f1:b6:c7:a4:99:
dd:3f:4e:78:50:02:fc:3c:79:56:04:fc:7c:f5:76:
68:2e:96:64:e2:2c:58:9e:b0:e1:58:6e:0e:45:d8:
fa:5c:eb:71:3d:17:69:3f:5e:63:eb:54:c3:69:02:
a6:47:e1:c0:d6:6e:b1:de:9d:22:0b:8a:5f:99:a3:
46:56:35:1a:cb:2f:c5:24:84:4a:37:fe:c5:7a:14:
0c:21:12:43:14:73:d8:32:44:ef:4d:be:3d:19:50:
8b:72:63:80:12:23:0b:e5:90:de:4f:af:1a:ef:9f:
4a:00:58:e6:8a:1f:52:7e:eb:cc:62:3b:c2:5d:7b:
8b:ba:54:c7:5f:09:19:41:66:b3:cd:54:01:b6:be:
10:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:33:4E:1C:A1:B2:CE:3D:4E:49:B8:B6:B8:A7:C4:E5:A7:D8:F3:96
X509v3 Authority Key Identifier:
keyid:0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/vDNOHKGyzj1OSbi2uKfE5afY85Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.129.174.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:71:c4:b8:e7:70:a7:71:66:d5:ca:93:06:ea:71:6e:45:0f:
40:31:91:01:47:b5:db:ab:60:2e:11:7a:21:84:fa:77:82:9d:
44:36:d4:55:e5:b5:1e:1c:6f:c5:a0:bf:69:1c:58:f1:19:83:
b1:eb:b2:1d:60:37:ed:1a:82:16:2d:d1:31:ce:26:f7:c0:97:
83:5c:a2:1c:c3:75:26:7b:71:c9:b7:21:95:4e:19:08:5a:80:
d4:b6:84:b5:07:02:96:c3:61:40:98:15:d2:ae:f8:36:80:0a:
6e:a7:37:b7:56:b5:e1:ca:88:06:fa:e6:32:99:3a:32:f8:83:
b9:b5:ca:92:b5:76:ff:f8:4b:5f:4a:e7:34:45:0d:0d:28:67:
d0:33:53:65:6f:e1:be:3d:1a:31:43:59:ad:5a:c9:97:4d:6f:
ee:2a:d6:ae:94:5a:c8:ce:47:5b:a8:b3:b0:fe:a1:18:7c:e3:
09:a5:bb:dd:7b:91:12:2c:39:ad:4f:77:6e:93:cc:07:91:c5:
ad:23:03:19:95:02:28:fc:37:9c:b4:1f:2f:fd:ef:9d:04:42:
34:90:c2:1c:cc:53:21:4e:4b:00:f0:56:56:48:55:22:83:f1:
d3:a0:ec:ba:5b:3a:1d:68:16:e7:68:85:a0:05:70:53:90:71:
3b:1f:1d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 04:41:33 2023 by rpki-client on console-ams.rpki-client.org