Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/8dabdd-0ffb-4849-b265-a5e89b665772/1/DhuTAB1XR1d0-qdMT8iypa-XQ2Q.roa
File: DhuTAB1XR1d0-qdMT8iypa-XQ2Q.roa (raw, json)
Hash identifier: Z1OZb+ISaZ8L/Jbd15cCJgzA7DaGYhmDorkJOSST6dE=
Subject key identifier: 0E:1B:93:00:1D:57:47:57:74:FA:A7:4C:4F:C8:B2:A5:AF:97:43:64
Certificate issuer: /CN=b4e576a0fd748c899e64d5fbf5fd7388c68ee044
Certificate serial: 01856F26BC594919FB716D58138AD55F5D74
Authority key identifier: B4:E5:76:A0:FD:74:8C:89:9E:64:D5:FB:F5:FD:73:88:C6:8E:E0:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOV2oP10jImeZNX79f1ziMaO4EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/8dabdd-0ffb-4849-b265-a5e89b665772/1/DhuTAB1XR1d0-qdMT8iypa-XQ2Q.roa
Signing time: Sun 01 Jan 2023 21:04:47 +0000
ROA not before: Sun 01 Jan 2023 21:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202681
IP address blocks: 185.153.57.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:bc:59:49:19:fb:71:6d:58:13:8a:d5:5f:5d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e576a0fd748c899e64d5fbf5fd7388c68ee044
Validity
Not Before: Jan 1 21:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e1b93001d57475774faa74c4fc8b2a5af974364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:15:3a:52:2d:f0:7e:0c:8a:c1:eb:4e:28:81:
26:0e:be:7e:40:86:94:d5:3e:49:6a:ef:43:70:7b:
98:0b:7b:a0:d0:6e:3c:4e:81:da:db:67:cd:7f:ec:
4a:2e:2d:85:1f:cb:63:7e:3d:00:43:9f:65:d4:3e:
eb:81:92:21:ef:1b:d6:55:fe:ac:fe:62:34:d3:7d:
b0:8a:5e:c7:98:03:e3:c9:d4:5f:0a:bf:57:45:02:
3a:f0:45:aa:90:f6:c1:02:b6:41:64:ef:47:1a:9f:
d9:5b:57:a2:48:8e:7f:40:9f:ca:82:2e:9c:53:35:
7b:85:af:90:bd:87:e8:74:b9:ca:53:97:88:7b:56:
b3:a7:eb:e2:f0:fa:9e:48:dc:f2:c4:9a:2f:d7:6c:
b9:e5:d3:c4:0a:8e:61:dc:16:fa:39:6b:ae:e3:20:
cd:fd:d7:f1:4d:32:8e:28:f2:4d:65:38:83:79:7c:
11:c7:13:a5:bf:46:9e:fd:dd:c7:1b:e3:58:e3:e4:
b2:76:67:93:2c:4e:07:f6:81:74:a7:a6:63:85:67:
5d:12:58:40:c4:a5:23:75:63:2d:fc:75:6f:38:14:
3f:55:14:71:2b:d0:00:3c:bb:e8:2a:67:a8:ff:b0:
65:b2:6d:14:80:cb:1b:57:17:fc:fb:3a:db:8b:86:
b2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1B:93:00:1D:57:47:57:74:FA:A7:4C:4F:C8:B2:A5:AF:97:43:64
X509v3 Authority Key Identifier:
keyid:B4:E5:76:A0:FD:74:8C:89:9E:64:D5:FB:F5:FD:73:88:C6:8E:E0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOV2oP10jImeZNX79f1ziMaO4EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8dabdd-0ffb-4849-b265-a5e89b665772/1/DhuTAB1XR1d0-qdMT8iypa-XQ2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8dabdd-0ffb-4849-b265-a5e89b665772/1/tOV2oP10jImeZNX79f1ziMaO4EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.57.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:dc:f8:16:26:3b:23:ea:59:97:da:e3:a3:89:c5:3e:d2:df:
ef:62:15:b3:e6:50:8d:9c:77:96:a8:9a:2d:95:9f:e7:29:82:
7d:4e:65:30:eb:90:bd:3d:6e:09:7f:9d:2b:02:2b:36:cd:75:
71:1d:c8:ea:c1:8b:9a:5a:49:67:eb:60:3d:e5:ba:93:43:3d:
e1:71:ef:84:36:21:d8:75:67:6d:af:e8:0c:78:eb:aa:43:d9:
8d:bf:63:0a:bf:04:94:28:d1:f7:7b:f6:60:f4:64:3f:a0:e5:
2d:d2:2b:78:e1:09:5a:88:d2:c7:03:b8:27:9a:88:66:33:f2:
6f:d2:82:24:26:bd:77:f5:cb:73:58:5f:b3:16:7f:6d:27:e3:
20:4d:44:57:91:cc:66:79:e8:a7:30:2a:1b:55:a1:af:21:ae:
cd:9b:05:b1:bd:fd:50:11:42:69:0e:ad:67:05:a7:44:31:ac:
73:3e:2e:25:7d:6a:01:4f:54:4e:c3:3b:df:0d:8e:7c:e6:33:
31:ab:7f:6d:5d:28:11:1d:08:b6:a8:c4:89:75:06:0b:59:56:
7e:99:48:3d:ff:52:a1:aa:0e:80:ae:da:dd:12:bc:be:88:60:
29:ad:e2:ce:be:aa:35:b4:3e:df:02:17:07:6c:07:1a:8d:1e:
98:2c:51:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:22 2024 by rpki-client on console-fra.rpki-client.org