Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/DH9CLsUqHjupSHI4ksWYnygpDVs.roa
File: DH9CLsUqHjupSHI4ksWYnygpDVs.roa (raw, json)
Hash identifier: I8JybPe7ca9fXuNOkocFSzPKXmm3GcChxrQIENtmdJc=
Subject key identifier: 0C:7F:42:2E:C5:2A:1E:3B:A9:48:72:38:92:C5:98:9F:28:29:0D:5B
Certificate issuer: /CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Certificate serial: 01856E8215F39BC5500DF23FFF35D061EB67
Authority key identifier: 1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/DH9CLsUqHjupSHI4ksWYnygpDVs.roa
Signing time: Sun 01 Jan 2023 18:04:57 +0000
ROA not before: Sun 01 Jan 2023 18:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21235
IP address blocks: 193.108.193.0/24 maxlen: 24
185.65.4.0/22 maxlen: 22
2a03:16e0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:82:15:f3:9b:c5:50:0d:f2:3f:ff:35:d0:61:eb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Validity
Not Before: Jan 1 18:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c7f422ec52a1e3ba948723892c5989f28290d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dc:d3:1f:68:f6:98:fc:d1:0c:9b:0f:ff:5b:
50:d7:a0:44:fb:68:3c:1e:5b:6e:56:0b:8a:d3:ae:
3d:49:b2:10:f4:36:c7:13:4c:ac:ff:e7:91:e6:e2:
f2:4b:bd:96:48:94:16:54:5d:72:c3:75:c9:77:3d:
06:ca:f8:63:91:28:ef:6f:21:83:87:69:9a:cd:66:
77:a6:ac:d7:d6:b8:12:f0:da:6b:8d:7f:cb:f0:c2:
7a:92:eb:3e:d0:fe:fb:fa:01:de:06:7e:a4:52:54:
93:09:36:ef:4f:3c:3a:88:67:49:40:7f:b8:4d:43:
63:79:5e:45:28:5d:62:01:00:10:0a:0f:b6:4d:50:
72:80:82:a7:50:19:77:75:dd:77:28:b9:b5:74:bf:
1e:c2:c8:3b:3d:24:f2:d0:43:6a:03:88:b8:93:22:
da:c8:0e:0f:25:14:0d:65:83:4b:34:4d:1c:b6:e0:
ed:1b:28:02:25:88:24:05:73:bc:e5:83:69:28:3c:
93:9f:f5:bb:ef:f8:e5:51:aa:0c:83:68:78:e3:eb:
5f:fd:89:f4:37:f6:2b:f6:04:b4:8a:f0:c0:62:16:
e3:36:71:56:26:43:1b:90:85:b4:51:38:a6:c3:6a:
69:ab:7c:e4:c2:70:6f:c0:0f:52:fb:c0:12:a8:ec:
91:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7F:42:2E:C5:2A:1E:3B:A9:48:72:38:92:C5:98:9F:28:29:0D:5B
X509v3 Authority Key Identifier:
keyid:1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/DH9CLsUqHjupSHI4ksWYnygpDVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.4.0/22
193.108.193.0/24
IPv6:
2a03:16e0::/32
Signature Algorithm: sha256WithRSAEncryption
9f:df:a1:3d:c8:a7:23:01:a2:d0:43:1d:1b:8c:9e:4c:de:4a:
91:2d:87:f6:a1:2a:71:d6:9b:79:9e:76:a8:6e:4c:7a:57:e2:
6a:3c:19:ca:5e:10:c5:6a:65:7a:8b:bd:d1:b5:57:2a:7b:ce:
f6:99:9d:c0:20:c0:11:0b:c8:5e:7f:e5:02:bf:1c:56:57:81:
da:e2:94:5a:f4:81:ad:35:a5:8c:26:34:41:0a:bd:ab:01:e5:
ff:72:a1:4b:7e:e0:c6:e3:d2:0a:af:b1:2c:8b:59:5c:0b:f6:
84:16:9d:f7:e8:28:51:08:9a:34:ed:66:cc:16:47:80:46:8d:
3e:20:0b:7d:7b:ae:47:d1:49:83:fe:9f:71:69:50:ee:2e:fc:
13:1a:40:e3:b7:10:c4:22:6e:53:55:ae:9d:93:63:e4:b5:0f:
d0:f4:d0:ea:2a:4c:9c:98:3a:95:00:00:b7:99:c1:9c:57:98:
70:ca:d6:79:61:f6:fc:d1:66:95:74:19:60:15:55:b3:22:60:
21:1d:f1:6a:6d:b8:88:66:99:1e:20:29:a3:57:db:e0:40:88:
75:6c:21:4a:ff:40:b8:54:54:56:28:b5:2f:73:91:cd:9a:d6:
b6:4d:d7:d0:b0:f7:de:dc:50:22:80:72:6c:43:d6:ca:0f:31:
9e:e4:14:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:13 2024 by rpki-client on console-ams.rpki-client.org