Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8a0dc4-e402-4118-93a2-a3d8257803e5/1/Dk8thnqGkh_eqDyMLBojiqp6bA4.roa
File: Dk8thnqGkh_eqDyMLBojiqp6bA4.roa (raw, json)
Hash identifier: p3tGekEi/XNDhj5JoZEPHZIFKUcm8rxiVEDL8Dt2Y0E=
Subject key identifier: 0E:4F:2D:86:7A:86:92:1F:DE:A8:3C:8C:2C:1A:23:8A:AA:7A:6C:0E
Certificate issuer: /CN=546f05d9be28991c3e619a33149580e50cc86cc9
Certificate serial: 01856ECB744D8DF874E5CB7786C21A28D323
Authority key identifier: 54:6F:05:D9:BE:28:99:1C:3E:61:9A:33:14:95:80:E5:0C:C8:6C:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG8F2b4omRw-YZozFJWA5QzIbMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8a0dc4-e402-4118-93a2-a3d8257803e5/1/Dk8thnqGkh_eqDyMLBojiqp6bA4.roa
Signing time: Sun 01 Jan 2023 19:25:05 +0000
ROA not before: Sun 01 Jan 2023 19:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62356
IP address blocks: 185.39.4.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:74:4d:8d:f8:74:e5:cb:77:86:c2:1a:28:d3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546f05d9be28991c3e619a33149580e50cc86cc9
Validity
Not Before: Jan 1 19:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e4f2d867a86921fdea83c8c2c1a238aaa7a6c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:1a:6f:d9:ae:a7:dc:b3:c4:37:a5:3d:67:
ac:4e:81:0a:83:88:57:28:7c:ad:15:8d:11:e9:da:
91:7b:70:83:b7:ce:ac:9e:69:5f:ac:70:2e:c2:e3:
e4:a1:16:ee:01:64:65:26:fa:40:7f:75:75:79:32:
e3:16:45:09:8e:9e:e6:a6:ad:df:a8:a0:55:e0:34:
50:fe:57:e4:5c:b1:10:29:56:57:fd:6d:45:fd:7b:
fb:db:df:81:a9:ee:59:7e:99:e5:db:44:a0:e9:9c:
bc:a1:e6:ec:11:04:fe:47:6a:ce:7c:f7:c3:42:80:
d8:3d:c6:67:35:89:d7:9e:d4:cc:11:6d:3c:7f:e3:
b5:74:1b:fa:db:6e:f8:1b:1a:4a:f1:65:3f:4f:f9:
af:b7:83:54:c7:5b:82:51:6e:45:c0:7e:6b:5c:8c:
18:9c:51:b2:86:7e:a4:2b:6b:85:e8:a8:39:5b:ff:
f3:71:7e:16:8b:44:55:00:c0:11:d4:bc:b4:84:ab:
02:a2:e4:f3:bc:c0:fc:b4:5f:93:0f:69:6c:6f:a8:
67:58:c8:bb:bb:bf:fa:55:1c:e8:59:b5:0c:ec:47:
a8:3c:26:87:bc:af:7b:89:3b:66:ba:67:bd:b4:ca:
cf:0c:5a:90:c5:46:0d:26:e6:ad:24:10:f7:2e:3c:
a7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4F:2D:86:7A:86:92:1F:DE:A8:3C:8C:2C:1A:23:8A:AA:7A:6C:0E
X509v3 Authority Key Identifier:
keyid:54:6F:05:D9:BE:28:99:1C:3E:61:9A:33:14:95:80:E5:0C:C8:6C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG8F2b4omRw-YZozFJWA5QzIbMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8a0dc4-e402-4118-93a2-a3d8257803e5/1/Dk8thnqGkh_eqDyMLBojiqp6bA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8a0dc4-e402-4118-93a2-a3d8257803e5/1/VG8F2b4omRw-YZozFJWA5QzIbMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.4.0/22
Signature Algorithm: sha256WithRSAEncryption
88:50:ec:d7:23:51:ed:1e:22:9b:3e:27:0e:98:db:67:09:06:
d3:8b:56:ad:33:4b:18:6d:01:c4:15:56:cf:29:5c:0c:57:4e:
e6:94:f1:ae:a6:dc:53:d6:fd:82:18:0c:8d:3a:4d:ee:a1:81:
5f:2b:b5:0d:be:43:f0:d7:43:12:9b:8f:1c:c6:27:f9:f6:46:
cc:d5:3d:9b:c1:ae:9f:e1:28:f1:cc:77:03:a1:12:fa:67:f7:
12:99:44:fd:22:40:f1:15:a2:b9:3e:a4:37:cd:0e:3d:43:0b:
07:70:ae:1e:bf:28:f3:0d:f1:8a:91:1a:19:a8:ca:50:bf:fa:
2e:eb:76:80:a7:01:99:02:9a:39:03:6e:c2:e0:67:b0:ab:9f:
53:ae:49:4d:01:0e:da:0b:a6:ea:be:2e:97:2d:25:99:68:80:
43:64:2b:25:8c:03:56:ba:ea:8e:39:54:93:ff:a7:25:5c:70:
7b:65:ed:88:02:c8:3e:32:dc:21:dd:75:d3:c5:c9:80:f5:4f:
4d:ab:3d:5b:32:ae:4f:10:b6:35:e6:ae:b8:9d:49:9e:44:2b:
8c:d2:bd:60:b5:3c:be:84:7e:63:6b:27:d3:bf:a7:99:92:99:
71:ec:e9:cf:6c:dd:ef:49:41:62:ce:f5:70:ca:19:d6:ed:18:
df:48:51:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:31 2024 by rpki-client on console-fra.rpki-client.org