Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/dcv4_OYg7_S27VVhzMGVLq-Lm5s.roa
File: dcv4_OYg7_S27VVhzMGVLq-Lm5s.roa (raw, json)
Hash identifier: ACTdItQeeKIoXoatkxO2DDiUIdQnmM6aS+pHI+Npm+0=
Subject key identifier: 75:CB:F8:FC:E6:20:EF:F4:B6:ED:55:61:CC:C1:95:2E:AF:8B:9B:9B
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 018D79BEAC197FB62873B09C10063B59A674
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/dcv4_OYg7_S27VVhzMGVLq-Lm5s.roa
Signing time: Mon 05 Feb 2024 14:49:15 +0000
ROA not before: Mon 05 Feb 2024 14:49:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 161.8.128.0/18 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Feb 2024 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:79:be:ac:19:7f:b6:28:73:b0:9c:10:06:3b:59:a6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Feb 5 14:49:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75cbf8fce620eff4b6ed5561ccc1952eaf8b9b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:be:7f:ae:e8:15:eb:13:19:9f:b7:7c:9a:d2:
01:ad:14:d1:bc:41:f0:e0:46:44:c0:9e:cd:67:c7:
82:8f:64:0d:50:c8:f9:1d:68:d1:f6:51:e4:fc:ca:
1b:ea:37:57:b8:80:c4:73:00:b8:0b:d7:0d:ce:be:
db:fe:75:bd:79:b5:e6:35:1f:c9:d1:86:f5:b6:04:
94:48:f5:02:94:10:95:5e:ed:a0:3d:6b:13:ab:f2:
65:02:6d:c7:f7:c2:ed:5a:33:7b:d1:af:53:f0:6c:
da:11:35:f8:74:bf:09:7c:22:eb:e2:e7:fa:f0:a1:
9b:e2:00:a6:f9:8e:d9:89:d4:92:af:7d:39:fb:09:
63:2d:8e:1c:8b:fe:54:3d:4a:5d:46:62:d7:7e:a2:
ef:7d:23:e4:58:b7:bd:ad:c8:5d:ce:42:b0:de:6e:
3a:21:ae:ce:1a:fa:2c:c9:ea:3d:ac:c0:6a:7d:17:
7a:62:e6:2f:32:ba:1e:6d:61:46:c7:a6:b3:09:6b:
c8:4a:e1:87:10:73:27:62:df:40:57:d5:0e:d9:bd:
2a:04:28:84:32:6d:af:48:db:34:61:07:2f:6f:3a:
42:06:67:fb:83:75:76:f9:9f:7a:75:0c:d3:58:0e:
94:ff:1b:af:95:bc:c2:06:ca:37:f9:08:99:3e:b7:
11:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CB:F8:FC:E6:20:EF:F4:B6:ED:55:61:CC:C1:95:2E:AF:8B:9B:9B
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/dcv4_OYg7_S27VVhzMGVLq-Lm5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.8.128.0/18
Signature Algorithm: sha256WithRSAEncryption
92:87:24:aa:a1:b4:c5:d6:aa:99:27:a3:c2:89:f4:71:58:4d:
ce:0d:82:35:77:79:6b:4c:2b:a6:3b:d0:65:08:9b:be:f1:71:
36:e7:f5:fa:03:ba:c3:73:28:b8:19:37:66:d4:39:2f:cf:00:
e7:9a:1b:09:e8:be:da:30:10:45:20:6f:f7:11:70:7a:7a:4d:
93:b6:dd:b4:6c:8f:9d:21:fc:82:cf:d0:25:8d:6f:77:a7:90:
fa:b9:b6:81:c0:c8:24:ae:95:3d:68:64:52:aa:44:3f:9a:c7:
69:3e:cc:f6:83:a2:ea:23:f1:97:3d:5d:02:d6:4d:61:1e:92:
a2:df:15:42:5a:ca:12:09:72:a0:b8:44:fc:f6:b0:d1:49:a2:
8e:05:e9:81:02:6c:0d:c6:03:11:73:d8:77:92:7a:79:24:98:
63:98:b5:7c:8d:5a:85:30:41:60:65:f3:a3:55:c8:ed:32:f4:
b4:56:07:84:70:74:66:78:dd:05:22:39:e2:76:21:47:96:bc:
2e:71:d2:d2:02:49:30:70:ab:7d:af:64:6b:90:e7:17:ea:38:
a4:9c:74:bb:45:62:18:69:5a:fe:50:a6:b6:c1:9c:72:db:67:
a6:82:66:99:5e:3c:94:5b:3f:66:29:fd:a6:98:0c:2c:e5:12:
4b:4b:3f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:23 2024 by rpki-client on console-fra.rpki-client.org