Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/DfvFXgPlA_NSnBKY-3XzqzCBFZ4.roa
File: DfvFXgPlA_NSnBKY-3XzqzCBFZ4.roa (raw, json)
Hash identifier: oT52ly/NZIbTZhy53gbuw62l6SfCtyA0zatuec3odGI=
Subject key identifier: 0D:FB:C5:5E:03:E5:03:F3:52:9C:12:98:FB:75:F3:AB:30:81:15:9E
Certificate issuer: /CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Certificate serial: 018570672204603E6F47B90AA092B64D8591
Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/DfvFXgPlA_NSnBKY-3XzqzCBFZ4.roa
Signing time: Mon 02 Jan 2023 02:54:44 +0000
ROA not before: Mon 02 Jan 2023 02:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30848
IP address blocks: 94.185.124.0/23 maxlen: 23
94.185.126.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:22:04:60:3e:6f:47:b9:0a:a0:92:b6:4d:85:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Validity
Not Before: Jan 2 02:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dfbc55e03e503f3529c1298fb75f3ab3081159e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1e:cf:bf:d9:3b:45:58:7d:13:63:ca:69:2a:
11:33:93:98:7a:03:b4:27:08:cc:ec:cf:1a:41:88:
ae:1f:e9:5c:ba:e9:29:ae:bd:d3:19:9f:e4:e4:a9:
46:53:ba:5b:06:8a:b7:55:c7:b0:c8:a4:cd:9c:90:
48:62:66:52:62:bd:c3:33:cd:60:bf:68:24:55:b6:
cd:b0:96:e4:01:bd:07:43:1f:b0:33:f4:16:62:e6:
89:78:6e:d7:3a:a6:02:20:c1:97:72:18:6e:3b:d3:
d9:b9:13:22:30:fd:a8:0c:d3:47:db:7b:8d:51:6b:
a0:34:41:32:2a:b8:5c:e3:0b:a0:a2:89:b3:42:50:
5b:a4:28:da:39:7d:f9:38:1e:64:a6:5f:5a:76:32:
68:44:c6:92:8e:6e:8e:7f:f5:ce:99:99:66:1b:f2:
66:17:7c:53:48:d7:7a:d9:c3:76:1a:78:64:93:5f:
35:79:f5:87:d2:fc:9d:f0:65:c3:88:e6:00:d8:29:
dc:d5:3e:96:9c:70:ea:80:2d:8a:85:84:cd:27:7c:
03:c5:b5:72:c9:eb:bd:17:24:c2:db:27:39:a8:2f:
7e:1f:62:56:29:6b:96:41:a3:16:31:a8:fd:67:69:
ed:63:ac:31:2d:1f:25:75:1e:c2:48:6c:ef:23:66:
f5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FB:C5:5E:03:E5:03:F3:52:9C:12:98:FB:75:F3:AB:30:81:15:9E
X509v3 Authority Key Identifier:
keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/DfvFXgPlA_NSnBKY-3XzqzCBFZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.185.124.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:06:b5:2c:ea:66:06:21:a4:3e:02:a8:2a:ae:8d:3b:5f:67:
b6:47:66:68:82:2e:4d:df:03:ac:d0:94:6b:e0:0d:16:49:17:
4c:5c:b1:54:f3:87:98:32:55:a1:31:ed:7b:a1:33:ec:e9:9f:
e5:4e:0b:66:94:33:9a:7e:d3:fe:b9:37:fc:2e:c2:e0:36:c5:
4b:88:43:2c:30:60:bd:02:6f:2d:bd:d8:45:d6:9e:b1:9a:6c:
12:8f:c4:e8:d8:5b:ab:25:31:d9:9b:7f:73:26:d4:16:ff:63:
d2:f2:0c:93:67:ff:3f:b3:9a:10:b0:82:c7:64:89:c7:83:cf:
48:5b:c9:77:25:f8:38:33:6e:c8:5e:f8:03:98:c7:03:f7:1e:
6c:f5:d8:34:55:97:da:25:6a:6a:c9:75:5c:60:03:51:ed:c2:
6d:b7:05:aa:66:c2:dc:58:42:2a:7b:96:4b:ee:df:ae:41:16:
76:42:1f:20:6f:2c:91:02:57:76:68:a8:f9:dd:f3:47:ee:87:
c0:2f:58:fe:d0:70:6e:89:cb:f8:5e:82:0b:01:b6:6a:46:2f:
a4:93:0a:60:20:20:bd:03:e8:e6:7c:c9:f7:c6:4f:f4:fd:1b:
6a:b9:b6:2f:20:24:70:43:a4:fc:80:89:ac:0d:d9:72:2d:0d:
1a:e6:96:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:34 2024 by rpki-client on console-fra.rpki-client.org