Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/DAPB5vmOB752G_ZgI0lyDZ7Uj70.roa
File: DAPB5vmOB752G_ZgI0lyDZ7Uj70.roa (raw, json)
Hash identifier: bVchbajPYUSnHEA7Q5YbVJmgYe/oUARIioCRBwajF0U=
Subject key identifier: 0C:03:C1:E6:F9:8E:07:BE:76:1B:F6:60:23:49:72:0D:9E:D4:8F:BD
Certificate issuer: /CN=10d267860d3a403b00e1a61c5434acff6eb97394
Certificate serial: 018572DF0BA22D89D0BACF665EA18ACD1A3D
Authority key identifier: 10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/DAPB5vmOB752G_ZgI0lyDZ7Uj70.roa
Signing time: Mon 02 Jan 2023 14:24:58 +0000
ROA not before: Mon 02 Jan 2023 14:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24806
IP address blocks: 193.105.158.0/23 maxlen: 32
193.105.157.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:df:0b:a2:2d:89:d0:ba:cf:66:5e:a1:8a:cd:1a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d267860d3a403b00e1a61c5434acff6eb97394
Validity
Not Before: Jan 2 14:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c03c1e6f98e07be761bf6602349720d9ed48fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4b:b2:f8:f3:fd:6d:13:d7:69:be:8d:34:94:
c7:28:43:d3:5f:f4:0b:c6:f6:1b:72:9b:8a:66:c6:
6b:87:fe:b6:7e:40:b0:e7:04:9f:15:78:aa:7d:12:
37:53:49:f1:da:4e:8b:b3:45:8f:d2:18:ff:98:b8:
bc:db:e8:7b:c4:13:30:40:8b:dd:18:35:3a:8a:4d:
05:c3:2a:03:da:c0:0c:d7:1e:f2:00:c1:f4:65:bc:
c2:b3:59:bb:35:ab:ac:35:2c:a1:b9:89:36:60:f7:
87:08:73:9b:fa:d5:62:b4:1b:34:c9:df:0e:6b:c6:
f1:d5:26:81:6a:86:c6:34:3b:84:d7:92:23:1d:20:
ec:97:c4:ae:d5:86:f1:22:c1:76:50:27:51:e1:d9:
f8:38:24:45:76:3f:51:a9:8e:15:da:96:e3:a1:e3:
e8:7e:16:0d:e1:36:de:80:3d:bc:72:24:0b:fb:fd:
2a:94:23:91:fd:bf:ff:db:b7:f8:65:46:c8:8c:0d:
70:ad:e9:c2:98:8c:ea:8a:2b:89:d5:46:4f:c5:b5:
aa:63:ef:77:99:36:e3:c9:13:88:66:df:67:19:11:
be:bb:8e:08:bf:9e:31:a3:bb:e3:fe:1e:6c:57:2c:
13:6e:fe:37:74:79:b6:b7:d6:7d:f0:5c:f4:16:65:
f3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:03:C1:E6:F9:8E:07:BE:76:1B:F6:60:23:49:72:0D:9E:D4:8F:BD
X509v3 Authority Key Identifier:
keyid:10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/DAPB5vmOB752G_ZgI0lyDZ7Uj70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.157.0-193.105.159.255
Signature Algorithm: sha256WithRSAEncryption
6c:c4:3c:91:1b:8b:2b:82:b7:bd:68:aa:51:2b:c5:87:4d:2c:
72:e3:d2:03:0d:e1:5b:6f:34:8c:e3:d5:db:a3:03:f2:13:c8:
d8:7d:ee:ec:1d:0a:d2:75:f1:f6:82:38:ae:a2:8d:95:d5:95:
ca:81:f3:26:29:27:73:f6:85:9f:7c:d8:f2:a1:11:8e:b5:96:
ff:9b:83:3c:79:f2:b7:bf:cc:95:51:25:ff:72:31:19:25:3f:
1b:c6:00:3e:1c:dc:d7:be:e0:92:8b:01:96:50:ba:e1:f4:fe:
33:ab:f3:ca:7e:14:82:9d:b0:c5:96:92:eb:bf:95:80:5b:d8:
83:a1:40:02:10:b9:24:7b:3a:8f:55:bd:90:4b:0c:d6:00:ae:
fb:87:20:6d:93:b2:5f:58:87:a8:2c:27:ec:c7:ed:13:04:68:
5e:c5:a6:14:db:1e:c0:a0:ae:92:d5:1b:1e:3e:5e:73:ae:e1:
fc:d5:44:6d:f2:0c:e6:25:c8:80:65:8d:17:cc:4d:8b:94:a2:
c6:b3:04:5f:89:28:0e:c3:b6:b5:4a:dc:1c:b3:31:cf:df:10:
a0:ca:37:c1:b6:b2:5e:86:fe:64:7d:21:c3:73:0c:9d:94:d4:
61:06:7b:12:70:54:4a:fa:3a:bd:9c:fb:90:c4:a5:9c:88:90:
1b:28:9a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:42 2024 by rpki-client on console-ams.rpki-client.org