Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/DLHt-ji_68-u8lZ-aVQPbd2wOfA.roa
File: DLHt-ji_68-u8lZ-aVQPbd2wOfA.roa (raw, json)
Hash identifier: +dWtYwkARzIjur4bfjfRdIj4fkJ2DPiy8KfGTfBK+a8=
Subject key identifier: 0C:B1:ED:FA:38:BF:EB:CF:AE:F2:56:7E:69:54:0F:6D:DD:B0:39:F0
Certificate issuer: /CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31
Certificate serial: 01856F79906CC064D395819A1102071E4B19
Authority key identifier: 15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/DLHt-ji_68-u8lZ-aVQPbd2wOfA.roa
Signing time: Sun 01 Jan 2023 22:35:15 +0000
ROA not before: Sun 01 Jan 2023 22:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4755
IP address blocks: 185.150.216.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:90:6c:c0:64:d3:95:81:9a:11:02:07:1e:4b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31
Validity
Not Before: Jan 1 22:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cb1edfa38bfebcfaef2567e69540f6dddb039f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:51:11:40:5f:fb:fe:c5:20:3f:17:30:4a:
d6:fb:5a:c1:f9:45:76:76:f1:ca:be:a0:e1:ba:2c:
e6:54:ae:f0:a5:9e:70:d1:ee:94:12:e1:41:27:0e:
ff:5e:c2:24:97:9f:56:65:fd:be:50:9c:9e:89:1b:
0f:f0:a6:e0:b9:26:b2:6d:5f:41:c5:47:3d:db:54:
a5:23:af:83:b9:cf:d0:bf:83:2c:bc:9e:3b:b2:b9:
52:3a:e4:6b:3a:41:53:0c:ef:a8:cb:7b:f1:6c:84:
36:09:4f:de:01:95:d9:ee:07:fd:cd:c8:0b:df:23:
b4:55:c9:a2:0e:9d:c5:bb:85:f9:66:9d:13:c0:47:
5d:98:4c:48:91:15:01:7a:ca:63:52:94:07:a0:43:
6f:7f:2f:76:69:8a:bf:bd:61:be:d2:b0:0e:98:1c:
65:82:27:a2:df:f5:e3:bd:d7:72:ec:d1:63:b7:e4:
36:09:ba:29:6e:f1:3e:1a:bc:5f:59:18:e5:77:12:
f2:00:f5:85:f0:65:6d:91:4c:52:de:b0:12:d9:ba:
08:21:57:f9:ae:73:35:f7:5c:8b:ae:a2:ac:6d:7b:
3e:1c:74:55:87:cf:c9:ac:7e:32:84:08:58:e8:36:
e2:4a:29:bc:4b:80:6c:79:ad:be:c7:2d:36:2b:76:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B1:ED:FA:38:BF:EB:CF:AE:F2:56:7E:69:54:0F:6D:DD:B0:39:F0
X509v3 Authority Key Identifier:
keyid:15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/DLHt-ji_68-u8lZ-aVQPbd2wOfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.216.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:2b:60:41:fa:05:d7:b7:b8:ca:0a:57:5e:bf:d8:19:a9:8d:
0d:ae:62:81:95:6d:d6:cc:5a:7f:fb:da:9c:16:ac:ae:87:3f:
26:82:5c:ec:89:8d:ba:b8:70:44:75:02:37:73:32:18:94:73:
e9:3e:a8:ac:6a:8e:80:1a:2c:a6:b4:13:9e:6a:93:b1:73:21:
75:85:54:70:42:5c:20:7e:42:3f:9c:0b:2b:93:1e:d2:ba:51:
9d:68:d3:92:c1:27:d0:70:32:8b:f4:12:50:bc:3d:64:3c:b0:
ea:0e:3d:02:13:68:09:11:92:1d:b2:84:70:c7:42:4b:d2:4d:
32:52:96:ba:90:85:f7:2f:e1:85:8e:41:f5:06:81:14:1d:07:
64:cf:68:ae:38:db:a5:99:ec:99:a4:a3:43:f2:03:e4:d4:07:
5e:ef:84:42:8a:9b:a0:ed:46:f7:c5:80:79:53:77:57:d6:36:
bf:41:4a:fd:58:9d:e4:3a:ff:71:1e:91:ea:9b:a2:c3:2c:5b:
b2:66:3d:e8:82:c9:d5:1d:85:c2:e7:99:fd:e5:41:a4:a2:b4:
97:a4:96:86:bf:33:b4:a5:2d:48:51:43:4e:45:9b:92:04:f1:
ba:ea:1a:5a:c8:65:83:17:fb:23:1e:3e:96:03:32:3a:cf:14:
d1:9e:ea:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:55 2024 by rpki-client on console-ams.rpki-client.org