Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/DWI6DyYQD5I__GFxev6z8eHKKaQ.roa
File: DWI6DyYQD5I__GFxev6z8eHKKaQ.roa (raw, json)
Hash identifier: BRiQGxm54qHy+i+D3n5ntuBJto5AYp6zqLAmF1990X8=
Subject key identifier: 0D:62:3A:0F:26:10:0F:92:3F:FC:61:71:7A:FE:B3:F1:E1:CA:29:A4
Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial: 01857102E33EC9F3E317C69F27292033C755
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/DWI6DyYQD5I__GFxev6z8eHKKaQ.roa
Signing time: Mon 02 Jan 2023 05:44:52 +0000
ROA not before: Mon 02 Jan 2023 05:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31027
IP address blocks: 185.163.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:e3:3e:c9:f3:e3:17:c6:9f:27:29:20:33:c7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
Validity
Not Before: Jan 2 05:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d623a0f26100f923ffc61717afeb3f1e1ca29a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cf:d0:5a:4a:b7:66:91:ae:db:14:58:6e:30:
f6:54:c2:bd:31:0c:4e:a3:b1:83:7f:2f:3c:e9:ae:
a2:7b:a3:b5:ef:9d:5b:7e:03:99:73:00:83:47:07:
ba:a8:90:ad:f8:53:9c:d5:3a:55:95:12:f6:1f:da:
2e:08:f1:d1:3c:93:d9:d2:cb:40:fc:25:7c:71:0b:
27:93:3c:15:e2:83:84:7a:13:17:37:27:de:57:8b:
68:81:0e:e6:3b:0d:7c:23:ae:50:89:ce:b4:f9:df:
eb:95:9f:5a:35:be:8a:8f:86:2f:ab:2b:24:d0:ed:
69:f2:96:a7:40:17:5f:1e:0a:11:7e:9f:a8:25:99:
a2:33:1b:8a:0b:ce:a8:f6:b0:e3:3d:54:6b:95:8a:
5c:fe:fa:79:27:2a:25:3b:98:ae:30:97:70:23:d8:
69:eb:4b:c7:47:20:09:40:16:af:0d:d7:20:61:38:
fe:fd:87:dd:4d:f5:d0:3c:d6:c3:58:49:2d:8a:f8:
c3:fd:1e:1e:9c:e0:f0:d8:da:3e:40:b0:f7:52:81:
e5:ef:0a:58:fe:53:ca:77:07:34:7f:35:19:dd:3f:
e9:79:d3:99:4d:8a:4d:7b:ea:a5:ed:4e:7e:f3:2e:
3d:6e:dd:f7:ca:f2:a7:28:9a:3f:20:3d:bc:40:36:
6a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:62:3A:0F:26:10:0F:92:3F:FC:61:71:7A:FE:B3:F1:E1:CA:29:A4
X509v3 Authority Key Identifier:
keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/DWI6DyYQD5I__GFxev6z8eHKKaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.196.0/24
Signature Algorithm: sha256WithRSAEncryption
be:91:5c:e1:3d:eb:13:78:38:d7:ab:36:53:af:1c:2a:53:9d:
7d:93:be:b9:09:b3:25:61:99:18:bd:e7:a7:9c:25:f5:92:60:
25:a4:9c:c5:05:ea:49:6a:a9:51:80:b9:64:e3:05:99:80:ac:
b9:3b:65:c5:d0:e1:f4:cd:1c:aa:bc:56:39:85:7f:f2:68:7a:
23:eb:a6:c7:d9:2b:ad:80:a3:05:27:16:fe:e4:1b:b6:9d:d0:
f3:8c:0a:67:2e:10:60:92:ce:be:9e:58:08:98:da:97:f1:98:
75:8f:26:0d:96:01:28:36:0c:dc:47:08:5a:c6:2c:ee:9f:05:
ed:ed:92:58:0d:d8:9c:b2:cd:0b:30:fe:69:8b:9a:a0:01:3f:
14:ad:9d:6e:2b:16:40:26:f9:92:c4:ce:82:e8:84:b5:10:da:
a2:9b:56:cd:13:97:d3:a7:8e:9a:47:20:0b:35:14:17:37:b3:
20:fa:80:2e:49:81:ce:6b:f4:c0:66:dd:78:b9:62:84:b4:1c:
a3:c8:39:65:70:57:be:6d:88:e6:f1:88:89:1d:49:74:ec:da:
44:77:b9:3f:49:de:4f:e9:53:49:b4:53:02:8a:9b:a6:a8:bf:
62:60:0a:02:96:70:d6:ec:43:f4:5d:9f:b0:8d:23:80:d2:42:
c8:f3:2b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:20 2024 by rpki-client on console-fra.rpki-client.org