Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/DZPQ_wIG_yvmmXNXplDml7Mx6ZU.roa
File: DZPQ_wIG_yvmmXNXplDml7Mx6ZU.roa (raw, json)
Hash identifier: dUA1qKJH2XgyX1x9x2R1MInUv69WOKaHPq7XoN/IqFQ=
Subject key identifier: 0D:93:D0:FF:02:06:FF:2B:E6:99:73:57:A6:50:E6:97:B3:31:E9:95
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 018DC5430C6089CA8ED747A16CB345AF6A04
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/DZPQ_wIG_yvmmXNXplDml7Mx6ZU.roa
Signing time: Tue 20 Feb 2024 06:45:21 +0000
ROA not before: Tue 20 Feb 2024 06:45:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 178.210.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 10:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c5:43:0c:60:89:ca:8e:d7:47:a1:6c:b3:45:af:6a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Feb 20 06:45:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d93d0ff0206ff2be6997357a650e697b331e995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ff:c8:ed:19:e4:93:d7:2a:86:4c:87:65:61:
f6:b0:0f:8a:5a:90:4d:42:5d:d8:f1:ba:8a:9e:eb:
6c:7f:2d:5a:1e:61:0a:d8:72:bf:28:9a:5b:e6:f4:
4a:26:40:fc:af:50:e8:af:9b:1c:25:ff:91:9b:ac:
d1:74:a1:bf:37:3a:68:c9:04:1c:c6:c6:54:0e:4c:
df:2b:5e:95:35:4c:f8:1f:c0:25:3e:fd:3e:a2:ba:
e0:6f:01:a3:ea:87:18:65:4a:e1:b7:cb:6b:9b:bd:
96:d8:97:50:83:20:af:5a:f4:91:65:68:ce:fd:c6:
48:65:e6:9f:ff:8d:fc:aa:36:f3:43:61:3d:42:c4:
a0:8c:a3:9c:48:b0:7c:bb:85:20:a4:3d:7b:8c:47:
14:9b:b7:52:80:92:e2:f7:13:ec:9e:8a:a1:03:83:
e6:03:f4:62:5d:64:aa:ab:c6:e9:b3:8f:d2:26:51:
6b:03:be:a5:3a:82:4e:75:85:27:cd:78:c5:38:ab:
4a:4b:30:f4:c2:6b:17:1e:a7:e2:32:d3:84:3b:b0:
5a:a3:8a:2a:77:12:b7:01:05:10:98:b8:0a:71:c7:
c3:11:38:e2:d7:c6:20:b6:f3:0f:9c:26:c2:e4:23:
34:52:19:ee:12:c3:74:63:8e:55:24:f7:50:53:03:
d8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:93:D0:FF:02:06:FF:2B:E6:99:73:57:A6:50:E6:97:B3:31:E9:95
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/DZPQ_wIG_yvmmXNXplDml7Mx6ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.181.0/24
Signature Algorithm: sha256WithRSAEncryption
43:24:83:19:80:45:5a:cb:57:58:57:29:a1:59:79:e7:47:4d:
2e:30:00:64:53:99:3d:f9:97:7c:86:13:98:82:8b:a6:ca:27:
ea:1f:99:88:f8:80:b9:72:fe:0c:30:4f:ca:d7:14:c9:f2:98:
3b:8c:46:65:b6:8f:14:79:ae:1a:43:8e:88:4d:35:c0:96:6f:
d4:76:4d:75:bf:3f:00:8c:4e:14:3e:93:2e:bd:53:d7:13:67:
0f:4f:c8:79:e9:2a:f9:85:93:13:b9:04:7d:13:4c:bc:e6:83:
61:ec:11:77:2e:b5:7a:c3:e4:36:53:1c:92:b7:22:f5:ef:bf:
fe:aa:59:9f:7d:b6:84:83:e3:46:7c:d2:06:22:be:da:84:a2:
61:cd:41:b3:9c:26:f4:d4:4b:32:80:9f:80:76:44:b8:a7:9f:
89:50:87:9e:09:51:a3:57:a6:67:86:02:4e:61:3e:cb:67:c7:
6d:40:56:0f:4c:fd:5a:f5:1a:25:46:b3:a2:a8:ae:81:bc:51:
51:96:c4:a9:c6:fd:89:1f:12:e8:76:0a:6a:aa:99:af:a4:9c:
97:12:51:95:b5:fc:f2:84:60:06:4b:97:d9:e1:1d:50:50:61:
a9:59:7c:71:0c:ae:c4:f1:ba:7c:06:ae:76:1e:4b:20:7d:24:
bc:0d:07:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 14:54:02 2024 by rpki-client on console-fra.rpki-client.org