Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/DAFHE-ykv-GAiqN2Ego1sGtVkfI.roa
File: DAFHE-ykv-GAiqN2Ego1sGtVkfI.roa (raw, json)
Hash identifier: zFMTZJ7dNT3fsVP3+K0ikYe8PMtVndaXf9U7wuNRwzQ=
Subject key identifier: 0C:01:47:13:EC:A4:BF:E1:80:8A:A3:76:12:0A:35:B0:6B:55:91:F2
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0185727A3A6C5E9332A8046EE75C95594842
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/DAFHE-ykv-GAiqN2Ego1sGtVkfI.roa
Signing time: Mon 02 Jan 2023 12:34:50 +0000
ROA not before: Mon 02 Jan 2023 12:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64267
IP address blocks: 82.115.8.0/22 maxlen: 24
185.129.108.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:3a:6c:5e:93:32:a8:04:6e:e7:5c:95:59:48:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c014713eca4bfe1808aa376120a35b06b5591f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:11:b5:15:42:91:23:d3:50:f9:56:23:99:9d:
a1:a7:4b:91:17:88:48:e0:49:06:a0:8a:ee:24:e0:
f3:82:ca:7d:3c:c3:d4:56:a9:05:20:8c:87:cc:60:
38:e8:12:c8:97:bf:f1:8d:87:df:fe:63:76:3f:be:
22:00:f5:c1:45:6e:a7:6e:bb:a9:82:34:b7:e5:86:
09:0b:45:2d:3c:8c:b6:da:e0:b6:6f:02:ae:02:00:
fb:5c:25:f8:71:90:3c:d0:59:2f:60:7d:f6:19:25:
ad:17:20:26:a1:05:0d:39:5c:f9:7f:83:8b:59:23:
0d:60:d6:dc:fb:91:ca:2b:bb:50:85:a7:32:79:e7:
cc:95:0e:98:4b:a3:cd:77:d6:a2:7e:8e:38:8b:f1:
fa:c3:18:e8:ed:0d:bd:29:4e:b6:0e:56:64:95:41:
ec:1d:40:56:6f:d9:72:14:aa:f5:02:03:4c:50:d2:
18:26:2f:06:6c:c4:bd:5e:a8:fc:75:a8:8a:7f:dc:
5d:35:2a:28:ec:b1:4d:42:75:c4:f7:81:a0:ed:0a:
1d:f8:1a:82:ed:cb:5c:25:f7:f3:42:7e:44:48:c9:
37:02:b1:e6:eb:d0:aa:55:7e:bb:8d:d5:c8:7a:f1:
3a:3f:3a:b1:5d:a3:9f:5b:7f:3a:a3:c3:47:9e:4f:
1f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:01:47:13:EC:A4:BF:E1:80:8A:A3:76:12:0A:35:B0:6B:55:91:F2
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/DAFHE-ykv-GAiqN2Ego1sGtVkfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.8.0/22
185.129.108.0/23
Signature Algorithm: sha256WithRSAEncryption
42:43:e0:d3:c2:58:c0:4b:21:5c:45:e2:90:2f:85:0a:a6:c9:
09:bf:19:2f:a5:4c:aa:32:b5:e9:df:9f:1b:98:6c:53:cf:55:
58:3f:01:ed:8e:f1:1f:81:83:bb:d7:f3:5c:d0:8b:55:99:11:
71:4b:49:9c:4c:a6:b5:15:0a:f2:48:6c:69:e0:97:45:7c:ce:
58:9a:96:05:fe:ed:c6:bc:d7:f2:fc:f6:23:39:62:25:72:9c:
6e:31:df:8a:e8:90:71:af:c8:eb:03:43:65:06:84:8a:8f:e1:
0d:c8:d6:7c:a4:be:0e:ff:bf:4f:80:74:82:e5:a4:86:87:59:
96:e5:bb:ff:37:53:86:1f:9e:1f:c8:74:82:70:bd:c0:05:81:
45:39:c6:6b:ad:ef:b0:3b:20:b1:a6:8e:d6:94:b0:18:f9:7b:
de:e1:ab:36:a6:ab:6d:dd:0e:ac:01:2d:db:6d:fd:99:8e:20:
30:3a:fa:0b:28:8a:74:e7:26:d9:e3:52:59:75:6d:29:8f:37:
bb:41:2f:79:71:f0:4f:26:18:0d:8c:ce:ec:0a:d1:1d:b2:67:
4f:c5:f6:ed:5c:3f:4b:5a:80:32:19:ea:16:5f:8f:7a:60:48:
9e:7d:ed:82:d0:e6:66:46:1e:00:5b:1c:fa:06:75:cc:c7:42:
8e:25:57:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org