Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Dpwhs_0NkZNi77bSdaqPn5_vass.roa
File: Dpwhs_0NkZNi77bSdaqPn5_vass.roa (raw, json)
Hash identifier: GJzHG9XbENDzLFE82IGp1z72T9YemHrflcUah82k8eI=
Subject key identifier: 0E:9C:21:B3:FD:0D:91:93:62:EF:B6:D2:75:AA:8F:9F:9F:EF:6A:CB
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0187BC6EA890CC6789435D24F372EE060815
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Dpwhs_0NkZNi77bSdaqPn5_vass.roa
Signing time: Wed 26 Apr 2023 07:19:41 +0000
ROA not before: Wed 26 Apr 2023 07:19:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.163.224.0/22 maxlen: 24
31.186.176.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 May 2023 11:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bc:6e:a8:90:cc:67:89:43:5d:24:f3:72:ee:06:08:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Apr 26 07:19:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e9c21b3fd0d919362efb6d275aa8f9f9fef6acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c3:53:d2:a2:63:94:99:f2:05:0d:75:d3:db:
57:d5:ca:3b:52:f9:d5:72:0d:7c:20:56:16:a1:f8:
d9:0c:66:18:38:83:0a:6c:38:01:d1:bd:c4:14:b4:
21:c1:c7:88:43:d2:2a:a0:14:7d:2d:b8:3e:25:cb:
4f:6e:b0:32:6a:8a:49:34:2d:ff:47:a9:f8:91:cf:
da:44:d1:3a:f2:4a:7e:a1:73:63:22:5f:60:8c:c4:
ce:49:5a:f2:c5:06:aa:dd:b3:81:38:6d:b3:26:f7:
2d:d7:5e:b2:4a:f4:0e:10:90:89:c9:70:2c:2b:66:
73:a7:e7:2c:30:85:0c:d3:ba:22:8d:42:bb:f6:f8:
53:c3:88:9f:04:a0:74:2a:6f:25:df:8c:63:a3:3f:
61:02:d7:f9:60:b9:fc:2c:cf:9c:bb:2f:b5:f1:60:
ab:4a:44:d9:18:38:b6:81:21:48:4b:46:a0:6e:9c:
0b:ce:87:d2:13:1a:b3:41:8a:6c:b0:a5:5e:8f:d4:
b6:73:51:d2:52:98:bb:29:83:53:78:31:19:c7:03:
22:8d:37:b9:ce:d5:4a:e8:49:e5:d5:c7:f2:8d:05:
67:a1:e1:19:7f:32:43:7a:d0:b5:e9:38:a8:38:29:
7f:b5:1f:86:91:cf:51:79:32:33:9a:11:4f:cb:c6:
9f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9C:21:B3:FD:0D:91:93:62:EF:B6:D2:75:AA:8F:9F:9F:EF:6A:CB
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Dpwhs_0NkZNi77bSdaqPn5_vass.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.176.0/22
82.163.224.0/22
Signature Algorithm: sha256WithRSAEncryption
94:6f:70:93:4f:2d:2f:96:90:69:09:8e:1a:72:93:19:de:17:
5b:a6:e9:c7:ea:59:f7:a3:29:2b:b4:1a:fa:e8:f7:40:38:27:
85:99:a4:d3:d4:48:0e:86:98:3d:bc:ae:2f:cc:5e:02:f9:22:
ee:17:51:03:5f:dc:51:68:55:28:d7:04:b9:cd:d0:0b:5d:4c:
e5:cc:8f:7e:14:fa:59:30:89:42:29:68:d5:a4:2c:9a:d5:ed:
48:dc:4d:0c:eb:d5:c3:28:06:64:90:bf:38:04:e7:35:1c:52:
9f:f0:3f:3f:7d:71:02:1a:82:42:95:c6:f4:0d:34:7c:78:7a:
27:4f:22:09:d4:b3:bd:3d:60:79:e9:e1:36:2a:b9:7c:bd:cd:
6b:6a:0f:60:3e:0b:92:79:d4:25:57:fe:bc:3a:29:1d:7c:39:
a4:60:e3:39:57:5e:94:3a:38:30:a9:bb:3a:9c:b6:e7:d7:99:
71:dc:ee:e0:07:08:4c:02:26:8c:ac:72:2a:f8:32:2c:10:39:
e6:b4:75:f2:ad:f5:30:52:43:32:85:0d:74:29:87:ca:52:0a:
3b:dd:f9:29:eb:11:71:e1:6e:ec:b5:1c:f1:91:b7:ec:a4:53:
36:d6:41:ed:7c:c4:79:6d:70:a2:51:df:2e:1a:8d:67:13:c1:
94:a8:7a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org