Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/DA_1pQ2ndYLcednwyCqoz9I6Maw.roa
File: DA_1pQ2ndYLcednwyCqoz9I6Maw.roa (raw, json)
Hash identifier: 25EAsdevcUinL6+9eUo7+/VSHkWfV/pZ4qHpKRYNHBk=
Subject key identifier: 0C:0F:F5:A5:0D:A7:75:82:DC:79:D9:F0:C8:2A:A8:CF:D2:3A:31:AC
Certificate issuer: /CN=738fd9467821d05286f4b33be86176651b6aff3e
Certificate serial: 01857395EDFBF100E138F689022A23FCC4F1
Authority key identifier: 73:8F:D9:46:78:21:D0:52:86:F4:B3:3B:E8:61:76:65:1B:6A:FF:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/DA_1pQ2ndYLcednwyCqoz9I6Maw.roa
Signing time: Mon 02 Jan 2023 17:44:43 +0000
ROA not before: Mon 02 Jan 2023 17:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43633
IP address blocks: 5.180.128.0/22 maxlen: 24
45.128.188.0/22 maxlen: 24
91.195.90.0/23 maxlen: 24
91.213.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:95:ed:fb:f1:00:e1:38:f6:89:02:2a:23:fc:c4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=738fd9467821d05286f4b33be86176651b6aff3e
Validity
Not Before: Jan 2 17:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c0ff5a50da77582dc79d9f0c82aa8cfd23a31ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ec:18:27:a7:e1:34:2e:1c:3a:20:2e:9e:6c:
9a:e0:86:da:6e:50:f8:62:0c:b4:f1:17:08:0d:cd:
fc:77:ab:4f:50:07:eb:30:01:8e:c0:60:0f:ca:92:
90:42:b6:a1:3b:0a:2f:9c:02:6e:52:02:18:3c:e1:
bb:38:49:59:6c:9f:56:07:40:75:8a:36:1d:84:42:
7a:36:0d:47:87:2f:de:95:b4:8d:c0:5a:46:e5:1c:
09:5f:02:4a:57:6e:23:43:ab:ab:5c:4b:91:3d:48:
ba:ea:7b:d7:43:7f:ea:c4:61:e8:c5:1c:a5:68:4a:
07:5d:4c:52:a7:19:92:c5:26:78:79:ce:2a:a2:e0:
50:1b:0b:72:2b:eb:1b:7b:37:95:54:d5:a4:25:f0:
e1:84:3a:2e:3e:82:a7:f8:28:a1:63:89:ee:7a:d9:
49:9e:0a:b9:67:4e:a0:ff:96:a2:11:06:5f:af:9c:
26:9d:0b:06:e5:a7:36:bc:c0:17:2a:14:be:ee:c2:
fb:91:41:43:d3:3e:67:f8:53:af:e7:20:cd:82:87:
12:b3:6c:3d:62:d8:7d:e4:3a:d6:64:98:cb:1e:ef:
87:8c:50:f9:c3:9d:23:d8:f3:d7:e6:1d:17:79:26:
00:19:29:90:6d:36:78:6b:bb:ee:e8:8d:e1:38:f8:
9b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0F:F5:A5:0D:A7:75:82:DC:79:D9:F0:C8:2A:A8:CF:D2:3A:31:AC
X509v3 Authority Key Identifier:
keyid:73:8F:D9:46:78:21:D0:52:86:F4:B3:3B:E8:61:76:65:1B:6A:FF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/DA_1pQ2ndYLcednwyCqoz9I6Maw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.128.0/22
45.128.188.0/22
91.195.90.0/23
91.213.59.0/24
Signature Algorithm: sha256WithRSAEncryption
77:bd:ef:58:2b:fe:b0:2b:60:7a:3a:0e:5d:5c:98:a9:2e:54:
84:08:3c:bf:93:78:5d:ff:ba:cb:87:89:bf:d0:91:b6:48:88:
b4:64:a7:9a:8c:6c:ae:44:66:7f:ab:5b:ee:9d:0e:4e:4e:8e:
fe:e7:9a:41:19:fc:02:2e:a1:fd:60:44:d6:b4:15:6d:63:46:
3b:57:4e:ae:e2:07:b8:a4:62:34:f7:e8:00:52:99:48:d9:a8:
de:2d:84:f7:52:2f:6c:7c:a0:20:d3:91:a5:af:ba:3a:61:4a:
93:a2:da:0c:4a:3d:50:1d:1f:b9:64:5a:8d:5a:3b:3a:1d:b1:
ec:5a:15:3e:6e:a9:a2:5f:1a:14:68:ff:09:fe:e4:bd:1c:f4:
af:c9:e8:d7:dd:e8:11:7c:cf:1d:43:c0:cd:bc:8b:92:cf:56:
05:8b:d8:6a:63:77:f8:68:48:50:cc:59:5f:de:68:40:e5:85:
43:dc:08:69:e8:84:21:d1:a7:40:e3:ad:48:4c:5d:28:4b:fa:
21:2e:05:a1:ad:95:dd:4b:ea:c7:ce:f9:4f:12:ba:71:4f:d0:
1e:0e:09:a2:ad:56:a6:67:59:d2:7c:9b:8f:db:68:20:fa:76:
55:47:7e:47:88:64:18:ae:b0:c3:31:bd:87:49:9e:f4:48:37:
65:83:6d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:20 2024 by rpki-client on console-ams.rpki-client.org