Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DWBkm_DjC5stTAxehMygKappYMQ.roa
File: DWBkm_DjC5stTAxehMygKappYMQ.roa (raw, json)
Hash identifier: i8qoEz4IYp7VTTb+hx5STwNjQZQ1ic1teW/5b663HOE=
Subject key identifier: 0D:60:64:9B:F0:E3:0B:9B:2D:4C:0C:5E:84:CC:A0:29:AA:69:60:C4
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018755927B74C3DE0DBA394F50CE480C5B6F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DWBkm_DjC5stTAxehMygKappYMQ.roa
Signing time: Thu 06 Apr 2023 07:57:55 +0000
ROA not before: Thu 06 Apr 2023 07:57:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 81.168.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Apr 2023 12:58:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:55:92:7b:74:c3:de:0d:ba:39:4f:50:ce:48:0c:5b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 6 07:57:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d60649bf0e30b9b2d4c0c5e84cca029aa6960c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:2c:da:66:b6:56:4b:4a:a2:db:0c:27:b3:
06:cb:ee:d0:dd:8e:90:16:04:23:a0:43:18:b7:01:
22:d5:5b:75:2b:93:1d:2a:5a:de:b0:49:75:d3:1d:
a5:18:c5:59:e3:f2:8b:0b:d3:46:f1:a5:21:ad:ac:
a1:53:3b:c0:99:b1:d2:a4:17:56:95:ba:0a:07:97:
63:a1:11:2e:49:7f:3f:72:14:1f:01:4c:dc:99:79:
6e:88:20:30:34:ea:da:3f:d3:9f:e9:b3:de:bf:3d:
77:70:c0:95:d7:92:55:aa:ed:9b:3e:19:d0:b8:e9:
13:d8:2d:c2:a6:08:af:7c:4c:02:1d:aa:09:31:9b:
a1:0e:5b:fb:c7:29:58:c3:d8:c2:64:16:4c:89:5a:
cc:3a:88:8d:28:40:64:92:30:3d:e5:64:48:e6:9e:
c0:64:70:30:ac:1d:fd:dd:78:b6:8c:18:d8:3a:ff:
e2:76:c6:98:2b:0c:0f:57:a7:b9:f8:c8:9a:9b:a9:
26:b5:f0:67:6b:e9:cf:03:28:b0:aa:18:79:39:9e:
cd:ae:bb:12:ac:cf:ac:b5:78:5f:77:93:9f:86:2b:
f7:84:f3:19:d2:3c:7d:a9:26:8e:dd:6f:1b:a2:e4:
d0:ec:17:d3:4f:fd:61:c6:97:66:1f:7e:da:07:22:
b1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:60:64:9B:F0:E3:0B:9B:2D:4C:0C:5E:84:CC:A0:29:AA:69:60:C4
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DWBkm_DjC5stTAxehMygKappYMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.123.0/24
Signature Algorithm: sha256WithRSAEncryption
73:6e:79:af:0e:8f:99:f6:02:20:20:89:b6:8f:13:29:64:8f:
b6:65:ba:10:0d:74:e7:7b:8a:51:92:fa:3d:14:93:f2:b7:58:
60:87:3a:80:12:88:3d:80:b7:ed:c7:8b:7d:15:b0:37:99:7c:
4a:ae:f5:53:27:97:f2:43:d8:b2:b3:ce:84:fb:dc:30:40:e0:
12:c2:41:7e:78:01:1e:0b:c8:65:fa:df:84:75:7d:52:a9:f5:
c6:2c:c3:85:61:6e:f7:6d:67:39:76:72:2c:86:70:2a:7c:05:
9a:b3:de:f6:91:78:a2:6e:75:ec:37:37:07:47:5e:1a:71:52:
b1:fd:5c:18:7c:9e:bb:16:e3:ce:b0:28:51:4c:8d:86:ef:e6:
66:6a:8f:24:5f:b7:dd:55:b2:fe:2a:e6:30:53:5d:cc:f1:78:
f0:91:ff:d2:ec:54:fb:30:16:c8:2e:e3:d8:79:58:5e:c2:c2:
0c:be:ed:ba:26:82:65:34:84:31:13:19:0a:39:8c:c7:ac:81:
6c:c8:cb:d9:14:7a:a4:41:cf:de:04:40:bb:41:98:0d:86:37:
8a:b5:b3:df:e8:e3:15:eb:29:da:20:f5:e1:d0:ad:ed:62:d9:
3f:d4:18:f6:ca:e4:6c:6e:10:b7:58:27:05:f4:86:0f:ec:de:
e9:f2:1b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:21 2024 by rpki-client on console-ams.rpki-client.org