Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/Dd_R31ZCDitbUg5iBf1ZwsJMoxM.roa
File: Dd_R31ZCDitbUg5iBf1ZwsJMoxM.roa (raw, json)
Hash identifier: 2axqLT1ZKJE185Uc5KQm3Pj6uD1CAKBe943/g+vOyoU=
Subject key identifier: 0D:DF:D1:DF:56:42:0E:2B:5B:52:0E:62:05:FD:59:C2:C2:4C:A3:13
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018570306A26FC0DEDB366E5982FA488471F
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/Dd_R31ZCDitbUg5iBf1ZwsJMoxM.roa
Signing time: Mon 02 Jan 2023 01:54:59 +0000
ROA not before: Mon 02 Jan 2023 01:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47324
IP address blocks: 195.56.124.0/24 maxlen: 24
195.56.125.0/24 maxlen: 24
91.120.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:6a:26:fc:0d:ed:b3:66:e5:98:2f:a4:88:47:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 01:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ddfd1df56420e2b5b520e6205fd59c2c24ca313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:64:c7:ae:62:0e:18:c8:e1:20:a4:c9:79:47:
7d:60:42:b1:72:62:82:64:ad:27:d8:56:3a:b6:ac:
25:d1:d2:8c:ae:ca:3e:70:21:a3:27:50:f3:99:14:
97:58:8a:b1:d1:57:b0:67:c9:25:d9:f4:53:ac:dc:
01:83:e0:ad:b0:b4:91:42:55:4f:57:55:9c:8d:13:
64:dd:04:fc:e3:d0:10:07:87:1d:df:48:d5:04:d2:
b2:86:b6:31:93:7a:76:36:fc:6c:cf:e9:f5:bd:1a:
d9:a1:bd:93:e0:85:ba:73:92:b2:8d:a5:ce:53:6b:
df:e9:9a:13:3e:32:0d:60:b2:c8:65:24:11:52:f2:
81:55:a5:cf:c9:33:f3:46:b3:bd:61:5c:86:df:9e:
d9:9b:93:ba:16:67:ee:01:6f:57:1b:ef:a4:d3:f7:
78:e9:00:b6:f4:4e:c7:e7:a5:e3:0c:55:c7:2d:fd:
78:17:03:be:a7:08:49:6d:3d:03:2b:e5:9d:31:e5:
73:20:34:41:db:98:0e:46:d5:56:d5:55:d1:69:f0:
a7:a6:1e:36:2d:0e:c8:59:b4:d0:14:f5:38:18:6b:
bb:7e:c1:0a:f8:72:b0:de:0e:eb:f5:71:ba:cd:2f:
a9:33:33:80:fa:cf:f2:25:c2:44:b8:93:ce:c4:1c:
b7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DF:D1:DF:56:42:0E:2B:5B:52:0E:62:05:FD:59:C2:C2:4C:A3:13
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/Dd_R31ZCDitbUg5iBf1ZwsJMoxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.120.33.0/24
195.56.124.0/23
Signature Algorithm: sha256WithRSAEncryption
34:c3:30:9e:1d:64:b6:ee:19:2a:4c:27:f9:66:d1:46:f7:81:
03:f2:66:e6:bd:15:90:81:55:d0:a7:85:7d:a2:b1:de:a1:5b:
0d:9b:ef:37:a4:c2:ad:dd:96:78:08:71:b5:29:24:4b:49:8b:
0b:6c:af:9c:0c:d4:27:40:91:b1:f2:7b:dd:a9:70:0f:8b:e9:
1b:71:20:83:7b:a3:81:a6:58:66:12:0d:9d:b7:7b:e7:ef:04:
b8:0e:e0:36:9d:10:8d:51:49:10:37:23:e1:3b:68:c5:bf:36:
53:ee:20:94:a4:58:b0:c6:ca:fa:52:eb:e3:98:85:08:d2:6a:
8b:ce:71:94:0e:de:65:35:4f:7b:ed:57:85:d0:ec:5c:26:3d:
3f:21:ad:99:6a:3f:b6:67:e9:54:97:76:c2:ce:99:74:fe:dc:
2a:fd:0f:ee:41:bd:54:08:9f:de:75:c3:5a:57:de:99:71:9b:
ff:92:47:df:24:cf:8b:c5:08:6d:75:e4:81:db:e1:81:78:bd:
6d:02:98:ac:6f:9b:bc:e0:b6:01:10:58:cd:e6:84:8c:02:45:
bd:56:b5:b6:c5:d1:ce:53:22:7b:f9:38:d1:f0:30:96:a3:10:
d6:62:fb:c9:5e:69:88:a5:5c:fe:71:52:28:e5:0a:41:8d:9a:
40:85:0f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:51 2024 by rpki-client on console-ams.rpki-client.org