Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/DLK1BCBxZpGz5FgyIkK_LuFvA6I.roa
File: DLK1BCBxZpGz5FgyIkK_LuFvA6I.roa (raw, json)
Hash identifier: 4IBH+x5ahPyBsMmHQN2z7NsjcSgrh6k8XF8xrQKomWg=
Subject key identifier: 0C:B2:B5:04:20:71:66:91:B3:E4:58:32:22:42:BF:2E:E1:6F:03:A2
Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial: 01856E78FFDF86882E06917CD374B8F60D13
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/DLK1BCBxZpGz5FgyIkK_LuFvA6I.roa
Signing time: Sun 01 Jan 2023 17:55:01 +0000
ROA not before: Sun 01 Jan 2023 17:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198826
IP address blocks: 185.253.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:ff:df:86:88:2e:06:91:7c:d3:74:b8:f6:0d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
Validity
Not Before: Jan 1 17:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cb2b50420716691b3e458322242bf2ee16f03a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c0:9b:65:c7:44:41:96:32:d4:ec:16:fe:99:
bb:86:db:01:06:a3:ea:f2:ee:73:8d:41:ca:2c:63:
d9:a6:63:6d:13:40:83:22:1c:ff:95:fb:6e:06:69:
2d:f2:f0:e6:93:43:55:3e:af:d2:82:c8:a7:a0:3b:
7e:96:c6:01:da:50:41:07:6c:db:27:20:ce:d7:7b:
0a:21:99:24:f8:18:c0:5a:16:1c:83:c8:9e:e1:cc:
ff:da:29:96:ff:69:a5:5f:b5:9e:18:d3:f0:3d:7e:
63:71:4d:52:a1:2b:2c:c6:6e:6d:d0:33:1c:54:d5:
a4:39:93:dc:59:13:25:a7:55:ed:95:a1:fb:17:ee:
73:4c:3f:ed:83:c4:a6:ad:4b:2b:e0:63:9b:24:11:
32:9f:49:83:39:3e:31:7f:ce:e9:c3:51:3c:a3:7d:
39:11:d1:b0:3c:c6:dc:32:89:23:72:18:df:94:90:
9b:3a:9a:b2:b0:cd:cf:39:3f:24:34:c5:6f:15:9b:
94:db:ee:9c:98:ac:c2:a5:0d:ac:eb:17:f7:81:2e:
57:65:e2:b5:5e:b0:f9:5d:9d:87:46:24:2d:2d:ad:
f0:94:71:23:c2:35:3a:67:09:30:0a:e3:cb:2f:95:
e4:47:2a:cf:59:36:b2:ca:60:68:dd:eb:dc:ab:03:
25:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B2:B5:04:20:71:66:91:B3:E4:58:32:22:42:BF:2E:E1:6F:03:A2
X509v3 Authority Key Identifier:
keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/DLK1BCBxZpGz5FgyIkK_LuFvA6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.138.0/24
Signature Algorithm: sha256WithRSAEncryption
66:15:5f:a4:fd:ac:d2:d0:3a:4f:6a:65:a7:89:6c:a9:d2:9c:
c9:4e:42:e5:0f:20:2e:ef:5b:31:a0:61:73:b0:b9:4b:bf:15:
c4:f4:ec:a9:a1:2e:b4:e7:78:23:94:a4:4d:7b:07:dc:b1:e1:
98:b9:a9:a7:94:f2:88:89:69:8e:52:1d:fb:be:38:85:3a:1b:
af:5e:ea:21:7d:58:24:59:78:a6:04:32:f3:76:5c:e9:52:c9:
85:d5:1c:33:8e:77:62:56:aa:c1:1d:c8:be:6a:bf:fd:67:4f:
b5:cb:7f:c9:50:15:fa:ff:f8:1e:e2:c7:54:55:39:05:28:83:
98:37:e4:b6:6b:43:b6:85:d5:b0:42:06:08:bd:56:21:c9:a8:
68:ab:56:45:54:bc:c2:ca:26:c8:39:e6:ce:77:fd:a9:45:1d:
e9:fc:24:e0:50:f3:b8:d5:45:a5:ca:8b:6a:54:a2:68:4c:27:
9a:6a:93:8d:af:78:74:ec:7a:34:56:35:5d:45:d4:bb:ad:fd:
d4:bd:ca:00:45:b1:79:d9:eb:4d:a2:59:1b:e9:7e:69:48:2c:
78:3a:c9:13:63:d8:e6:97:cc:d9:74:80:2d:e8:59:22:f1:dd:
fd:07:5b:b8:23:85:9c:03:b2:a3:c9:9e:68:3e:c1:31:79:b1:
9f:d8:f4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:55 2024 by rpki-client on console-fra.rpki-client.org