Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/DShyEtR7oL--n_KiN4UwQA1dwc8.roa
File: DShyEtR7oL--n_KiN4UwQA1dwc8.roa (raw, json)
Hash identifier: jQb7/e7iAFaAVZHfuORhIYds7Q0uDshoTQBiCWQ8l5A=
Subject key identifier: 0D:28:72:12:D4:7B:A0:BF:BE:9F:F2:A2:37:85:30:40:0D:5D:C1:CF
Certificate issuer: /CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Certificate serial: 01856D4AE2158866331648B468DDCD684461
Authority key identifier: F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/DShyEtR7oL--n_KiN4UwQA1dwc8.roa
Signing time: Sun 01 Jan 2023 12:25:02 +0000
ROA not before: Sun 01 Jan 2023 12:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1741
IP address blocks: 130.234.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:e2:15:88:66:33:16:48:b4:68:dd:cd:68:44:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Validity
Not Before: Jan 1 12:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d287212d47ba0bfbe9ff2a2378530400d5dc1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b5:c6:16:5d:79:7d:cc:98:4b:ae:89:57:9b:
9c:44:96:90:bc:73:53:92:4b:ba:28:08:61:a3:e7:
df:94:2b:2b:e5:a8:3d:e4:a4:1b:b4:95:82:98:a0:
29:de:dd:2f:fd:b0:85:18:68:48:a1:15:0a:03:b5:
15:93:f5:44:37:e7:59:96:7c:54:06:79:ff:66:7d:
10:ec:52:ff:39:a8:09:12:a6:44:91:ea:eb:6e:df:
4c:e2:6b:ca:69:3c:9f:62:47:fe:8e:ec:16:83:84:
46:12:74:23:c3:2f:b7:a2:c4:86:6a:2f:3a:f8:32:
ad:aa:c6:4e:de:0c:b3:fc:c6:b5:da:74:18:be:a3:
2f:bc:5b:f1:cf:0f:c6:1c:0e:48:94:b4:13:85:33:
1a:be:42:f7:ea:22:78:79:ca:8c:d3:11:dd:84:81:
92:45:00:96:33:d3:5a:58:6e:67:41:a7:0f:8c:08:
c2:57:66:da:e0:f3:a8:5f:b2:42:1d:f2:6c:87:3d:
35:e8:57:e7:30:3b:2b:f6:7f:2c:b7:83:92:d0:aa:
57:78:81:30:39:04:8e:e3:24:78:c7:a4:20:d3:da:
61:99:e4:54:d2:85:21:91:67:4c:bb:93:4d:7e:e8:
e8:0f:95:25:d7:a2:f7:4b:4d:9a:ce:0a:e0:96:80:
c7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:28:72:12:D4:7B:A0:BF:BE:9F:F2:A2:37:85:30:40:0D:5D:C1:CF
X509v3 Authority Key Identifier:
keyid:F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/DShyEtR7oL--n_KiN4UwQA1dwc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
16:f8:5a:44:2d:8d:62:84:7b:05:a9:e4:05:06:54:ce:15:b1:
05:36:61:9c:6f:9c:ef:d2:e0:6c:4c:62:9f:a7:9e:be:92:04:
6b:de:2f:29:66:a7:a5:0a:b1:a7:f1:cc:e1:d5:a2:b5:5f:60:
c6:19:b8:9a:ff:e6:dd:3a:11:fd:84:86:1f:87:a0:a2:35:51:
0d:b8:5c:4c:16:e0:68:89:dd:dc:da:9f:f6:06:a6:06:03:d6:
1f:fa:45:4e:8d:1b:b7:4a:01:2c:fa:01:c5:b3:f2:a1:ca:56:
c3:cd:db:bb:ea:f5:e0:08:92:b3:61:7f:ae:a3:4d:52:a8:0e:
a7:0f:85:4b:a4:1d:5d:c4:57:20:e1:f0:c6:6e:99:42:fe:61:
37:2d:7e:52:0a:e4:52:97:d4:6e:c2:07:af:49:bd:6b:4f:2d:
ea:67:e8:1c:b1:4a:c4:ed:eb:c2:f1:af:b7:95:0c:9f:35:ce:
9e:2d:87:94:53:96:04:aa:71:9d:6f:67:16:7e:4f:0e:02:70:
38:93:fa:ff:1e:ad:ad:f9:a2:81:69:5a:6a:4d:4d:6d:44:01:
28:b7:9e:0b:e6:92:2e:1b:af:13:79:ed:50:fc:31:4c:70:79:
f4:5a:dc:b3:97:51:8e:a5:9a:4a:b8:84:d6:f9:7f:3d:43:07:
a6:54:78:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:37 2024 by rpki-client on console-fra.rpki-client.org