Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/DHo6EGrJSL1TU4tFwGJNjnR55Qg.roa
File: DHo6EGrJSL1TU4tFwGJNjnR55Qg.roa (raw, json)
Hash identifier: ft47OgrXaeswijoihnklrgiSZonf21sjt4fD3OoO8hw=
Subject key identifier: 0C:7A:3A:10:6A:C9:48:BD:53:53:8B:45:C0:62:4D:8E:74:79:E5:08
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0187DB975F7B81DF5C96230654BA3AF1B423
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/DHo6EGrJSL1TU4tFwGJNjnR55Qg.roa
Signing time: Tue 02 May 2023 08:32:23 +0000
ROA not before: Tue 02 May 2023 08:32:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9335
IP address blocks: 141.98.16.0/22 maxlen: 24
45.154.24.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:97:5f:7b:81:df:5c:96:23:06:54:ba:3a:f1:b4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: May 2 08:32:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c7a3a106ac948bd53538b45c0624d8e7479e508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:59:f2:67:e3:f5:6c:68:21:9d:1b:47:40:0a:
08:f2:47:53:69:10:4e:cc:06:be:0a:06:1b:c7:0f:
f5:1a:03:a2:46:5f:6e:a5:85:35:52:83:2d:36:4a:
32:ad:42:48:38:bd:0d:c1:83:1e:19:65:e9:99:b2:
04:ff:35:e4:30:0b:f7:1b:19:ae:19:c7:1e:ed:a8:
5f:13:1a:0b:4a:8c:93:6b:1e:99:0b:3a:de:59:5b:
ad:68:7d:4f:c8:8d:70:60:2b:23:78:ce:95:b5:c1:
b2:55:34:16:28:ff:84:25:dc:e3:42:30:07:10:13:
bd:c3:19:05:91:6a:bf:f7:a5:f9:ad:2a:90:b1:7e:
e4:64:6a:55:e6:1d:f2:78:c7:9a:00:2b:ad:fd:31:
09:7a:e0:ee:91:fb:aa:3f:a2:d7:b1:47:33:a2:a8:
4b:c2:06:ce:2f:e9:f2:32:53:e8:6d:59:bb:f9:bf:
13:f5:8b:88:2e:5b:75:f1:8c:07:51:88:b8:81:fb:
29:0d:59:00:49:d2:a0:85:76:37:a5:ec:99:bb:34:
3d:f9:eb:54:76:1b:ea:5c:45:13:82:bd:24:c7:85:
6a:09:42:75:b7:ae:f1:ea:84:42:22:a5:75:3d:43:
6c:0b:99:16:b3:d2:7b:06:db:36:e7:8a:dc:c3:87:
1b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7A:3A:10:6A:C9:48:BD:53:53:8B:45:C0:62:4D:8E:74:79:E5:08
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/DHo6EGrJSL1TU4tFwGJNjnR55Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.24.0/22
141.98.16.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:b9:9b:13:08:f2:45:6a:8a:40:08:8c:4e:a7:d7:7e:55:98:
bb:da:c2:17:84:36:b9:e0:22:51:18:b6:c7:10:d7:07:36:37:
ea:75:7b:97:78:16:82:71:62:dc:c2:1b:c1:40:16:f9:c5:5a:
aa:80:ae:5d:d2:3b:cb:d6:ff:74:b9:86:a5:03:77:32:45:d1:
65:5f:06:8b:cb:6e:93:0c:29:1f:58:4a:ac:9a:1d:5e:10:ef:
eb:e0:d4:41:5b:54:92:15:6b:f7:2d:93:4e:e0:76:6e:2b:58:
d3:77:7d:13:a2:46:d2:49:45:db:d4:6d:ad:01:ef:1c:0d:1a:
ed:68:de:ce:76:af:6e:9a:6b:ac:cc:9c:d2:c8:fc:e8:f7:b2:
ff:7f:9e:28:f7:24:7c:ac:88:9b:08:df:48:13:70:e6:6b:54:
f8:fe:f9:3e:17:72:eb:bd:b9:23:c2:b2:8d:8d:aa:a1:a0:40:
99:e1:32:41:71:dc:6f:68:98:33:6b:f1:15:57:75:a0:25:3b:
8a:de:68:43:47:c3:84:ab:42:5f:b3:31:d7:c8:43:de:18:4a:
c2:4f:80:65:df:3c:a6:46:9c:31:d2:b7:2b:67:b2:4d:ff:81:
4d:1a:dd:d0:f9:90:3b:af:3a:d4:3d:6a:52:7f:cb:33:b1:ec:
23:14:5d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:17 2024 by rpki-client on console-ams.rpki-client.org