Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/DXB-tMOVSAJoXM_QrFWFX7fhZ5k.roa
File: DXB-tMOVSAJoXM_QrFWFX7fhZ5k.roa (raw, json)
Hash identifier: X9EbCXd8USNH+WViXl8IdMjmuNJ5nbsLQ5kmar5D5Dc=
Subject key identifier: 0D:70:7E:B4:C3:95:48:02:68:5C:CF:D0:AC:55:85:5F:B7:E1:67:99
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0192052AE0793719C1C4A3363773A52792A7
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/DXB-tMOVSAJoXM_QrFWFX7fhZ5k.roa
Signing time: Wed 18 Sep 2024 12:45:48 +0000
ROA not before: Wed 18 Sep 2024 12:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6762
IP address blocks: 62.197.136.0/21 maxlen: 24
89.39.163.0/24 maxlen: 24
89.39.164.0/24 maxlen: 24
93.114.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 18:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:05:2a:e0:79:37:19:c1:c4:a3:36:37:73:a5:27:92:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 18 12:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d707eb4c3954802685ccfd0ac55855fb7e16799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:e7:9b:e9:2a:03:b8:f1:f9:b2:70:98:ca:
19:de:44:5b:de:bf:46:57:11:ad:43:2d:0a:78:37:
3c:5a:e4:71:19:c1:a8:c8:ef:7c:d1:b8:5a:fb:aa:
9d:ff:37:d1:cb:1a:65:2d:35:25:01:cb:02:a0:6a:
6c:0d:0f:e1:75:b7:57:cd:01:4b:90:0d:66:40:00:
9f:e8:b2:92:d9:fb:a6:27:65:6b:90:ad:61:4b:22:
71:a4:bd:a0:e8:60:5d:58:28:e0:ff:e5:b5:e6:10:
ed:c0:83:2e:ef:8e:73:f8:a6:51:3f:f6:f8:d4:21:
8d:ea:f8:5d:83:a7:bd:d7:52:d7:4c:78:a2:f9:bd:
ca:c4:81:71:32:34:b6:1f:63:22:09:11:ed:15:37:
76:47:ae:71:84:bd:3a:d5:20:7f:8e:4e:e1:ce:35:
bd:69:31:54:6c:e7:7d:92:ce:f3:89:a2:95:10:cb:
1b:0d:12:b1:5e:22:26:77:b6:b6:3d:54:c8:e0:36:
c6:20:b2:c0:9f:bd:06:8c:f8:6c:8f:4c:00:9b:8b:
a9:33:56:33:5f:e4:9b:b7:9c:35:14:7f:c5:a1:71:
dd:1c:5e:d8:5f:2b:76:4e:82:13:b6:fd:9c:9d:b0:
8a:42:ce:1a:03:20:b2:c2:c9:d4:b9:68:2d:60:fb:
b6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:70:7E:B4:C3:95:48:02:68:5C:CF:D0:AC:55:85:5F:B7:E1:67:99
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/DXB-tMOVSAJoXM_QrFWFX7fhZ5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.197.136.0/21
89.39.163.0-89.39.164.255
93.114.195.0/24
Signature Algorithm: sha256WithRSAEncryption
89:e5:3b:0e:6c:4c:0d:08:9b:0d:c8:a5:19:32:6f:fd:e9:96:
39:3a:e0:ab:f8:47:ea:6a:cc:af:17:82:94:30:69:8d:3e:2a:
45:d2:07:09:94:21:69:ca:96:f3:c5:d0:21:49:be:7d:76:9b:
8e:7d:db:ac:81:ed:20:ed:0c:c8:b0:37:51:97:fc:14:10:c2:
e1:16:fa:f0:a6:55:1c:47:a7:37:ed:b1:21:bb:5a:ef:5f:49:
d3:7b:f5:48:16:4b:6c:91:ae:f7:44:1e:bd:b6:f1:07:bf:5d:
8d:70:08:72:14:27:d3:e2:be:09:8a:46:3b:82:6d:64:98:1d:
18:55:e0:21:af:38:37:09:42:16:1c:e3:77:23:50:fc:2d:d9:
e4:23:a6:83:8e:e3:b9:50:6e:fb:21:15:b9:e9:b5:dc:48:10:
1e:b4:82:b5:fc:31:c5:35:a4:30:a0:15:6c:94:d3:82:f5:a1:
26:15:1f:1e:9d:dd:cc:fb:ec:b3:64:03:03:d1:7b:8a:17:35:
13:9a:1f:e2:22:8d:91:b0:24:6b:e0:f5:dd:7c:96:68:97:5c:
b0:52:c6:46:df:01:c6:6f:40:d3:2c:95:85:27:23:63:44:51:
f3:f2:d0:73:e7:80:21:f0:54:b6:80:84:fa:7f:f6:50:b7:45:
29:06:6f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 21:18:42 2024 by rpki-client on console-fra.rpki-client.org