Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/DGpcxa9AbOJRgNWGcZzwaXz2PsE.roa
File: DGpcxa9AbOJRgNWGcZzwaXz2PsE.roa (raw, json)
Hash identifier: c9KBsxiIbtHyjy7jExt/5uRIhEi0043QmEgXK8l85JQ=
Subject key identifier: 0C:6A:5C:C5:AF:40:6C:E2:51:80:D5:86:71:9C:F0:69:7C:F6:3E:C1
Certificate issuer: /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial: 018CC2DAE6FE1E3E2AFEA7E9E14D8CD0C6A2
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/DGpcxa9AbOJRgNWGcZzwaXz2PsE.roa
Signing time: Mon 01 Jan 2024 02:29:35 +0000
ROA not before: Mon 01 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212285
IP address blocks: 185.107.135.0/24 maxlen: 24
185.107.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 14:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e6:fe:1e:3e:2a:fe:a7:e9:e1:4d:8c:d0:c6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c6a5cc5af406ce25180d586719cf0697cf63ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3e:26:1a:ab:d3:40:ae:96:b2:3c:1b:16:99:
a4:bf:2b:f7:b1:7e:da:d2:30:0a:e6:d1:01:45:60:
dd:b9:ff:cb:ef:8d:06:5b:17:57:fe:77:b7:f1:ef:
36:7f:94:e5:4e:9c:09:53:12:88:9b:8f:e1:8b:08:
50:24:26:c1:a2:aa:41:b9:e4:14:15:e4:ec:55:10:
0e:74:e2:48:f5:fb:ca:c8:22:96:07:20:a2:44:13:
3c:42:5d:e0:7f:a4:a4:e5:2c:28:0c:64:a7:27:7b:
5d:74:8c:0b:21:2a:65:7a:f1:8d:22:17:46:4d:f5:
65:c3:3e:0f:e3:98:11:a8:90:90:8b:21:6c:c3:69:
b6:82:e0:d5:00:fa:41:e3:f1:0e:e1:9f:bb:c4:04:
80:1c:a8:cc:46:d5:52:29:13:f4:68:a5:44:1e:16:
26:e9:9e:7c:5c:90:2b:b8:1f:06:1c:92:87:f7:6b:
8b:65:cb:da:f3:87:73:27:8e:46:ec:ae:db:1e:05:
b5:39:86:11:80:14:13:3a:2e:0a:50:90:af:73:68:
ee:da:68:3d:9c:d1:aa:3a:96:9b:71:42:5f:3e:6f:
79:3c:b2:3a:df:d4:e1:a8:74:67:ef:bb:ae:38:65:
6e:76:6a:d2:76:bc:3e:d1:a3:b6:f8:b3:08:f3:13:
f5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6A:5C:C5:AF:40:6C:E2:51:80:D5:86:71:9C:F0:69:7C:F6:3E:C1
X509v3 Authority Key Identifier:
keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/DGpcxa9AbOJRgNWGcZzwaXz2PsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.134.0/23
Signature Algorithm: sha256WithRSAEncryption
83:84:1a:ea:68:a5:b2:42:d1:b8:0c:9a:62:45:81:54:aa:55:
75:b3:2b:98:4c:55:f2:f9:e1:74:03:e8:b7:8c:f0:72:66:13:
f8:50:eb:30:33:bc:06:0f:3c:fb:48:dc:64:14:fb:f1:1b:df:
9a:8e:c0:a8:24:44:93:3b:aa:f3:e2:01:9f:dc:7a:77:54:43:
62:62:68:86:07:07:36:9e:bc:3b:7d:19:6b:a5:17:15:9a:35:
3e:7a:6e:21:a8:21:e7:28:bd:0e:fa:57:6d:01:c3:a6:36:d5:
ee:9f:53:f4:b4:8d:44:62:b6:d9:d7:bb:42:99:e7:3c:3f:15:
95:5e:72:1a:82:55:9b:34:3a:8b:7e:8a:7a:64:12:7d:63:ea:
14:0b:cc:de:f9:6c:f4:69:c1:39:ef:9e:da:fb:41:27:3f:21:
08:4a:ee:03:58:22:af:2b:89:b6:f9:88:4a:7d:21:0b:5d:86:
5e:21:81:c9:5f:17:8a:e4:69:b9:6d:9a:3c:c0:86:0a:ca:3f:
d5:e3:0a:b4:aa:85:28:44:c5:19:39:a2:37:dd:8c:01:ca:3c:
44:20:66:bb:6e:d5:30:f1:3c:b9:79:a5:74:1e:96:79:a4:25:
d0:8e:5f:49:2d:9b:59:2d:cd:ee:53:f5:11:63:83:0b:83:f2:
27:c9:5c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:14 2024 by rpki-client on console-fra.rpki-client.org