Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/dRJsVxkmo4onL_n-g3a5lJSiDIE.roa
File: dRJsVxkmo4onL_n-g3a5lJSiDIE.roa (raw, json)
Hash identifier: N5y5fsryx8r5GlhCfQrclNL80ZS/fMD6TkzsebQUEGQ=
Subject key identifier: 75:12:6C:57:19:26:A3:8A:27:2F:F9:FE:83:76:B9:94:94:A2:0C:81
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 01877EC6F6D01BC43A709DDFD5990D0855DB
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/dRJsVxkmo4onL_n-g3a5lJSiDIE.roa
Signing time: Fri 14 Apr 2023 07:59:41 +0000
ROA not before: Fri 14 Apr 2023 07:59:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.110.63.0/24 maxlen: 24
46.175.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Apr 2023 03:57:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7e:c6:f6:d0:1b:c4:3a:70:9d:df:d5:99:0d:08:55:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Apr 14 07:59:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75126c571926a38a272ff9fe8376b99494a20c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:a1:26:d0:28:c9:da:9f:70:44:7e:7c:36:
87:73:08:99:cd:c4:45:95:06:b6:32:80:ce:c1:6f:
23:fd:2b:a2:6e:2b:31:b8:11:5c:8f:d2:9c:f6:c0:
80:f1:3e:5d:91:68:71:f0:b1:5e:a8:25:d0:25:f3:
ca:f9:85:29:12:c4:89:14:f2:4e:81:5a:92:8d:3c:
11:24:38:9c:fb:88:bc:2f:ae:49:85:d1:a6:d4:11:
f8:3d:2a:23:49:58:4e:a7:47:fe:af:ca:a1:0f:3d:
76:ec:3a:1f:c9:97:fa:ec:d1:2d:e9:31:f8:32:1b:
4e:c9:45:9f:da:bb:2f:fa:b2:68:de:54:d0:96:af:
b0:1d:06:1d:4b:6b:f3:ff:f1:cd:77:f2:55:c1:ee:
b1:d6:7c:6a:c5:0d:f1:fa:a9:65:e4:58:f7:4e:ce:
e9:63:81:be:95:fb:3e:0b:2f:8b:a2:35:86:2c:9d:
38:c7:6f:e5:9c:25:6d:f2:79:81:24:4a:7d:66:18:
78:86:3f:33:c9:0b:be:02:d6:77:e6:aa:9e:c6:a2:
0a:e6:1a:2d:c5:a3:a3:a4:7f:46:36:96:8d:17:49:
42:a2:db:7f:44:5a:c1:2d:0e:44:05:55:5c:f8:a4:
04:49:b0:84:40:38:35:dc:ad:e3:8f:b0:5f:97:e7:
ce:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:12:6C:57:19:26:A3:8A:27:2F:F9:FE:83:76:B9:94:94:A2:0C:81
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/dRJsVxkmo4onL_n-g3a5lJSiDIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.130.0/24
185.110.63.0/24
Signature Algorithm: sha256WithRSAEncryption
38:7b:8f:c6:a9:8b:e3:5c:88:64:08:80:d5:ae:c7:19:4c:58:
f2:e8:1b:4a:24:78:ed:8a:e1:d9:20:21:a4:05:54:06:48:b5:
c5:7e:f5:5d:f8:f6:89:bb:57:6e:7d:14:68:db:79:3b:14:32:
a7:26:b8:43:7b:3f:c8:cc:15:58:34:33:22:ba:07:db:90:cf:
fe:16:b6:5c:62:ec:c6:9d:1d:18:9f:40:5d:9b:66:9e:8e:d5:
0c:54:8d:2e:10:70:57:37:c9:e8:3c:e0:12:0a:20:98:ce:93:
83:19:d0:1a:ab:f5:35:95:41:6c:6f:5b:b5:71:9e:73:af:db:
cc:6e:8e:8a:30:d6:a3:4e:8e:36:65:3b:68:80:1a:13:8a:84:
15:4c:eb:f5:ef:49:41:5a:a5:6d:e4:82:57:97:de:8d:db:89:
91:a6:0b:10:d0:f8:46:86:3d:71:7a:8e:ae:ac:69:a1:06:18:
8e:52:ed:e2:2e:d8:c4:57:0f:8e:08:8e:03:c4:91:4a:74:de:
4f:ab:f2:d1:af:8f:cb:c9:1f:85:9f:cf:97:4a:69:aa:4d:cf:
59:e4:c6:41:60:db:e5:94:dd:63:ac:cb:fb:cb:93:10:03:d0:
7f:d4:f6:c8:0e:83:81:ff:e1:b4:4a:01:ba:b2:79:5c:1f:7e:
d2:9f:0d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:12 2024 by rpki-client on console-ams.rpki-client.org