Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/dx-7XEC0cR_AOMpze4awbYgJXOI.roa
File: dx-7XEC0cR_AOMpze4awbYgJXOI.roa (raw, json)
Hash identifier: Nm8xqCzku4D6fGLrYnxEQ1uFoVlg5EzBpojloqaqmkk=
Subject key identifier: 77:1F:BB:5C:40:B4:71:1F:C0:38:CA:73:7B:86:B0:6D:88:09:5C:E2
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 018585904248F82BF9888AF8666177ED9CE1
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/dx-7XEC0cR_AOMpze4awbYgJXOI.roa
Signing time: Fri 06 Jan 2023 05:31:41 +0000
ROA not before: Fri 06 Jan 2023 05:31:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207503
IP address blocks: 82.193.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Aug 2023 08:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:85:90:42:48:f8:2b:f9:88:8a:f8:66:61:77:ed:9c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Jan 6 05:31:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=771fbb5c40b4711fc038ca737b86b06d88095ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:22:06:98:96:19:dd:d4:44:c2:54:04:eb:f1:
51:a7:c3:65:1b:6c:4a:48:f2:45:4a:8c:ed:90:ef:
d9:b0:76:c1:d4:c8:76:55:c7:d8:a0:1a:1d:1a:ce:
81:65:25:79:d2:9b:81:15:50:0a:16:68:48:06:ab:
44:d9:ab:e4:c6:d1:c2:27:21:0e:05:f1:dd:1c:3a:
63:77:ec:8c:6f:67:87:0d:61:43:f5:89:23:58:c7:
f6:79:20:17:60:9c:fe:19:60:f0:d6:dc:cc:7f:a2:
85:b0:95:4b:fa:e8:39:38:1a:01:c7:04:0b:09:77:
86:00:d8:b7:17:8a:8f:6e:f3:0d:8e:ee:85:af:d4:
13:7d:4d:d2:6a:f3:59:eb:91:f9:60:08:01:32:d1:
53:ae:c4:65:4c:b1:96:a9:15:cb:6c:44:6d:f5:0d:
5c:b7:59:9b:2d:ff:9c:f4:7d:f5:ae:6a:9e:44:49:
76:6b:05:3a:f4:8b:ce:20:c0:33:cd:12:e5:ea:8f:
fb:c1:e3:45:11:3f:0d:0f:fd:cb:e3:c0:64:7c:53:
ae:2a:61:2a:25:c6:23:36:8f:ea:de:1c:cf:f6:4b:
39:74:2b:f5:ad:a0:1e:e8:50:6b:6c:64:f5:ee:be:
db:5e:96:98:5d:98:df:a6:8f:64:7f:6f:61:58:6b:
79:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1F:BB:5C:40:B4:71:1F:C0:38:CA:73:7B:86:B0:6D:88:09:5C:E2
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/dx-7XEC0cR_AOMpze4awbYgJXOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.193.254.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:0f:76:01:53:9e:36:2a:5d:19:a4:ae:f0:60:b4:86:89:94:
36:bf:0d:82:0d:60:79:0e:6f:c1:7d:75:54:1b:72:6a:7d:e8:
7c:32:db:54:c6:86:2b:0c:88:82:6a:28:b0:eb:48:52:31:9a:
f6:19:da:c8:c9:ac:ba:c0:14:b9:88:19:6d:f0:cb:b4:59:1d:
a2:22:b0:92:47:cc:87:25:31:c7:b6:48:d7:0f:30:de:a6:0f:
a7:2d:bc:77:dd:d2:5f:50:c5:41:9b:a6:5e:4f:07:82:6c:ad:
a7:9d:ab:51:0f:e0:ce:da:f3:80:38:8d:a3:76:29:4e:50:58:
30:04:b8:ef:91:d7:c2:c9:a6:e6:2e:90:c8:a5:70:30:92:12:
22:70:2a:76:93:bb:17:f0:86:ff:a5:2f:87:1e:84:c8:52:59:
d1:b2:91:7a:1b:7c:5a:36:d7:01:a4:4d:04:4e:b6:81:61:14:
f5:73:e5:b6:2b:72:96:a2:a9:f7:48:c2:ae:f8:2c:77:55:79:
2a:1b:37:67:b9:d4:4b:3d:c2:43:e2:09:a1:20:53:f6:e8:57:
8a:f7:79:db:75:9a:a2:11:8d:eb:0e:33:9b:ba:2b:c8:75:f0:
b8:8e:9b:4e:31:fb:94:6e:0f:04:28:37:81:35:9f:3c:db:3b:
d1:6a:00:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:41 2024 by rpki-client on console-ams.rpki-client.org