Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/Dax9FXpDs0ZPo4VvY5jdy3iu5GE.roa
File: Dax9FXpDs0ZPo4VvY5jdy3iu5GE.roa (raw, json)
Hash identifier: 2gGMD3xXllEgdXnSL0poRMXGtFMLJQKo7qWIui2mW4s=
Subject key identifier: 0D:AC:7D:15:7A:43:B3:46:4F:A3:85:6F:63:98:DD:CB:78:AE:E4:61
Certificate issuer: /CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
Certificate serial: 01856CF864D018E7286ADD0398EBCBACB439
Authority key identifier: 57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/Dax9FXpDs0ZPo4VvY5jdy3iu5GE.roa
Signing time: Sun 01 Jan 2023 10:54:56 +0000
ROA not before: Sun 01 Jan 2023 10:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205718
IP address blocks: 185.210.20.0/22 maxlen: 22
2a09:dd40::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:64:d0:18:e7:28:6a:dd:03:98:eb:cb:ac:b4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
Validity
Not Before: Jan 1 10:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dac7d157a43b3464fa3856f6398ddcb78aee461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:da:f3:85:89:96:1b:bb:53:1e:57:26:65:
a6:92:26:6e:04:a7:36:b7:66:93:e0:69:a5:af:9c:
96:aa:b9:60:04:57:2c:c7:87:68:77:96:f9:93:0f:
41:1b:8e:5c:3c:8e:c4:71:00:bf:db:c6:e2:51:85:
c4:ec:b1:c7:dd:42:47:5f:5f:7b:b7:2c:02:d9:6e:
fd:d0:d5:aa:47:63:4f:03:3f:0e:66:4d:09:1c:37:
1c:ff:02:57:94:a4:eb:27:25:ec:fa:6f:c7:54:8f:
58:db:e7:7e:1d:9f:d9:3c:e6:7f:b7:f1:9f:4b:68:
a3:64:2d:e9:4f:27:9f:8b:cc:90:d8:35:46:f0:47:
3a:86:a3:b3:c0:00:f5:14:94:ab:97:84:2f:2c:d1:
4b:e1:fe:59:82:b6:47:17:7f:1d:10:3c:9b:66:37:
2e:35:5f:05:13:92:c8:ee:18:71:02:18:ea:82:4f:
d2:b4:82:e4:a5:65:6a:3b:83:01:9c:4b:98:81:fa:
47:fd:4f:e9:e8:7f:84:82:a0:13:a9:f8:3a:fe:33:
40:be:b6:99:ee:60:e1:70:4c:90:70:de:a5:3b:58:
f6:f4:4f:5c:7b:1b:9b:c8:f9:70:d5:13:cb:56:88:
bf:39:50:6f:f9:33:07:2c:82:b2:f7:0e:ea:59:2c:
63:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AC:7D:15:7A:43:B3:46:4F:A3:85:6F:63:98:DD:CB:78:AE:E4:61
X509v3 Authority Key Identifier:
keyid:57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/Dax9FXpDs0ZPo4VvY5jdy3iu5GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.20.0/22
IPv6:
2a09:dd40::/32
Signature Algorithm: sha256WithRSAEncryption
32:86:3a:c6:11:b9:44:36:cd:09:39:62:d9:bf:0e:e2:9e:95:
21:01:f0:42:5f:84:42:c2:30:2d:a5:45:b9:72:34:18:f7:ec:
40:28:10:65:e5:7f:25:50:5b:2c:5a:eb:a4:50:e5:69:5e:6d:
c6:b0:aa:13:2e:db:d7:89:64:bd:cd:71:5c:28:31:ac:ad:33:
e8:fe:4c:77:22:32:dc:21:d9:c6:cc:3a:ac:b9:27:65:15:fb:
6d:8b:59:e6:05:2a:c1:d5:26:78:fa:ca:a5:92:55:15:6d:b0:
29:a4:bc:0d:5c:b9:c8:16:37:1b:a5:6a:3f:45:d3:04:0a:ec:
e7:21:4d:cf:cd:3e:3d:f4:ae:a2:c2:06:f9:cb:40:91:7a:8b:
14:f1:74:df:c5:e9:ac:d9:38:ad:e2:10:88:ce:21:31:26:42:
b0:bf:38:45:c4:a4:38:27:5c:a7:88:98:e1:76:40:1e:6a:e5:
b9:39:03:c9:0d:9f:dd:63:90:fd:99:df:23:f5:d1:ea:a9:42:
42:1a:c9:58:9e:d0:7d:83:b6:50:48:7c:ca:aa:b0:9a:98:89:
8c:57:1f:d7:27:73:35:87:06:70:9c:15:b0:09:4f:14:1f:d1:
eb:59:a0:3f:c5:0c:21:03:fc:f9:31:c5:98:e7:b8:42:2e:3f:
7f:e6:87:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:53 2024 by rpki-client on console-ams.rpki-client.org