Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dpv48PtsvnVJtVid1p7NUPRHL98.roa
File: dpv48PtsvnVJtVid1p7NUPRHL98.roa (raw, json)
Hash identifier: HGrYH5kLgclby9tvvtOcbs90V7+0Qptp8DRXEiet0lo=
Subject key identifier: 76:9B:F8:F0:FB:6C:BE:75:49:B5:58:9D:D6:9E:CD:50:F4:47:2F:DF
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A5FDFEB14FB8189C24C779AB4A52E350E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dpv48PtsvnVJtVid1p7NUPRHL98.roa
Signing time: Mon 04 Sep 2023 11:07:04 +0000
ROA not before: Mon 04 Sep 2023 11:07:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 185.210.232.0/24 maxlen: 24
185.214.102.0/24 maxlen: 24
185.225.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Dec 2023 21:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:df:eb:14:fb:81:89:c2:4c:77:9a:b4:a5:2e:35:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 4 11:07:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=769bf8f0fb6cbe7549b5589dd69ecd50f4472fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0f:68:c4:f1:4b:a0:8d:0d:49:8e:73:0a:fd:
6b:65:ff:3e:bf:ef:91:e4:43:d4:05:10:79:9d:91:
ab:b4:64:d8:28:55:6f:3f:01:ec:0a:68:c5:51:12:
b2:7d:87:4b:98:5a:13:dc:96:1b:b2:ca:59:ee:fc:
82:67:0d:2e:f6:b6:63:a9:f5:f7:9f:df:2a:ef:5c:
ad:40:73:e7:82:d1:87:76:52:35:d5:ca:36:99:21:
fb:e8:aa:32:e7:3e:4d:37:24:b8:35:85:a3:1b:b4:
28:c6:73:1a:8d:ef:8d:7f:f7:1f:89:56:de:55:c0:
57:78:81:b5:cd:37:80:32:e5:cb:17:4c:91:b8:27:
40:5d:5d:b9:04:8d:63:4b:52:87:f7:bd:11:3a:18:
7b:fa:e6:78:7e:10:5f:61:35:5d:1c:da:70:c6:12:
ac:dc:7e:95:43:23:e1:2a:db:c1:5a:18:d7:16:7e:
95:0c:2d:cb:b2:68:2a:49:98:92:cc:99:35:3f:61:
e8:15:98:ff:93:bf:c6:dc:d0:a8:fa:c1:98:74:2b:
05:9c:0a:b6:30:01:99:d0:9b:a4:9d:94:d0:ce:c5:
b4:28:8f:9e:5d:5c:ac:2f:70:74:8f:a4:bb:73:20:
04:8f:59:ef:4b:ec:f2:f5:32:80:18:3e:cc:93:01:
a7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9B:F8:F0:FB:6C:BE:75:49:B5:58:9D:D6:9E:CD:50:F4:47:2F:DF
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dpv48PtsvnVJtVid1p7NUPRHL98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.232.0/24
185.214.102.0/24
185.225.0.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:46:25:79:c5:73:5b:56:6d:8f:65:59:47:9b:c9:60:81:f3:
15:3f:9d:47:2f:de:3f:b1:34:a3:9c:73:07:0c:94:09:18:24:
3e:db:88:ef:31:5d:75:ad:02:1c:1c:d4:13:cf:56:e9:31:75:
51:1d:33:a9:8d:ce:bf:27:86:b0:1f:f6:70:f8:73:40:d6:17:
cc:5f:43:e9:62:76:5c:af:67:8a:1f:25:9a:00:0b:23:53:bf:
0b:e4:d8:cb:05:8b:08:ac:4a:09:d6:39:01:8b:5f:f1:70:61:
4e:b9:4b:95:64:f3:41:e0:2b:70:d0:98:c2:34:e7:86:f0:40:
10:f8:f2:fe:a3:bc:82:3b:c4:65:03:6e:e1:3e:71:47:15:e4:
b4:84:cb:99:0e:76:8b:c0:30:d9:a4:d1:a6:13:0e:fc:8c:a5:
95:b8:39:3d:ce:d6:b3:94:7b:d2:6c:37:a2:18:6a:87:e2:dd:
83:06:97:6c:21:c0:15:d6:48:5c:57:60:b1:5b:41:f4:62:95:
2a:ac:53:b2:b6:b3:93:46:85:80:33:bf:58:ef:d6:d1:a3:45:
b7:f6:2a:f1:aa:81:90:07:5e:f6:01:0d:be:d9:e8:5d:83:25:
6b:12:1e:bb:5a:34:bc:9b:cc:6c:6a:5d:e3:6a:a5:94:73:ae:
92:ad:c8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org