Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/DNBSAymo6U6b3x4aPwYv5UX9dsc.roa
File: DNBSAymo6U6b3x4aPwYv5UX9dsc.roa (raw, json)
Hash identifier: RqOE5ht4dBLhm19GNWejKnGjtHJo3rZEczmv3dFWcpg=
Subject key identifier: 0C:D0:52:03:29:A8:E9:4E:9B:DF:1E:1A:3F:06:2F:E5:45:FD:76:C7
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018ABC45392ABCD7DA2A9378B2E339EA219B
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/DNBSAymo6U6b3x4aPwYv5UX9dsc.roa
Signing time: Fri 22 Sep 2023 09:42:47 +0000
ROA not before: Fri 22 Sep 2023 09:42:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 185.112.240.0/24 maxlen: 24
185.112.242.0/24 maxlen: 24
185.112.243.0/24 maxlen: 24
185.112.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Sep 2023 15:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:45:39:2a:bc:d7:da:2a:93:78:b2:e3:39:ea:21:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Sep 22 09:42:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cd0520329a8e94e9bdf1e1a3f062fe545fd76c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:e6:12:de:e3:b7:1d:07:10:83:6f:9c:8b:
90:6e:3d:74:aa:eb:ca:6c:00:27:02:09:05:7f:94:
fb:ec:44:43:04:9d:ea:aa:94:04:9b:11:b6:cb:c8:
bd:5d:7f:b4:21:ab:92:9f:a0:e6:f8:1a:b1:5a:48:
36:6c:0f:37:6a:26:0b:af:e9:ef:0d:d9:1d:0e:cb:
c6:f5:ab:d0:b7:c1:85:4f:f7:1e:4a:39:83:0e:f9:
bd:9d:59:95:52:24:2d:82:3c:cd:7e:80:07:25:35:
b0:7c:12:4d:73:2d:28:ae:87:c8:68:c3:c2:89:f3:
05:1e:5d:14:05:f1:19:1d:69:b2:30:76:08:f8:24:
3b:e3:cc:f2:4c:ac:b1:1b:bf:10:fa:d5:81:70:a6:
50:29:9b:6a:4f:d9:8e:99:70:50:93:34:ce:74:db:
87:40:08:12:13:25:7b:10:ea:01:b2:9a:26:d9:ef:
0d:b3:68:59:f5:92:9c:a4:5a:aa:90:b1:2f:c9:44:
4f:3d:34:d0:b4:50:b3:2d:37:ac:d5:00:72:bc:8f:
5d:7b:c6:37:eb:a5:32:29:bd:60:30:5b:f9:17:dc:
b2:73:f4:f8:35:d5:a4:a8:3f:f8:e6:32:b6:c8:2b:
96:f1:6c:c8:de:bf:05:32:0b:da:12:bf:c1:7e:56:
64:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D0:52:03:29:A8:E9:4E:9B:DF:1E:1A:3F:06:2F:E5:45:FD:76:C7
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/DNBSAymo6U6b3x4aPwYv5UX9dsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.240.0/22
Signature Algorithm: sha256WithRSAEncryption
51:0c:c6:29:be:42:65:a3:6e:48:7c:5f:76:ce:14:40:30:03:
26:82:e0:86:f3:83:6c:b3:ba:9c:d4:44:62:e9:6c:1b:e5:82:
52:c6:2c:ae:c9:aa:a1:11:b2:f9:99:34:63:48:95:3c:1d:e6:
66:cc:0a:d9:0a:a9:21:53:cc:f1:03:52:3e:95:65:b8:33:5e:
37:a4:3f:32:13:ac:c6:4f:34:18:16:a6:fd:fc:7e:65:5d:19:
c2:4d:5b:5e:48:a0:39:35:b0:01:98:bc:22:fd:cf:1a:05:0c:
36:25:aa:5d:40:71:da:96:cd:ff:a2:02:0c:6b:f4:f0:75:b5:
77:11:bb:f0:f7:c1:41:32:e3:68:ea:0f:e6:ff:8f:0e:d6:66:
1d:24:50:91:23:79:1a:bc:75:62:05:c0:bf:d3:bd:8d:70:d7:
97:a8:80:e3:48:da:df:e4:fe:94:f0:f0:b0:aa:4f:68:f5:df:
37:33:ef:aa:ec:00:ad:12:06:46:c3:21:88:96:cf:af:ca:02:
89:2c:42:7e:b9:9d:cb:b9:4c:c6:95:75:2b:c8:67:c1:f6:e3:
b1:c5:a7:27:2e:c5:da:3e:c9:5c:d6:78:41:b2:29:7a:d2:26:
20:46:7c:62:a1:65:4e:f8:9b:dd:c9:1f:db:54:1c:3a:e3:10:
59:db:5c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:21 2024 by rpki-client on console-ams.rpki-client.org