Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/dj-k_tCsUy31zH9AOkY1g6BCQkM.roa
File: dj-k_tCsUy31zH9AOkY1g6BCQkM.roa (raw, json)
Hash identifier: OuMMgHlunYuv9eqy+t1f/ZRfgpw/W2FWBJMqlSjn1X4=
Subject key identifier: 76:3F:A4:FE:D0:AC:53:2D:F5:CC:7F:40:3A:46:35:83:A0:42:42:43
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 019151C91A013F51E987E697F9E5BDABDE71
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/dj-k_tCsUy31zH9AOkY1g6BCQkM.roa
Signing time: Wed 14 Aug 2024 16:46:59 +0000
ROA not before: Wed 14 Aug 2024 16:46:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54203
IP address blocks: 176.67.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 15:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:51:c9:1a:01:3f:51:e9:87:e6:97:f9:e5:bd:ab:de:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: Aug 14 16:46:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=763fa4fed0ac532df5cc7f403a463583a0424243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f5:58:b9:58:ad:a1:7f:eb:81:74:20:e2:b2:
b3:8e:05:12:e6:eb:bf:70:f6:85:13:a2:13:0f:58:
e0:cb:32:5d:2c:9b:fd:f7:b4:12:3e:20:19:c0:69:
55:90:38:8b:a5:51:1f:e5:c1:d3:84:a4:f5:52:ae:
60:02:a3:98:48:d5:6b:9e:26:e9:48:4a:47:06:67:
24:63:47:ad:ac:3f:9e:c9:65:21:db:85:7e:e3:45:
18:6e:e8:a7:ea:a5:55:62:d8:40:a7:32:69:f7:1b:
53:87:01:fc:a5:ac:f6:23:1a:a8:18:80:c3:fc:ab:
a4:52:b9:f6:02:ef:1d:11:6c:35:12:92:02:b3:df:
42:a8:71:36:65:da:77:dd:67:a8:54:2e:a4:aa:48:
1c:dc:4f:0c:bf:9a:e9:44:7d:48:25:a4:71:0a:36:
ae:c5:58:26:c7:40:0f:a4:55:17:46:2e:1b:20:64:
f4:ef:49:96:09:b9:24:0f:f6:70:be:ee:55:38:62:
3d:55:bf:41:2c:e9:c6:a4:a2:23:3d:ef:a8:a8:77:
f3:b1:ae:eb:c9:97:a5:8f:98:db:69:58:22:04:75:
ed:b9:66:45:65:16:d4:e2:50:84:e0:bd:63:66:8a:
40:4e:bc:92:af:6d:e1:bd:a5:7f:f7:73:7c:3f:27:
a1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3F:A4:FE:D0:AC:53:2D:F5:CC:7F:40:3A:46:35:83:A0:42:42:43
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/dj-k_tCsUy31zH9AOkY1g6BCQkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.67.85.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:e8:61:3e:40:95:de:d1:b0:0f:d5:0d:05:bd:51:3e:67:23:
02:e7:8c:b8:84:0c:88:b2:ee:2b:1e:80:17:c9:94:2a:4a:a0:
78:ed:52:14:f7:5b:90:2f:e2:b1:87:98:2e:cc:4d:5a:7b:91:
6d:a3:48:b4:92:09:d4:fb:ba:ba:05:f2:6e:76:21:71:da:55:
14:15:77:28:2b:fc:3b:53:8b:b7:ca:2f:15:a1:94:d0:69:34:
1f:47:57:06:29:21:ce:b8:24:b4:af:0e:57:24:e4:c9:f8:26:
73:dc:ca:a3:7e:f1:61:7c:e7:10:7a:b6:30:6d:5a:da:13:2d:
46:08:f9:72:eb:0e:f1:8b:51:f8:c0:3d:a8:23:76:e3:5f:82:
be:08:25:cb:7c:5c:de:af:cf:57:68:3f:ff:7a:e5:b1:58:2f:
d6:b7:62:3d:a6:d9:45:b1:79:06:df:2e:03:b7:73:cd:76:59:
c0:ea:b6:35:fd:f8:b2:e6:69:ba:56:81:84:42:90:27:e3:58:
9f:04:ed:8d:ce:30:80:e8:c0:7d:c0:e8:d5:fb:01:4c:5d:e1:
fb:3c:7a:b8:0e:c4:65:7b:c6:58:45:49:ad:ad:ce:69:b1:29:
cf:ca:d0:a5:6e:50:b9:7c:77:72:ed:06:6c:aa:55:4b:18:fa:
f3:3e:9a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 19:31:36 2024 by rpki-client on console-ams.rpki-client.org