Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/xPoDMmxTd3Ag6NUfEpRtBN43Deg.roa
File: xPoDMmxTd3Ag6NUfEpRtBN43Deg.roa (raw, json)
Hash identifier: KmYNLZc3r0+GXg2jL2LpzGIkh6b7V3m7QWXn41VBkX4=
Subject key identifier: C4:FA:03:32:6C:53:77:70:20:E8:D5:1F:12:94:6D:04:DE:37:0D:E8
Certificate issuer: /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial: 01856D13E0D129AE01B2B9186F984CB08CDB
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/xPoDMmxTd3Ag6NUfEpRtBN43Deg.roa
Signing time: Sun 01 Jan 2023 11:24:57 +0000
ROA not before: Sun 01 Jan 2023 11:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209564
IP address blocks: 82.146.23.0/24 maxlen: 24
84.238.223.0/24 maxlen: 24
185.32.151.0/24 maxlen: 24
185.32.149.0/24 maxlen: 24
185.32.150.0/24 maxlen: 24
185.32.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:e0:d1:29:ae:01:b2:b9:18:6f:98:4c:b0:8c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Validity
Not Before: Jan 1 11:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4fa03326c53777020e8d51f12946d04de370de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:36:8c:47:31:a2:31:52:58:4f:44:96:0b:
50:29:a9:8b:0e:d9:33:da:2e:0f:a3:e7:4c:db:3b:
f4:1f:9f:a0:7a:76:11:62:21:6e:ed:25:31:82:c3:
e6:d1:cd:96:c8:f9:53:c6:ee:94:32:26:9f:37:a5:
8b:46:25:38:a9:ec:11:bd:fe:73:c2:49:20:71:7e:
7a:7c:c3:d8:9c:a1:f0:ce:66:f6:b4:69:b2:5f:50:
8c:ed:ee:fb:5d:56:ad:b3:c6:78:d8:f5:bd:cd:99:
06:38:54:a8:51:24:31:3d:66:b7:ae:a7:2b:e0:46:
fe:75:7a:e8:0c:e2:9a:a0:bd:12:d1:2e:69:1f:a3:
27:da:5f:22:26:ec:f6:ce:18:da:95:cf:df:5e:72:
6d:cc:03:83:7d:b3:9c:8c:db:37:69:82:cc:98:4f:
ca:44:2a:56:50:f4:97:e7:98:3e:97:02:79:49:6e:
ee:50:d0:cc:0d:7e:ad:1e:fa:cc:30:0a:aa:7f:bd:
fd:12:dd:21:55:d3:93:53:61:3f:24:b5:1e:58:fb:
37:8f:09:16:6a:97:39:3e:87:8f:99:2b:f6:c1:aa:
4f:04:89:0d:02:9b:4e:99:a3:79:58:d8:fe:d2:68:
24:b3:0f:5a:d6:bf:8c:c6:b9:93:e1:a6:00:77:62:
9e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FA:03:32:6C:53:77:70:20:E8:D5:1F:12:94:6D:04:DE:37:0D:E8
X509v3 Authority Key Identifier:
keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/xPoDMmxTd3Ag6NUfEpRtBN43Deg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.23.0/24
84.238.223.0/24
185.32.148.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:68:ee:d7:51:b8:0f:ea:2f:84:ac:ae:04:6c:fa:77:82:0b:
ff:39:64:99:2b:75:24:0d:54:34:ec:44:ec:59:f3:e0:f7:2c:
f1:2d:63:7e:d7:99:6b:47:fb:ef:1c:15:38:ad:87:2d:79:f1:
d0:52:25:0f:39:a3:2a:d8:76:96:75:ff:9f:36:8a:40:0a:5c:
1a:23:86:95:b6:8e:cf:f2:37:9f:4a:36:e0:d0:c3:f6:8d:43:
1e:c1:73:d8:e6:94:21:7d:19:b5:a9:17:f5:d5:63:df:e0:d4:
da:d7:8a:a5:65:16:00:2e:59:d1:5e:44:73:e1:be:e1:72:8b:
25:fe:13:21:d4:04:d9:4d:ae:ce:56:ca:d6:0f:3a:b5:c9:8a:
a9:02:b6:b9:a9:3b:82:a3:6b:0d:25:55:ae:be:10:9f:51:52:
57:7b:3e:65:9d:7b:64:6d:e4:f6:e6:3d:b3:39:58:7a:f8:6b:
b7:90:33:8c:47:15:62:bd:a5:15:03:6e:04:9f:97:04:3c:3d:
81:35:59:b8:8b:84:25:55:65:c6:41:ab:66:94:56:d8:bd:e4:
1c:50:92:2b:ff:f0:fc:fa:d9:33:58:2d:65:ea:ed:41:b1:48:
5c:c9:e0:f0:4d:f1:dc:90:38:a3:c9:72:08:0a:30:54:69:57:
dd:e0:96:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:53 2023 by rpki-client on console-ams.rpki-client.org