Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/DbiAW-fvhrillXnq8CGbsTcdwjk.roa
File: DbiAW-fvhrillXnq8CGbsTcdwjk.roa (raw, json)
Hash identifier: LkPf37dELcpyYrdRWW+Pysb5n/E7NHkIc67tx6Ugkgs=
Subject key identifier: 0D:B8:80:5B:E7:EF:86:B8:A5:95:79:EA:F0:21:9B:B1:37:1D:C2:39
Certificate issuer: /CN=554834da8600c96c5fde91278f520e6c0d26fff3
Certificate serial: 01856DC1E12FCF31897B795754C9F8C52D6F
Authority key identifier: 55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/DbiAW-fvhrillXnq8CGbsTcdwjk.roa
Signing time: Sun 01 Jan 2023 14:35:00 +0000
ROA not before: Sun 01 Jan 2023 14:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43414
IP address blocks: 185.185.244.0/22 maxlen: 22
45.149.44.0/22 maxlen: 22
2a0b:6980::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:e1:2f:cf:31:89:7b:79:57:54:c9:f8:c5:2d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=554834da8600c96c5fde91278f520e6c0d26fff3
Validity
Not Before: Jan 1 14:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0db8805be7ef86b8a59579eaf0219bb1371dc239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f0:8e:d9:46:47:92:17:46:d6:b1:80:6f:4d:
3a:80:ed:30:fc:c9:2f:10:84:c5:34:87:1d:f6:80:
a4:d3:c7:2f:8d:2e:f2:9d:b5:d6:f3:5e:e7:fd:88:
69:37:3c:66:37:17:62:06:ca:68:01:60:b0:ef:0f:
11:e1:ea:a3:c7:e5:52:ba:c1:2c:ef:73:86:90:97:
ac:20:7f:8b:10:65:4a:fb:98:0c:00:f9:18:32:73:
f4:36:65:60:84:00:9d:37:00:84:bc:8c:be:93:1f:
fe:03:d6:09:21:ae:5b:28:4c:f0:8d:9c:89:98:90:
a7:7c:40:86:b5:15:bb:4d:ad:bd:2a:09:64:bb:01:
86:e9:4a:fc:44:c1:0e:37:0b:8f:9d:b4:8e:3b:1e:
47:92:ec:6c:48:1e:6f:b9:73:cc:bc:6b:03:c7:b7:
75:50:54:d3:d8:6d:e4:a9:e2:41:6c:07:90:85:7e:
b0:78:c2:12:a5:05:0e:7a:49:98:2d:e3:95:c9:26:
b0:3f:11:2d:2c:65:63:e2:51:47:db:a0:60:01:ba:
a9:ab:3c:88:93:3c:a8:e1:82:bb:0a:a3:e2:e0:08:
bb:29:ae:04:56:77:e7:a2:35:1c:77:d7:43:bc:91:
fb:3d:d4:11:d3:d8:a2:a6:1d:9a:57:b8:17:79:3f:
74:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B8:80:5B:E7:EF:86:B8:A5:95:79:EA:F0:21:9B:B1:37:1D:C2:39
X509v3 Authority Key Identifier:
keyid:55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/DbiAW-fvhrillXnq8CGbsTcdwjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.44.0/22
185.185.244.0/22
IPv6:
2a0b:6980::/29
Signature Algorithm: sha256WithRSAEncryption
8e:22:39:83:31:63:34:9f:98:e1:f6:d5:3d:12:27:0a:fc:f3:
65:ba:7f:da:e0:c5:e6:f5:c6:d2:5c:c3:64:32:af:cf:3d:de:
a6:fe:43:f4:30:5b:88:35:72:87:0e:29:ad:48:9c:ba:fe:d0:
11:41:cc:63:a1:7d:56:3c:43:6c:1b:17:d9:3c:52:48:d4:53:
20:c1:87:c1:f7:8a:15:41:c3:b8:90:10:8c:58:08:13:d6:f2:
32:07:77:f2:f7:1b:86:18:92:b5:59:5d:31:b3:15:42:8c:f3:
52:81:3e:e7:ec:7e:2b:1f:bc:98:25:98:de:7c:37:b3:1b:d8:
cb:e1:ab:02:bf:54:c6:92:a3:83:fb:c7:25:19:de:9b:7e:61:
20:4b:33:35:51:89:ef:1c:ab:62:e3:97:5d:2e:9e:29:4a:a7:
45:3c:f4:f7:43:ba:e2:de:a7:c7:ec:3b:de:5a:4f:4a:7c:39:
8c:33:53:50:9f:4c:34:2c:b0:68:a4:33:54:60:c5:57:07:57:
1f:6f:53:65:ce:e8:d5:07:89:3f:60:6b:02:1e:71:59:c4:8a:
4c:98:9a:e2:4c:03:f6:eb:8f:e2:7f:3a:6d:99:81:24:40:13:
a4:c2:a5:c6:0b:e8:f5:ec:23:5b:51:8a:bd:54:79:5d:2a:5f:
e7:f3:57:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:37 2024 by rpki-client on console-fra.rpki-client.org