Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/De1qcygC06S_FD4Re5Nnb4EalFc.roa
File: De1qcygC06S_FD4Re5Nnb4EalFc.roa (raw, json)
Hash identifier: /EwTpBhCnaCxnNA9kFbkRlA/7/sqjtnBodEfDti+QzM=
Subject key identifier: 0D:ED:6A:73:28:02:D3:A4:BF:14:3E:11:7B:93:67:6F:81:1A:94:57
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 018851F92E13617110C10ED0C2B048F9C729
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/De1qcygC06S_FD4Re5Nnb4EalFc.roa
Signing time: Thu 25 May 2023 08:14:24 +0000
ROA not before: Thu 25 May 2023 08:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210001
IP address blocks: 185.52.116.0/24 maxlen: 24
2a00:dd00:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Nov 2023 06:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:51:f9:2e:13:61:71:10:c1:0e:d0:c2:b0:48:f9:c7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: May 25 08:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ded6a732802d3a4bf143e117b93676f811a9457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:76:4a:a6:09:07:7c:ed:fe:00:d0:44:22:ff:
ea:29:84:0b:47:ee:eb:87:53:ab:37:66:0e:3b:27:
13:c9:8a:af:f4:a5:28:ec:06:58:88:e8:8e:21:ba:
48:f9:b3:e3:51:f3:81:7a:12:29:8e:98:15:00:37:
f5:7a:ed:4c:2c:e8:09:bf:a8:cc:2b:8c:c7:8d:bc:
6a:52:10:70:80:a9:c4:d7:62:31:ef:b5:d7:a8:b0:
f0:3e:59:39:0c:01:e0:89:b9:f5:18:4b:ee:2c:f4:
79:cc:e1:d0:01:f9:aa:eb:c7:53:2e:2b:12:5e:88:
ea:ba:85:95:4d:fd:54:4d:ae:bb:a5:83:9d:f6:e7:
56:91:46:85:4b:45:f8:1f:54:d9:b3:3f:30:01:fd:
c7:f5:b0:90:48:c0:34:14:ed:2c:ad:7f:59:49:fb:
43:97:ac:11:05:4b:ec:54:d4:e3:c7:c3:47:6a:0c:
79:5a:55:9d:ed:fd:96:0e:d7:24:35:f6:de:0c:77:
16:72:40:21:b4:3a:9a:7a:32:93:5b:c4:bd:d7:57:
d4:ff:2f:ba:75:c6:05:6a:1d:77:8e:00:30:f3:4a:
ad:4f:d9:c1:a2:fc:ba:5d:42:d5:4a:16:a6:bc:15:
39:83:f1:ba:94:69:72:d4:7d:45:35:af:0a:e5:72:
8b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:ED:6A:73:28:02:D3:A4:BF:14:3E:11:7B:93:67:6F:81:1A:94:57
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/De1qcygC06S_FD4Re5Nnb4EalFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.116.0/24
IPv6:
2a00:dd00:5::/48
Signature Algorithm: sha256WithRSAEncryption
0e:d0:ae:a4:b9:1b:58:39:42:ac:05:a9:61:42:64:ac:be:8c:
2e:d3:b7:c5:17:3f:e9:f9:ec:1c:b1:54:2e:57:e0:4c:d0:a2:
f8:a8:91:89:0e:8d:f3:d0:16:8d:f1:63:88:4f:2f:54:61:01:
e5:22:d8:ee:c3:8d:df:f5:bf:8b:6c:15:c4:46:30:e6:94:c4:
a3:9c:25:79:3b:ed:5f:89:86:ea:bd:27:bc:58:8b:18:98:d3:
ec:db:3d:86:b6:af:4f:51:41:1d:fc:9e:72:29:91:a3:7c:46:
c4:88:cb:c2:1b:ab:5d:ac:f3:8b:3f:2f:89:07:19:da:16:82:
36:1a:5e:d9:5b:a6:7b:35:6f:1a:80:7d:f2:97:b7:bd:ed:f1:
e3:ee:39:70:bd:a1:95:98:2f:20:a2:d8:cd:d4:81:c9:c7:7c:
2c:51:d8:de:69:f7:55:ff:79:1b:a7:c5:c0:3d:14:9a:f5:87:
92:2c:a2:3a:f2:cd:d8:e2:93:20:81:dc:91:98:df:ef:79:95:
c5:a9:2c:68:2f:6f:41:7f:36:33:15:aa:38:89:d1:60:69:5c:
ff:c0:21:b5:98:0d:4b:7a:ec:f0:2b:06:b0:e2:ac:ac:db:b0:
6d:e0:2a:2b:e8:d9:91:71:5c:cc:9a:c8:62:3c:70:2b:ed:65:
7d:78:2b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:42 2024 by rpki-client on console-ams.rpki-client.org