Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/DQS9kBa32R2PF2cU_ycVl6XYvd4.roa
File: DQS9kBa32R2PF2cU_ycVl6XYvd4.roa (raw, json)
Hash identifier: G8iYCdVOp7vnMMvgSycZhbgpqZtzRTMPIAYxiKFi6hk=
Subject key identifier: 0D:04:BD:90:16:B7:D9:1D:8F:17:67:14:FF:27:15:97:A5:D8:BD:DE
Certificate issuer: /CN=0f92c52f86009879c177092f7cd83418b4df8cab
Certificate serial: 01856F26BBFC9E8603197DDD180E73ED941B
Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/DQS9kBa32R2PF2cU_ycVl6XYvd4.roa
Signing time: Sun 01 Jan 2023 21:04:47 +0000
ROA not before: Sun 01 Jan 2023 21:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47887
IP address blocks: 81.28.112.0/20 maxlen: 24
188.123.160.0/19 maxlen: 24
185.175.248.0/22 maxlen: 24
82.212.64.0/18 maxlen: 24
2a00:18d0::/32 maxlen: 128
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:bb:fc:9e:86:03:19:7d:dd:18:0e:73:ed:94:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab
Validity
Not Before: Jan 1 21:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d04bd9016b7d91d8f176714ff271597a5d8bdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:00:8a:92:3c:71:fb:c9:c9:fa:7f:83:9f:bd:
0f:21:8d:09:0d:98:a1:f9:26:35:7f:10:69:2b:bd:
e7:af:cb:d9:97:64:1b:b4:95:41:a9:d5:6d:07:dc:
df:e5:58:4a:0f:70:fc:f2:d4:54:79:0c:27:c0:b9:
ac:c6:c7:67:19:a6:5c:95:8b:b4:af:9f:f4:36:17:
95:79:d1:95:41:cd:c6:ea:f2:bf:34:bd:45:cf:22:
27:44:f4:6c:3c:76:02:4d:9c:7d:6c:db:86:d2:b4:
82:e1:c2:6a:32:1e:dd:9c:18:21:01:8e:db:67:4a:
23:e9:28:43:8a:3b:70:70:c6:ff:d9:33:0c:8e:b7:
16:b4:96:b0:c0:d0:e9:f0:e4:5a:2b:a9:eb:db:3a:
60:c1:99:1d:23:d8:26:d2:68:5c:f8:22:f8:18:c3:
94:11:fa:d4:3b:12:e1:cb:b7:a1:38:59:1c:1c:f3:
51:54:ed:99:15:1a:27:05:8f:48:d4:2e:54:0c:2c:
2f:17:71:d9:85:53:70:bd:f1:b4:28:c7:8d:58:6d:
66:b8:16:ae:c0:dd:1c:53:94:4f:fc:5d:7c:18:02:
32:9f:f9:61:5f:95:de:ff:2b:2c:af:c3:4f:67:80:
8f:95:cf:39:63:f3:12:0d:af:5b:ff:b8:f6:17:76:
f2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:04:BD:90:16:B7:D9:1D:8F:17:67:14:FF:27:15:97:A5:D8:BD:DE
X509v3 Authority Key Identifier:
keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/DQS9kBa32R2PF2cU_ycVl6XYvd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.28.112.0/20
82.212.64.0/18
185.175.248.0/22
188.123.160.0/19
IPv6:
2a00:18d0::/32
Signature Algorithm: sha256WithRSAEncryption
08:38:30:9e:24:0e:91:bb:5c:f1:a8:c1:63:47:cc:8f:b2:aa:
37:cd:cc:82:92:a0:9c:a1:61:8d:45:d7:81:97:10:3f:87:6e:
d3:86:e2:70:65:ff:2c:fa:7c:aa:8f:32:4b:5f:e6:9d:22:de:
70:1f:36:cc:13:94:e0:d0:d9:b2:d8:e6:1b:ff:50:f2:e4:0f:
98:76:02:ac:0b:78:7b:e4:3c:6a:39:c6:8c:ac:1a:06:27:3e:
c3:0f:f4:e0:40:aa:c7:de:69:27:35:15:4b:65:c2:a3:8e:7b:
70:e8:cd:57:ca:71:60:2b:b4:fb:78:3d:c0:3f:48:bd:0f:f2:
fa:e9:06:d6:45:e4:93:c6:1d:ea:f6:b9:dc:0f:b3:11:89:50:
a2:19:d8:fb:74:69:00:8b:d2:d5:a2:6e:62:40:a1:93:c3:29:
13:dc:1c:29:53:5f:8d:91:4c:94:8e:36:40:a4:1b:60:3f:08:
61:c2:74:ea:8e:07:4e:6c:a2:fe:1b:02:ca:4c:d6:21:c1:09:
12:6f:35:ae:8c:c8:a1:f9:35:d5:5c:96:6f:7f:7c:cb:72:4b:
f7:81:a9:2d:c4:14:c4:ab:6c:ca:31:e4:42:a6:58:71:1b:63:
3b:03:e2:3f:81:5d:66:60:c3:c1:10:4e:c2:42:e7:32:59:14:
81:ec:ec:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:04 2024 by rpki-client on console-ams.rpki-client.org