Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/dfJc9xX7_bgsZUvS8iLwHtQcCIQ.roa
File: dfJc9xX7_bgsZUvS8iLwHtQcCIQ.roa (raw, json)
Hash identifier: zfU4AHVJgPDNkx0tyP9osHQ0Y9GfR3FRRy4u926HHpk=
Subject key identifier: 75:F2:5C:F7:15:FB:FD:B8:2C:65:4B:D2:F2:22:F0:1E:D4:1C:08:84
Certificate issuer: /CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Certificate serial: 0185735F03BC7DA30C8778560A8AE1B147D3
Authority key identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/dfJc9xX7_bgsZUvS8iLwHtQcCIQ.roa
Signing time: Mon 02 Jan 2023 16:44:44 +0000
ROA not before: Mon 02 Jan 2023 16:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.135.128.0/24 maxlen: 24
195.191.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:5f:03:bc:7d:a3:0c:87:78:56:0a:8a:e1:b1:47:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Validity
Not Before: Jan 2 16:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75f25cf715fbfdb82c654bd2f222f01ed41c0884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:79:57:e8:2c:8b:13:b7:88:94:e7:53:fb:63:
34:ba:45:e8:fb:2d:cd:fd:d2:c4:57:eb:12:de:e2:
c6:cf:42:9d:2b:7e:19:ba:33:1c:96:89:56:4d:2d:
f0:85:5e:0b:e9:80:32:1d:0d:47:20:89:bd:99:2d:
5b:46:5c:3f:e3:de:1f:3e:b9:56:91:e7:9c:f6:0e:
d9:cf:ce:73:cb:e6:78:1d:2d:33:82:e4:24:ac:3d:
9f:8c:40:33:43:b0:76:e5:f3:92:97:af:d2:36:43:
c4:d8:db:0e:5f:30:91:85:ab:3e:58:7b:3d:9f:00:
f0:4f:98:db:97:27:3b:e9:bc:65:5f:b2:e8:90:73:
25:17:54:d2:85:42:6b:d4:61:52:63:dc:34:ae:20:
d3:c5:79:0f:66:cd:8a:6f:14:4e:a5:b6:14:2d:4b:
d5:67:7c:77:79:01:8f:fd:d6:e6:32:df:1d:cd:ca:
fc:3c:cb:eb:c0:5a:62:0a:15:27:d0:e7:8c:7b:c9:
f6:b5:87:f0:4a:e5:1a:46:99:19:d6:65:ee:91:90:
79:b1:06:a2:2d:cb:67:9c:bf:91:e1:31:05:f2:8e:
2e:59:0e:1b:70:b6:cc:b6:5a:05:71:d3:06:21:04:
7c:3f:a6:f9:42:91:0b:82:82:4a:bd:d7:3d:81:6a:
b5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F2:5C:F7:15:FB:FD:B8:2C:65:4B:D2:F2:22:F0:1E:D4:1C:08:84
X509v3 Authority Key Identifier:
keyid:BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/dfJc9xX7_bgsZUvS8iLwHtQcCIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.128.0/24
195.191.165.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f9:b5:01:b5:29:35:66:83:2f:33:1f:b2:ca:64:05:13:8d:
3d:ab:9f:8f:af:fd:ff:fb:a4:9a:3a:25:80:cf:46:e8:f1:ed:
4d:de:b6:5a:8a:2a:e8:21:6f:1d:dd:84:95:81:f2:2f:d6:46:
c0:6f:bd:57:f9:6d:a6:ea:09:f7:9f:e0:40:55:37:7b:68:05:
24:f1:ba:ff:75:30:8c:84:71:d6:0c:5f:0a:b0:00:f6:fc:64:
0f:36:3a:38:71:c4:d6:44:9c:63:18:ca:87:06:01:d7:d0:11:
be:a9:38:b3:3a:47:73:30:f6:75:01:52:c3:d1:b9:1d:39:7b:
b8:eb:7c:ac:ed:41:8c:6f:35:32:a3:e5:bb:ce:a4:fb:b1:15:
25:f9:e0:1a:7e:5b:ec:da:55:a1:b6:22:de:88:2c:f7:49:a6:
a6:7b:50:9c:1c:8a:7e:58:47:50:33:3e:ea:c3:48:51:01:22:
32:c7:67:36:4a:71:ef:1b:f3:41:51:f8:20:ce:16:65:2e:40:
4a:0f:d1:e6:5d:c0:14:e0:a4:23:71:b5:97:3e:14:c5:64:75:
ef:7f:3c:8b:06:ce:5d:b8:25:71:02:8e:69:fe:94:a5:93:13:
c8:6a:95:f2:0e:40:0b:b6:46:d7:45:89:86:0c:b8:64:f8:2a:
fa:d5:c2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:20 2024 by rpki-client on console-ams.rpki-client.org