Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/Dj8Ccy_teOn7EFAhoYXySvmNZpk.roa
File: Dj8Ccy_teOn7EFAhoYXySvmNZpk.roa (raw, json)
Hash identifier: yjukV4N+R1LISJCD7d6MrvLHP6KY2yEGEfJa7y+Pop8=
Subject key identifier: 0E:3F:02:73:2F:ED:78:E9:FB:10:50:21:A1:85:F2:4A:F9:8D:66:99
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 018A6CA1720A56618F0BFDE32FBFC6C314F4
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/Dj8Ccy_teOn7EFAhoYXySvmNZpk.roa
Signing time: Wed 06 Sep 2023 22:33:54 +0000
ROA not before: Wed 06 Sep 2023 22:33:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57469
IP address blocks: 185.231.228.0/22 maxlen: 22
185.253.62.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 26 Sep 2023 00:39:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6c:a1:72:0a:56:61:8f:0b:fd:e3:2f:bf:c6:c3:14:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Sep 6 22:33:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e3f02732fed78e9fb105021a185f24af98d6699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2a:57:0e:7d:71:72:3b:45:0d:c9:fb:bf:24:
3f:59:2b:af:58:bc:9c:9f:b5:df:db:9d:3f:4d:45:
bf:39:c4:be:93:a5:87:6e:63:38:e0:54:2d:64:72:
4f:87:de:20:96:ca:8b:39:ff:04:19:db:fb:34:ae:
1b:58:bc:da:af:dd:74:9e:d0:4c:a2:8d:e3:44:54:
3e:ec:d7:63:a7:3b:66:bd:7d:07:15:b4:d5:e5:98:
52:19:7e:63:b4:9c:20:06:7e:bf:03:81:86:0d:8b:
e0:dc:29:fb:9f:6a:6f:dd:59:86:46:72:8c:d1:92:
1b:c1:b9:86:74:d7:63:a6:f1:98:7c:93:ed:81:43:
72:8f:15:47:4a:bf:d5:d1:19:07:c7:76:12:e6:1e:
b0:a1:d4:7c:7a:13:86:10:18:f1:10:6f:22:50:dd:
54:ef:e0:67:82:8c:8b:b1:e6:a7:74:3a:20:ac:ab:
cd:f7:e8:6c:a9:07:90:67:75:7a:10:b4:e1:27:49:
55:7b:e8:51:41:61:0d:54:ce:c1:a1:cc:c6:17:fd:
29:86:02:6d:71:95:da:5b:c2:38:01:82:37:a0:86:
0e:10:82:d9:e2:cf:e0:15:ce:87:45:cd:3b:45:4d:
ec:92:fd:e8:c8:d8:68:3e:06:a7:fd:59:97:0f:ac:
87:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3F:02:73:2F:ED:78:E9:FB:10:50:21:A1:85:F2:4A:F9:8D:66:99
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/Dj8Ccy_teOn7EFAhoYXySvmNZpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.228.0/22
185.253.62.0/23
Signature Algorithm: sha256WithRSAEncryption
07:c0:f6:34:71:54:23:b8:b6:99:8c:0f:bf:e5:4b:b1:4c:a2:
62:7e:f8:1b:fe:9b:27:27:d6:f4:27:ac:f9:73:32:db:88:fd:
41:f0:46:b3:a9:67:95:94:3d:72:22:bf:18:ea:c6:f1:fd:3a:
38:9b:05:05:82:6e:d8:0c:8e:44:b8:48:8e:ff:91:bf:66:2e:
7e:07:1f:a3:72:fb:40:de:ae:11:ef:d9:66:f6:e4:09:9b:cd:
11:81:16:63:eb:8b:29:38:2d:1c:95:42:37:a6:26:37:b1:f2:
9d:ae:ee:e5:94:65:31:90:96:f7:22:ea:b5:a5:97:d5:52:be:
eb:eb:82:e1:3c:04:db:16:5b:af:e5:ed:0a:f5:59:0e:53:47:
0f:a3:97:60:79:25:5c:0b:1e:e1:42:b1:67:37:bc:52:e7:c0:
0c:91:10:05:ed:11:5d:d6:77:fd:a8:9d:15:55:22:70:7e:1f:
b2:c3:ea:5f:35:27:fa:90:ab:50:b1:5d:b7:a1:4b:ac:bd:e9:
a5:82:1f:92:2e:04:31:df:45:18:a4:02:85:ee:5f:6e:12:14:
bf:c2:2c:5b:4b:18:b0:95:ce:9d:33:f1:63:03:df:fd:9b:b7:
49:94:a1:2a:cd:8a:9f:33:1d:76:86:73:ef:b5:82:36:5b:a0:
08:a3:1a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:49 2024 by rpki-client on console-ams.rpki-client.org