Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/DLvm-dp4thv-7vL5zzoi8D1ujbA.roa
File: DLvm-dp4thv-7vL5zzoi8D1ujbA.roa (raw, json)
Hash identifier: 7YtVDH29qB4VUSVfiPXgwbvOFOpeUc7RskbqIszeYM0=
Subject key identifier: 0C:BB:E6:F9:DA:78:B6:1B:FE:EE:F2:F9:CF:3A:22:F0:3D:6E:8D:B0
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0189E44388E85CA8F223E890A3FE87E4A434
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/DLvm-dp4thv-7vL5zzoi8D1ujbA.roa
Signing time: Fri 11 Aug 2023 11:02:58 +0000
ROA not before: Fri 11 Aug 2023 11:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 5.178.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:43:88:e8:5c:a8:f2:23:e8:90:a3:fe:87:e4:a4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Aug 11 11:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cbbe6f9da78b61bfeeef2f9cf3a22f03d6e8db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:88:dd:bb:3b:88:27:36:43:bc:cc:6e:20:
03:21:46:1b:27:69:79:b4:90:16:cf:69:0b:ee:c0:
bc:5f:11:e7:b6:62:17:b5:06:76:12:1d:7a:be:2c:
51:9e:1f:a3:dd:e9:1e:87:9c:9d:0d:2e:fe:f1:d4:
a5:b5:51:11:4f:e1:1e:85:11:0f:c6:3b:be:24:78:
1e:4a:95:d9:af:bb:b1:b5:10:87:6e:ae:97:48:99:
c9:86:8b:f7:b6:b7:29:5e:03:68:dd:e5:f7:a0:a1:
1a:b3:2c:49:4f:41:0b:09:a3:03:26:cf:a3:f6:27:
06:4f:c7:b8:3e:3b:82:d5:5b:61:65:20:78:e9:2a:
c3:1a:7f:75:8c:3d:db:be:58:2c:91:b0:6b:2e:e0:
32:3d:2d:c6:66:0f:d5:b1:1b:6f:a7:6f:5d:1c:c4:
2f:b0:a7:8e:32:21:85:f2:c4:f9:95:7c:59:60:ed:
d7:c3:c8:34:b0:5a:78:23:49:98:a4:34:5d:34:02:
c1:4d:e5:58:72:a8:96:7a:37:e8:1c:86:d6:cd:00:
3b:ff:9e:4a:01:dc:c3:95:ae:64:4f:97:43:6c:a9:
4c:04:68:d7:ae:3f:7f:e9:55:07:51:44:90:80:14:
0e:b2:0c:80:2d:78:fc:8c:bf:e8:ef:dc:1e:da:a7:
0e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BB:E6:F9:DA:78:B6:1B:FE:EE:F2:F9:CF:3A:22:F0:3D:6E:8D:B0
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/DLvm-dp4thv-7vL5zzoi8D1ujbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.7.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:5d:1e:05:5e:be:0b:2e:f5:74:d3:60:c4:12:dc:5a:e2:2a:
2c:1e:18:f0:0c:1c:fd:aa:44:f8:c0:3f:a4:2b:0d:5b:38:82:
fe:09:f2:65:12:f9:73:ae:8e:e5:c2:9f:b9:de:73:9a:9c:ec:
bb:b4:46:c1:79:ff:80:33:11:c0:a9:4e:3d:46:76:1c:67:84:
81:f5:55:9a:79:b6:42:6d:4e:9b:39:ff:3e:a7:ed:52:a2:1a:
ef:0b:cf:38:0d:1a:88:8b:26:95:b3:b6:86:3d:cc:6f:3d:3c:
bb:88:0e:62:6e:5c:26:00:d0:39:99:7e:11:f4:5a:d9:32:41:
af:25:33:eb:a2:80:d7:93:35:df:05:16:a2:16:66:78:42:4a:
da:0a:f7:1a:90:a0:52:82:ae:2e:eb:f1:0f:9d:ec:d5:b7:a4:
1b:46:cd:45:93:89:af:3d:76:27:e8:f0:60:43:29:db:3e:f3:
58:87:ba:3a:44:f8:b5:7c:4a:76:29:a7:81:d0:29:97:f5:a3:
22:65:c4:54:62:45:87:18:ed:6a:55:2c:16:44:6d:fb:e7:46:
6a:fe:9d:a9:29:7f:d5:f4:32:da:30:14:92:4c:69:8c:3d:d0:
da:24:66:08:3a:ec:36:43:29:f7:97:c9:b7:25:bb:fd:e9:6d:
f7:ea:01:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:55 2024 by rpki-client on console-fra.rpki-client.org