Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/DcNurl_Iqzc3Xj_1POBXciocGtU.roa
File: DcNurl_Iqzc3Xj_1POBXciocGtU.roa (raw, json)
Hash identifier: mPVs4b7jgOiaMO5iHU8GueK752ApWFP6jYP7DnDcQeU=
Subject key identifier: 0D:C3:6E:AE:5F:C8:AB:37:37:5E:3F:F5:3C:E0:57:72:2A:1C:1A:D5
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0185727107FF9A7FF1CCEE06064AC1D79321
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/DcNurl_Iqzc3Xj_1POBXciocGtU.roa
Signing time: Mon 02 Jan 2023 12:24:48 +0000
ROA not before: Mon 02 Jan 2023 12:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 85.133.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jul 2023 20:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:07:ff:9a:7f:f1:cc:ee:06:06:4a:c1:d7:93:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 2 12:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dc36eae5fc8ab37375e3ff53ce057722a1c1ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:97:4f:27:02:e8:24:20:d7:a6:6d:0a:9b:
7d:b2:60:36:8f:33:96:a8:d9:40:28:92:ef:b5:19:
0d:51:1d:09:7c:f9:94:a9:2d:eb:b5:a5:be:94:76:
1f:22:c8:76:4c:cb:e5:ef:b0:fc:1a:82:a4:c0:c9:
04:2f:54:28:4d:cd:4d:40:33:5e:73:28:5d:98:b8:
1f:4a:c6:7d:64:85:a5:c9:98:db:81:36:78:94:d2:
d6:53:71:8b:61:88:5a:08:5d:02:17:ec:89:6d:b6:
7d:13:75:1a:26:13:c5:3f:7d:0e:79:a6:49:e5:f5:
0a:24:28:79:fc:6e:db:41:0a:3a:67:04:7b:59:6b:
be:07:5f:6b:cf:eb:9a:c3:0b:38:10:00:19:a3:30:
83:7d:f2:79:fb:3f:90:76:99:b4:a5:37:50:74:06:
50:a5:6c:b6:ce:2c:dc:54:1a:27:ff:62:58:22:f0:
ef:6d:b0:45:ca:fe:6b:b1:ff:a5:ff:30:11:9f:bc:
47:62:28:7e:1f:04:30:a6:e8:15:21:2e:27:e5:0a:
5a:3a:b2:40:c8:af:92:18:8e:92:dd:3c:db:a0:16:
7d:a2:9f:e4:d1:fb:84:b9:8b:06:d8:07:3d:81:4b:
a8:31:3e:2a:6c:1e:2d:45:40:57:e0:47:3f:7c:8a:
e4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C3:6E:AE:5F:C8:AB:37:37:5E:3F:F5:3C:E0:57:72:2A:1C:1A:D5
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/DcNurl_Iqzc3Xj_1POBXciocGtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.222.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2b:bd:17:54:57:4b:8c:87:5c:c8:e0:4a:0d:b9:d0:76:f6:
4f:8c:2c:e2:72:71:aa:7f:82:54:05:a0:01:58:b4:da:5b:66:
c5:83:af:ca:76:c7:af:0e:2a:a2:09:66:39:25:5e:39:a1:3c:
eb:21:9b:90:8e:93:f2:69:27:e7:41:33:7a:ab:f3:97:8c:1e:
88:95:cd:b9:4e:3f:59:4c:2e:2a:8e:d4:a4:77:7e:46:b4:be:
71:81:6b:2f:ee:d8:da:ac:69:6f:3b:c7:d4:b7:c4:02:51:41:
83:52:45:79:5d:70:c7:d8:49:e6:a6:dc:d9:9b:f2:77:a7:63:
cf:00:b7:5e:c3:19:51:e4:a7:74:27:20:8c:f0:cd:37:d7:11:
9e:43:63:7f:33:e4:57:fd:8d:25:61:52:e2:cc:bf:8b:10:03:
81:86:3f:69:e6:87:fb:a8:42:64:8a:f2:65:d8:fa:b7:37:56:
fb:97:42:5c:50:c6:b2:78:f6:91:a2:69:35:fe:af:54:d8:c9:
43:6e:73:bf:d1:1b:b3:fb:a6:67:e2:12:be:78:82:0d:6c:7b:
3d:ce:68:2c:b6:5f:6f:fb:ed:fa:e3:36:fa:76:37:18:2c:1f:
62:28:39:bf:0a:c9:9e:ef:61:49:1d:ae:e5:d3:fd:7e:08:40:
56:a2:fd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:12 2024 by rpki-client on console-fra.rpki-client.org