Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/DDV4dApxuBw_-97XVJjbzVACHNc.roa
File: DDV4dApxuBw_-97XVJjbzVACHNc.roa (raw, json)
Hash identifier: fHAsKxkdRUw85GFbxS17RCrglLS7vRXYQcywF0o1vNo=
Subject key identifier: 0C:35:78:74:0A:71:B8:1C:3F:FB:DE:D7:54:98:DB:CD:50:02:1C:D7
Certificate issuer: /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Certificate serial: 01856FA701307F32526404162962E5F51F75
Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/DDV4dApxuBw_-97XVJjbzVACHNc.roa
Signing time: Sun 01 Jan 2023 23:24:53 +0000
ROA not before: Sun 01 Jan 2023 23:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47328
IP address blocks: 212.124.108.0/22 maxlen: 24
212.124.112.0/21 maxlen: 24
212.124.120.0/21 maxlen: 24
185.190.188.0/24 maxlen: 24
185.190.189.0/24 maxlen: 24
83.222.124.0/22 maxlen: 24
212.124.96.0/22 maxlen: 24
212.124.100.0/22 maxlen: 24
212.124.104.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:01:30:7f:32:52:64:04:16:29:62:e5:f5:1f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Validity
Not Before: Jan 1 23:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c3578740a71b81c3ffbded75498dbcd50021cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:ba:80:4a:30:30:e7:16:bd:da:ab:f6:93:
ce:d0:e7:cf:e9:94:cc:b8:ff:83:10:58:5c:ae:84:
61:14:3e:42:7d:42:58:0c:1f:85:cf:84:44:c6:68:
7d:f3:8c:ad:7d:4d:50:88:ef:ea:3b:5a:f8:b4:cf:
34:f2:38:d6:c5:55:14:68:07:05:3b:0c:c2:f3:2b:
86:68:11:41:54:65:0a:69:be:1b:82:0f:54:47:f9:
0a:d7:03:10:67:1b:c8:18:1f:98:a0:3d:42:16:57:
e4:6d:4e:29:0d:eb:0e:2a:b4:7c:a4:2a:6e:72:e1:
cd:14:8c:0a:c0:ad:12:71:5d:cb:bf:4b:3b:35:f5:
df:fb:ba:d8:a2:0a:4f:a5:c8:da:56:15:d5:24:06:
46:fb:86:64:90:00:26:b5:9c:03:91:30:ac:d4:cc:
9e:70:a1:2b:f5:02:46:26:a8:7f:ef:e3:e8:07:4b:
92:ba:68:56:28:0e:cd:4e:78:dc:2f:c3:3e:48:bd:
44:6d:eb:d0:ce:7a:63:ea:cf:bd:73:a6:3e:01:b3:
e8:7a:fd:a8:64:89:bd:0f:8d:2e:8e:3d:b7:58:a9:
63:e7:58:2e:5e:7e:18:0f:be:74:32:c2:92:d3:48:
2c:5d:0c:2a:e0:3b:36:2b:ff:11:9b:83:42:a5:4c:
2f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:35:78:74:0A:71:B8:1C:3F:FB:DE:D7:54:98:DB:CD:50:02:1C:D7
X509v3 Authority Key Identifier:
keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/DDV4dApxuBw_-97XVJjbzVACHNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.222.124.0/22
185.190.188.0/23
212.124.96.0/19
Signature Algorithm: sha256WithRSAEncryption
8e:26:c4:97:c4:30:62:ef:e6:99:df:85:3c:83:a1:35:40:55:
f0:f6:1b:26:ec:79:0b:95:9a:6b:42:bd:5b:0c:1b:2c:f5:50:
81:5d:eb:d2:9c:02:b1:0b:e9:69:ab:30:38:fd:37:35:a9:79:
cd:db:aa:00:bb:f1:c2:54:83:df:b2:2d:37:22:8e:59:00:c0:
e3:0d:92:eb:94:71:f6:f2:ff:d0:8f:87:12:2a:85:53:7e:32:
6d:23:17:6c:0b:ac:93:11:7e:e5:17:9d:a0:1b:7b:af:91:bc:
0c:1e:58:e0:dc:08:d5:f1:d5:bf:97:34:e0:7b:80:f9:33:06:
bc:af:16:d0:42:1f:b4:db:8a:11:1f:a9:cb:58:4f:b1:3c:aa:
4c:c4:43:dd:b2:89:7b:c3:97:3d:ad:45:db:66:48:5b:00:3d:
b3:86:2c:36:1a:49:01:34:ad:15:60:ae:80:fd:83:09:dd:7c:
44:a8:e3:8c:72:64:92:9d:dd:18:a6:bc:8f:f6:32:b9:74:83:
2b:ee:0d:cb:d9:71:d6:83:b7:66:3e:f0:87:29:c3:5d:6c:f7:
d9:75:2d:93:3c:4d:be:6e:ca:6d:63:4c:96:9e:53:17:64:08:
96:4e:28:15:7d:56:c7:d1:c9:e5:d8:63:9e:77:7e:3c:20:dc:
66:85:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:27 2024 by rpki-client on console-ams.rpki-client.org