Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/DX_rv0QLuWZlFUofQaoFd2DQzS8.roa
File: DX_rv0QLuWZlFUofQaoFd2DQzS8.roa (raw, json)
Hash identifier: OuZbyVSqRI5XvLs40R6mUSLQZmukp+b/MpS4+aMXUk0=
Subject key identifier: 0D:7F:EB:BF:44:0B:B9:66:65:15:4A:1F:41:AA:05:77:60:D0:CD:2F
Certificate issuer: /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Certificate serial: 018BDD6DC9785C9CBD6E89A95C4D779ACFCA
Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/DX_rv0QLuWZlFUofQaoFd2DQzS8.roa
Signing time: Fri 17 Nov 2023 13:17:21 +0000
ROA not before: Fri 17 Nov 2023 13:17:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.3.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:6d:c9:78:5c:9c:bd:6e:89:a9:5c:4d:77:9a:cf:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Validity
Not Before: Nov 17 13:17:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d7febbf440bb96665154a1f41aa057760d0cd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4c:cb:df:fa:3e:7f:3d:08:e7:7a:94:c3:51:
4c:6a:1f:21:16:3d:2c:03:ec:60:3f:d2:0e:9c:2c:
6f:87:68:fb:a1:7b:c7:ce:fb:83:32:aa:b8:ec:46:
d8:36:fc:2a:11:d0:02:a3:cb:03:25:e1:eb:11:51:
1a:05:7f:1d:1b:53:56:c0:d1:87:16:16:60:d2:bb:
f3:3f:b2:33:63:b4:bc:31:19:e8:d9:9a:ea:26:57:
68:0e:df:5a:0d:fe:16:7a:c0:a0:81:f8:2e:6e:7a:
3d:6c:4f:44:38:5e:64:62:1d:a5:9d:0b:00:99:16:
be:0a:37:3b:f2:48:b1:02:7b:fd:c0:c5:76:81:7e:
19:80:52:ca:91:4c:aa:b4:98:67:71:dc:19:04:34:
27:ad:d2:4f:bd:71:fb:79:bb:d1:f7:4d:51:3b:2b:
21:cd:8e:bb:53:68:94:00:a1:9b:54:5c:ee:37:20:
b1:30:5a:1d:3c:02:2c:dc:08:27:3d:79:28:11:0a:
9f:f7:f0:9d:65:6a:d3:e0:d6:6f:9d:a0:94:87:fc:
52:16:5d:61:c0:ba:bc:5d:5c:cb:b4:cd:c1:25:e0:
50:81:7c:eb:71:80:14:8e:ae:ca:6f:7b:9a:55:ff:
bd:c5:84:7b:fa:03:c8:ea:79:cc:20:47:a1:20:0d:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7F:EB:BF:44:0B:B9:66:65:15:4A:1F:41:AA:05:77:60:D0:CD:2F
X509v3 Authority Key Identifier:
keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/DX_rv0QLuWZlFUofQaoFd2DQzS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.54.0/24
Signature Algorithm: sha256WithRSAEncryption
57:53:ae:58:55:0e:dc:96:33:bf:ee:54:c2:b2:63:96:d9:65:
46:ec:9c:1f:e5:0b:07:11:ff:6d:53:1f:59:1b:05:02:3c:e5:
63:67:f3:fc:fe:12:f4:fc:fe:58:db:71:90:a7:c0:44:a7:37:
92:d3:00:a2:04:a8:77:cb:85:b5:3a:49:37:a4:ce:2d:fa:63:
fb:10:b5:fe:25:db:cb:44:09:a4:f8:45:ef:45:3e:e8:1b:7a:
d8:3e:40:62:2e:5b:44:9b:d3:74:da:62:0d:07:f8:91:18:c3:
cb:d2:bc:17:d2:bb:be:b1:8b:82:14:3e:2e:b6:1d:b2:1d:ff:
ae:6d:5d:b7:e7:59:24:a1:0e:21:53:b0:bd:b2:79:31:24:4e:
9e:1d:a2:23:0e:cb:33:fa:b9:fd:2d:ac:4d:d9:e2:86:62:69:
5f:ee:92:ae:d0:ad:02:41:ae:1f:2c:9b:51:bb:c7:94:b6:27:
75:80:a2:f4:12:de:3b:fd:3b:bf:7f:2a:88:8a:9c:d4:91:8c:
a3:6a:5f:1d:12:25:c8:79:e1:d7:32:97:33:a5:de:2c:54:c5:
f4:4d:75:3d:32:d9:d7:3b:c5:98:4d:98:0d:28:8c:a5:23:fc:
9b:f0:95:55:11:e5:a1:73:86:b7:cd:cb:56:32:70:72:82:ab:
c3:5e:1c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:28 2024 by rpki-client on console-fra.rpki-client.org