Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/dd_UND_c5pIxf530K8X2Yceh8co.roa
File: dd_UND_c5pIxf530K8X2Yceh8co.roa (raw, json)
Hash identifier: /3grw3kbvtXbPGFYGD4kuNSbrTwuMaGncGdYjev0VPc=
Subject key identifier: 75:DF:D4:34:3F:DC:E6:92:31:7F:9D:F4:2B:C5:F6:61:C7:A1:F1:CA
Certificate issuer: /CN=893afc6efe62990a26932f40e150b27eed539c4b
Certificate serial: 01856F3904591EEAD28EB216A9B5BF682EA9
Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/dd_UND_c5pIxf530K8X2Yceh8co.roa
Signing time: Sun 01 Jan 2023 21:24:45 +0000
ROA not before: Sun 01 Jan 2023 21:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12330
IP address blocks: 195.94.96.0/21 maxlen: 21
195.94.104.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:04:59:1e:ea:d2:8e:b2:16:a9:b5:bf:68:2e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b
Validity
Not Before: Jan 1 21:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75dfd4343fdce692317f9df42bc5f661c7a1f1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a1:cb:55:35:40:6a:d2:d5:57:13:e4:18:3b:
23:31:0d:73:29:a3:34:55:b6:04:6f:85:cc:76:12:
97:10:80:84:aa:64:5a:ca:96:62:f9:2e:57:5b:8b:
3e:29:ac:7c:9c:fd:07:af:42:c9:94:32:fc:a7:5c:
cf:6b:62:9d:03:a5:81:5d:17:88:bc:47:c8:2f:68:
ce:1d:4a:fa:8f:95:fc:e7:90:c7:ba:7a:bb:52:ff:
e3:f7:88:1c:aa:09:a2:96:e4:cc:ff:d1:a9:dd:7a:
a6:03:25:36:42:7a:4f:3a:ef:6e:ab:4c:26:56:25:
74:b1:2e:73:a5:b9:52:27:6f:8c:b2:20:67:42:f6:
1a:fa:85:1b:5e:1d:8a:a6:ee:f9:48:c7:ac:52:3a:
0c:65:35:79:88:47:78:3e:08:a3:2f:12:a6:ee:e7:
df:ef:3a:59:04:79:14:9a:65:ab:3b:6f:bb:7e:29:
d5:99:d4:13:b1:6e:4e:b4:70:3a:f7:a6:35:15:b4:
76:51:aa:76:40:1e:10:21:35:08:a6:5e:ac:02:e1:
cd:b0:06:1e:34:3b:3b:62:d1:ac:4a:67:53:c7:fc:
26:e3:b1:a6:3d:ed:a1:00:01:cd:ec:16:00:5b:1c:
71:80:d5:7c:4b:8e:3a:09:99:ff:c4:39:b4:a8:07:
5f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DF:D4:34:3F:DC:E6:92:31:7F:9D:F4:2B:C5:F6:61:C7:A1:F1:CA
X509v3 Authority Key Identifier:
keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/dd_UND_c5pIxf530K8X2Yceh8co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.94.96.0-195.94.107.255
Signature Algorithm: sha256WithRSAEncryption
27:a2:2e:7f:0f:1c:d6:9a:06:f2:97:82:98:7b:03:a3:5d:34:
f9:38:f0:6c:be:43:2a:40:37:cf:b6:e2:04:46:87:2d:78:58:
22:19:8d:7c:4f:02:70:89:6e:2f:9f:95:7a:05:6d:1b:69:2a:
8a:b8:9b:e8:6d:59:fb:c1:22:47:95:fc:51:e2:3b:0b:f8:15:
80:20:72:db:37:9f:da:90:03:7e:f0:c1:90:30:cb:2d:e3:92:
63:01:3f:52:8c:55:c4:e3:4d:0d:29:59:f3:14:ad:07:60:f3:
11:df:e7:45:9a:be:33:a8:5b:1a:4f:ee:9b:17:02:67:78:e0:
64:c0:fb:b7:d0:cd:64:22:09:1c:d4:58:a0:08:31:e9:3b:da:
fe:94:f2:ab:fd:42:6c:03:3d:81:39:30:73:c0:7f:ad:fd:f6:
f7:fe:ab:3b:f3:84:5e:e7:71:76:05:be:db:35:19:f5:29:07:
b0:a2:5f:b5:b5:72:f7:ac:e5:10:70:60:f9:c0:07:0c:f5:a6:
32:6d:54:5e:2f:38:13:c4:06:5b:3b:2c:28:88:90:e5:e2:ab:
0f:f2:c1:1c:b9:0a:5f:4e:bb:5b:39:93:b6:0a:d5:df:66:bb:
98:08:c8:90:48:a0:2d:30:94:38:54:bf:04:23:b1:a8:e6:3a:
ff:87:ca:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:48 2024 by rpki-client on console-ams.rpki-client.org