Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/daCfR-LPYwDRovUVvv4ZLjrdkpQ.roa
File: daCfR-LPYwDRovUVvv4ZLjrdkpQ.roa (raw, json)
Hash identifier: BVBXYi5NHP8WK9EMYQ8Kx4p2lhvfkdNemXw1MAk+Ikw=
Subject key identifier: 75:A0:9F:47:E2:CF:63:00:D1:A2:F5:15:BE:FE:19:2E:3A:DD:92:94
Certificate issuer: /CN=93fd26d3a0b693a029bc62dcb9dda9519e477640
Certificate serial: 01889A8D9C7ABC2273D77320523CF99C87C4
Authority key identifier: 93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/daCfR-LPYwDRovUVvv4ZLjrdkpQ.roa
Signing time: Thu 08 Jun 2023 10:29:11 +0000
ROA not before: Thu 08 Jun 2023 10:29:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60515
IP address blocks: 185.88.35.0/24 maxlen: 24
185.88.32.0/22 maxlen: 22
185.88.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:8d:9c:7a:bc:22:73:d7:73:20:52:3c:f9:9c:87:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fd26d3a0b693a029bc62dcb9dda9519e477640
Validity
Not Before: Jun 8 10:29:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75a09f47e2cf6300d1a2f515befe192e3add9294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:80:7a:ae:03:ff:96:b3:6a:89:56:71:fb:fa:
4a:d3:c7:9c:a1:9a:dc:d6:de:49:8a:fc:c6:f5:58:
64:6e:39:c2:e7:69:c7:42:48:26:f3:e5:a6:aa:1e:
55:c2:a6:76:d6:8e:d9:6c:c8:7f:61:0d:89:d4:a4:
e1:b9:1d:7a:ea:09:2a:8f:a1:d1:42:a8:1b:96:b2:
19:90:cd:dd:eb:4f:8a:87:0c:52:c9:dc:2e:45:ec:
ea:6f:3b:56:46:4f:78:d2:b1:da:e5:dd:cb:f8:01:
e9:82:4c:28:3e:3d:ac:47:ec:4b:4b:2a:f7:af:06:
ec:2d:8a:bb:05:e5:7b:ee:8f:a6:0d:b4:51:de:b5:
93:a8:3f:2d:36:a9:df:25:96:ee:29:b3:37:20:32:
e6:9d:b9:df:6a:02:9b:fe:d9:a3:3a:e2:1c:e8:81:
67:b3:4d:ff:e9:0d:0d:17:c2:a0:a8:85:22:f1:cf:
41:93:c6:52:3e:cd:0d:1e:5c:b6:e0:0f:4c:a1:2a:
7b:b0:29:72:a6:6e:49:44:ad:52:23:7c:96:04:68:
5e:c9:05:82:9a:25:8c:be:26:eb:c3:71:1a:e9:80:
c4:54:b5:b8:df:62:dc:15:bd:49:3f:41:28:88:9f:
7e:e9:1a:e7:b4:08:f3:b3:02:72:76:05:d2:b7:61:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A0:9F:47:E2:CF:63:00:D1:A2:F5:15:BE:FE:19:2E:3A:DD:92:94
X509v3 Authority Key Identifier:
keyid:93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/daCfR-LPYwDRovUVvv4ZLjrdkpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.32.0/22
Signature Algorithm: sha256WithRSAEncryption
24:ab:06:0c:80:3d:0f:0b:26:ff:c0:6f:76:2a:19:c0:8c:c0:
12:d4:14:de:2b:f9:37:e5:d0:ad:c9:79:87:35:9e:62:05:21:
48:e9:75:79:43:ff:f1:a0:71:c1:0d:2f:6c:99:62:92:30:6b:
1f:74:66:aa:c0:26:d4:e0:97:7a:01:fa:f8:03:37:b4:01:ac:
3e:e6:4d:39:fb:03:9a:70:58:d1:b7:fd:89:14:01:4c:60:d6:
86:c2:51:f3:07:36:72:43:75:fc:f5:a1:60:be:fd:01:dd:cd:
7c:6e:55:d5:4c:be:8f:36:36:4e:78:85:17:f4:75:13:36:92:
db:f5:c4:1c:ed:a3:9d:0a:6a:ab:83:e4:7f:b0:a3:b1:69:8d:
3c:3b:0b:76:fe:9a:6b:5a:28:c4:13:d7:61:17:0b:4b:f6:31:
1e:5f:f2:22:6d:cd:fd:b8:68:45:92:b6:5f:f7:6d:00:11:95:
15:7d:ed:13:ae:3d:9a:e3:97:7b:6f:1a:64:a3:5d:ee:cc:b7:
ed:4e:3d:e9:2c:aa:cf:f0:c4:4b:dc:dc:94:ec:b3:07:7b:65:
51:07:c7:ba:8a:7d:2c:2d:b8:ba:14:57:4e:37:57:27:61:4d:
ca:d3:05:53:6b:bc:fa:84:bc:0a:e9:84:54:1e:e1:b0:52:95:
93:e2:e2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:10 2023 by rpki-client on console.sobornost.net