Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/DpNwpxLqMgkYu5Jj3nodcZrpLyk.roa
File: DpNwpxLqMgkYu5Jj3nodcZrpLyk.roa (raw, json)
Hash identifier: 7HDQuk2BynPhVgFUpc82Sr+a69uMkHW2HdIZgEWJv0I=
Subject key identifier: 0E:93:70:A7:12:EA:32:09:18:BB:92:63:DE:7A:1D:71:9A:E9:2F:29
Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial: 0186FBA172E56A1FAE003A08EA20D2C306C4
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/DpNwpxLqMgkYu5Jj3nodcZrpLyk.roa
Signing time: Sun 19 Mar 2023 20:48:27 +0000
ROA not before: Sun 19 Mar 2023 20:48:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 185.125.85.0/24 maxlen: 24
193.0.181.0/24 maxlen: 24
185.125.87.0/24 maxlen: 24
193.0.182.0/24 maxlen: 24
193.0.180.0/24 maxlen: 24
185.125.86.0/24 maxlen: 24
185.71.229.0/24 maxlen: 24
185.71.230.0/24 maxlen: 24
185.71.231.0/24 maxlen: 24
185.71.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fb:a1:72:e5:6a:1f:ae:00:3a:08:ea:20:d2:c3:06:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Validity
Not Before: Mar 19 20:48:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e9370a712ea320918bb9263de7a1d719ae92f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:67:34:b5:db:96:f4:fc:62:eb:5e:10:00:
e6:b6:e3:b5:70:65:7f:ce:44:85:78:d7:9b:7e:60:
30:a0:71:75:c8:8a:4d:ab:4a:cf:da:49:3a:07:f5:
85:63:56:86:9a:72:ce:ec:f2:50:26:c1:cf:aa:5f:
46:b0:91:21:e6:39:09:f9:c5:27:97:d3:20:38:e3:
74:31:20:f3:62:e9:28:06:97:b8:63:05:89:3d:ca:
f1:a5:ea:69:62:1f:4f:a0:70:4f:85:fd:d3:11:2d:
80:53:df:d3:49:09:ed:f5:00:85:16:2a:77:65:8b:
f8:04:9f:c6:57:de:8b:05:16:99:3f:a9:3e:91:35:
4e:f3:de:a7:bc:b7:32:2d:af:25:b1:aa:e7:c4:71:
e9:ca:9a:d8:c4:f5:4b:8b:1e:0c:2c:59:ab:db:72:
e4:87:0a:ad:6b:0b:85:ea:c5:05:77:63:a8:90:5d:
59:98:2a:a8:c0:9b:b4:33:dd:52:e4:05:a9:73:1a:
f7:b9:27:ef:b8:5d:a5:f1:e2:60:ce:30:99:16:10:
bb:49:11:ab:03:96:8e:48:15:4a:97:6f:81:88:c0:
13:f7:20:d1:5c:a9:2a:19:68:d4:cf:fe:a6:83:68:
9a:f3:cd:70:6c:52:1b:34:a3:f7:c9:89:3d:04:fd:
42:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:93:70:A7:12:EA:32:09:18:BB:92:63:DE:7A:1D:71:9A:E9:2F:29
X509v3 Authority Key Identifier:
keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/DpNwpxLqMgkYu5Jj3nodcZrpLyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.228.0/22
185.125.85.0-185.125.87.255
193.0.180.0-193.0.182.255
Signature Algorithm: sha256WithRSAEncryption
0e:1e:f3:17:74:9a:83:57:90:4a:9e:4f:a0:1b:57:4e:45:11:
88:27:13:6f:f8:06:0a:7d:0f:fe:85:a7:2d:74:fb:30:3e:86:
26:68:4e:ef:e0:48:18:88:59:fc:90:e7:df:a0:af:f1:67:72:
e8:c4:76:d5:b2:39:bd:d9:98:a0:77:3e:ba:f5:00:e6:aa:c4:
32:cf:70:69:37:15:a3:87:5d:1c:ae:0d:e8:e1:c0:ee:4a:c6:
5c:75:38:ce:ca:c6:8c:32:87:b8:f7:1a:3c:47:c2:89:71:8f:
98:9b:33:7b:6b:13:3a:47:d4:82:1c:c7:24:a5:a1:27:e3:38:
e7:22:3f:50:b3:70:41:7d:30:24:05:26:d4:a1:3f:cd:ea:87:
19:6e:bc:9f:45:f4:c4:2f:62:4f:df:64:dd:70:32:59:70:0f:
7f:5f:6a:4c:4b:3b:0b:c6:87:16:23:f2:51:02:b9:06:36:c0:
13:68:da:f0:14:1d:70:97:19:04:59:f7:e3:84:52:d6:bb:c6:
19:bf:36:55:10:1a:74:f2:b7:78:7c:bc:11:48:88:c4:a3:82:
75:99:0c:48:a1:51:c7:23:4a:53:40:fa:49:81:24:08:01:b7:
1b:24:40:6a:15:a1:93:fd:25:03:fd:46:e3:ba:00:3a:be:8b:
de:0e:39:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:17 2023 by rpki-client on console-fra.rpki-client.org