Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/DCExIGcuevBi1wg78tF0aRWqsRU.roa
File: DCExIGcuevBi1wg78tF0aRWqsRU.roa (raw, json)
Hash identifier: 7y6yGzNXmjFfrDIkosm7ofRdwzcSmAKswqEp51Rg6J0=
Subject key identifier: 0C:21:31:20:67:2E:7A:F0:62:D7:08:3B:F2:D1:74:69:15:AA:B1:15
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01875BE1443A17595F72BC6F172787C16A5C
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/DCExIGcuevBi1wg78tF0aRWqsRU.roa
Signing time: Fri 07 Apr 2023 13:21:42 +0000
ROA not before: Fri 07 Apr 2023 13:21:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200088
IP address blocks: 5.44.46.0/24 maxlen: 24
5.44.47.0/24 maxlen: 24
185.166.196.0/24 maxlen: 24
185.166.197.0/24 maxlen: 24
81.200.157.0/24 maxlen: 24
81.200.154.0/24 maxlen: 24
81.200.156.0/24 maxlen: 24
81.200.155.0/24 maxlen: 24
89.191.226.0/24 maxlen: 24
194.31.173.0/24 maxlen: 24
37.220.81.0/24 maxlen: 24
194.31.175.0/24 maxlen: 24
194.31.174.0/24 maxlen: 24
37.220.83.0/24 maxlen: 24
37.220.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5b:e1:44:3a:17:59:5f:72:bc:6f:17:27:87:c1:6a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Apr 7 13:21:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c213120672e7af062d7083bf2d1746915aab115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1f:20:04:16:08:28:96:eb:e8:8d:19:4a:f3:
ab:0b:48:b2:10:8d:d1:04:c6:1c:8b:d0:8b:f8:98:
6e:f1:e4:1e:7d:94:3d:5c:d2:b1:c5:53:15:43:ca:
8e:ab:93:51:e5:ad:ea:80:de:5d:60:40:2e:fa:27:
8b:3f:5c:fc:98:a2:e8:a0:aa:30:e7:ec:43:33:c1:
51:40:3b:2b:f3:8a:e1:d1:c3:64:2a:ee:a3:16:51:
20:a8:98:cf:b4:eb:f7:50:8d:4f:93:15:1d:c3:21:
65:bb:8e:79:63:58:5e:c8:39:a6:53:1a:df:61:04:
49:91:7c:26:81:34:74:a9:9c:3d:2b:c0:de:f2:b4:
ee:66:94:a8:0a:94:c6:27:67:e9:8e:fc:e5:e3:8f:
16:c3:52:ae:72:42:ad:d9:6e:1e:30:3f:a5:28:bf:
a4:39:45:a2:6b:92:1d:6d:65:cc:52:64:39:e9:48:
43:17:dd:dc:9f:35:3f:38:17:9b:fa:cb:64:29:81:
2c:5a:8a:68:57:dc:5d:ad:ed:71:64:5f:3c:a9:cf:
9f:73:86:f1:22:9e:98:1e:54:60:4b:d0:b9:59:10:
e3:d5:3d:47:21:f1:95:1e:b3:6b:95:e2:be:9d:dc:
44:89:bc:97:94:de:37:31:9c:8e:43:88:30:50:b0:
66:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:21:31:20:67:2E:7A:F0:62:D7:08:3B:F2:D1:74:69:15:AA:B1:15
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/DCExIGcuevBi1wg78tF0aRWqsRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.46.0/23
37.220.81.0-37.220.83.255
81.200.154.0-81.200.157.255
89.191.226.0/24
185.166.196.0/23
194.31.173.0-194.31.175.255
Signature Algorithm: sha256WithRSAEncryption
2d:f8:b8:c2:bf:0c:36:2f:3e:05:94:f0:fa:f9:f5:6d:26:2e:
12:a8:b3:83:4a:bd:c1:3a:64:4c:69:cd:8c:68:36:75:77:ae:
85:0e:07:31:7e:66:2a:46:43:7a:a4:c1:47:95:04:2a:57:1e:
03:ad:c7:82:79:4d:eb:12:d1:ef:9a:0c:7d:fa:ab:9c:66:6c:
bf:4d:b6:08:ab:df:c0:8d:8e:b8:56:75:92:db:1f:1a:73:25:
e9:5b:c5:b5:7b:fa:85:98:6e:d4:c9:aa:59:38:b1:87:e9:70:
3a:57:cb:c4:98:de:a6:95:77:ae:05:c4:f1:80:9e:d3:61:51:
e3:c3:74:79:75:82:cb:0a:03:b3:ff:fc:5f:31:87:7a:92:68:
33:08:80:c2:6e:e8:8f:19:10:00:a5:51:38:f6:86:81:21:95:
33:26:8d:02:f1:79:98:1e:0f:d4:12:7d:59:c0:3b:44:67:7f:
b6:43:f1:ed:02:90:6e:ed:ba:9d:c2:98:f2:8b:bc:49:0f:19:
e3:8b:ae:5a:45:68:a1:bd:1f:b7:8e:0b:6c:d0:fe:44:c0:c9:
5c:cf:68:c9:af:fa:1f:71:01:7a:53:dc:6d:a6:d2:09:08:80:
65:30:be:f7:aa:d1:7e:9b:58:56:d5:c4:3e:71:e4:1c:12:db:
60:07:89:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-fra.rpki-client.org