Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/DfPDw7lYtaAUcJ37yd4mE58r0EQ.roa
File: DfPDw7lYtaAUcJ37yd4mE58r0EQ.roa (raw, json)
Hash identifier: SfcWzUzamAgjutTyFFNyxpsLyja7IStNxkwW122SDlM=
Subject key identifier: 0D:F3:C3:C3:B9:58:B5:A0:14:70:9D:FB:C9:DE:26:13:9F:2B:D0:44
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 0188BEE07FCB7B613CD2D26080C2273BACA9
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/DfPDw7lYtaAUcJ37yd4mE58r0EQ.roa
Signing time: Thu 15 Jun 2023 11:46:03 +0000
ROA not before: Thu 15 Jun 2023 11:46:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5410
IP address blocks: 31.32.0.0/13 maxlen: 13
80.214.248.0/21 maxlen: 21
213.44.0.0/16 maxlen: 16
62.201.128.0/19 maxlen: 19
80.215.0.0/16 maxlen: 16
195.36.128.0/17 maxlen: 17
212.194.0.0/15 maxlen: 15
62.34.0.0/15 maxlen: 15
80.214.192.0/19 maxlen: 19
176.128.0.0/10 maxlen: 10
194.158.96.0/19 maxlen: 19
80.214.0.0/17 maxlen: 17
5.48.0.0/14 maxlen: 14
164.177.0.0/17 maxlen: 17
194.117.192.0/20 maxlen: 20
89.80.0.0/12 maxlen: 12
128.78.0.0/15 maxlen: 15
94.238.0.0/15 maxlen: 15
80.214.128.0/18 maxlen: 18
Validation: Failed, certificate revoked on Fri 16 Jun 2023 07:44:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:e0:7f:cb:7b:61:3c:d2:d2:60:80:c2:27:3b:ac:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Jun 15 11:46:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0df3c3c3b958b5a014709dfbc9de26139f2bd044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6a:bf:48:16:b2:67:79:37:8e:b5:36:b9:bd:
86:b4:1f:ab:fa:be:52:b3:76:4b:d2:59:9e:43:b0:
45:d8:df:a8:2d:38:06:9f:04:5c:c6:e4:74:ec:28:
b9:34:a6:e6:ba:ea:8e:51:fc:32:14:7f:74:01:8a:
bf:c9:09:87:1d:bb:50:9e:3f:44:ca:75:eb:e6:0f:
5a:7d:ad:17:e0:65:ba:3b:1b:01:ef:8f:f0:db:6c:
af:a7:ee:5d:89:44:8c:af:7b:96:3b:ab:6e:ba:c1:
c4:bf:ed:26:ce:9e:ac:60:cc:89:cf:c2:f7:7f:00:
a9:0b:36:e9:42:e0:dc:6e:14:b9:58:e3:8a:ae:2c:
d2:27:1b:00:3a:82:cc:f5:bc:b5:b3:ba:34:6c:a6:
fc:e2:4d:00:a1:da:9e:7b:79:c9:a7:5b:3e:82:7d:
d8:12:52:8a:21:59:82:d8:07:73:aa:63:ff:7c:ec:
4b:c7:88:de:f6:15:5e:56:ff:3e:86:d3:94:62:75:
ea:87:be:31:ac:32:a1:18:00:57:b9:c4:eb:c7:7d:
9b:8b:be:8e:8b:c6:43:24:5f:e7:16:c1:64:83:76:
49:2d:96:de:a1:41:b4:2c:ee:52:c5:b9:ae:9b:87:
17:d2:94:8d:6c:05:c7:c3:1c:ca:72:26:8b:07:38:
3c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F3:C3:C3:B9:58:B5:A0:14:70:9D:FB:C9:DE:26:13:9F:2B:D0:44
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/DfPDw7lYtaAUcJ37yd4mE58r0EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.48.0.0/14
31.32.0.0/13
62.34.0.0/15
62.201.128.0/19
80.214.0.0-80.214.223.255
80.214.248.0-80.215.255.255
89.80.0.0/12
94.238.0.0/15
128.78.0.0/15
164.177.0.0/17
176.128.0.0/10
194.117.192.0/20
194.158.96.0/19
195.36.128.0/17
212.194.0.0/15
213.44.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:72:d9:02:cf:1f:8a:6b:1e:9f:1e:ac:7e:4e:46:9c:04:2a:
00:69:89:b9:c5:68:13:66:07:13:8e:be:47:c4:9f:80:bc:de:
8a:56:e1:d5:c9:fd:ec:f8:82:a4:a7:21:5f:81:1d:dd:19:ed:
03:8e:aa:01:7b:80:14:ea:da:d6:89:23:07:00:49:a3:41:62:
a1:c4:39:0b:67:36:db:f6:59:24:6e:7f:b2:bb:14:56:1a:80:
b6:c7:af:15:02:c5:1a:b7:7e:55:84:e5:1d:41:c6:a4:0f:d4:
de:1b:f6:5b:13:df:8a:08:2d:64:89:a6:3a:ef:82:ec:a7:2d:
9d:d0:f6:b6:9e:14:20:0c:bf:fb:55:6e:2f:e8:37:98:4e:59:
8a:90:e2:85:82:62:8b:3a:11:14:1d:c9:60:4f:47:0d:b8:60:
19:f6:9e:22:48:5c:17:03:38:23:44:fd:a8:af:1d:bf:40:29:
c6:9d:de:ca:d0:3c:57:74:f5:7f:15:92:db:9c:9f:e2:4a:26:
58:0a:f1:3b:99:bd:0a:06:9c:45:83:ed:6d:0b:b3:1f:7a:ba:
25:55:f6:8a:f6:29:87:08:c5:e3:c7:47:c3:c6:14:4f:45:d7:
2a:fc:61:ff:0d:87:aa:50:5a:eb:bc:8b:83:42:82:9f:44:b4:
2f:f2:87:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:38 2024 by rpki-client on console-fra.rpki-client.org