Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/Lduaiero3A_HRgYvkgokWeNmA5k.roa
File: Lduaiero3A_HRgYvkgokWeNmA5k.roa (raw, json)
Hash identifier: MGr7lYDVzgevSLmI+PnjWfmpaYQiEAZCoPWH49AUSj0=
Subject key identifier: 2D:DB:9A:89:EA:E8:DC:0F:C7:46:06:2F:92:0A:24:59:E3:66:03:99
Certificate issuer: /CN=1f21c543844c417f61ad7939244d3b759c2a43ed
Certificate serial: 01885222600B7F6F4AB0CA30F09890E97624
Authority key identifier: 1F:21:C5:43:84:4C:41:7F:61:AD:79:39:24:4D:3B:75:9C:2A:43:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/Lduaiero3A_HRgYvkgokWeNmA5k.roa
Signing time: Thu 25 May 2023 08:59:24 +0000
ROA not before: Thu 25 May 2023 08:59:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60304
IP address blocks: 185.33.35.0/24 maxlen: 24
185.33.34.0/24 maxlen: 24
185.33.33.0/24 maxlen: 24
185.33.32.0/24 maxlen: 24
2a04:5900::/48 maxlen: 48
2a04:5901:7::/48 maxlen: 48
2a04:5901:22::/48 maxlen: 48
2a04:5901:18::/48 maxlen: 48
2a04:5901:29::/48 maxlen: 48
2a04:5901:e::/48 maxlen: 48
2a04:5901:1f::/48 maxlen: 48
2a04:5901:4::/48 maxlen: 48
2a04:5901:15::/48 maxlen: 48
2a04:5901:b::/48 maxlen: 48
2a04:5901:1::/48 maxlen: 48
2a04:5901:26::/48 maxlen: 48
2a04:5901:17::/48 maxlen: 48
2a04:5901:d::/48 maxlen: 48
2a04:5900:1::/48 maxlen: 48
2a04:5901:3::/48 maxlen: 48
2a04:5901:28::/48 maxlen: 48
2a04:5901:1e::/48 maxlen: 48
2a04:5901:14::/48 maxlen: 48
2a04:5901:25::/48 maxlen: 48
2a04:5901:a::/48 maxlen: 48
2a04:5901:1b::/48 maxlen: 48
2a04:5901:11::/48 maxlen: 48
2a04:5901:27::/48 maxlen: 48
2a04:5901:c::/48 maxlen: 48
2a04:5901:1d::/48 maxlen: 48
2a04:5901:2::/48 maxlen: 48
2a04:5901:13::/48 maxlen: 48
2a04:5901:9::/48 maxlen: 48
2a04:5900::/32 maxlen: 32
2a04:5901:24::/48 maxlen: 48
2a04:5901:1a::/48 maxlen: 48
2a04:5901:2b::/48 maxlen: 48
2a04:5901:10::/48 maxlen: 48
2a04:5901:21::/48 maxlen: 48
2a04:5901:6::/48 maxlen: 48
2a04:5901:1c::/48 maxlen: 48
2a04:5901:12::/48 maxlen: 48
2a04:5901:23::/48 maxlen: 48
2a04:5901:8::/48 maxlen: 48
2a04:5900::/29 maxlen: 29
2a04:5901:19::/48 maxlen: 48
2a04:5901:f::/48 maxlen: 48
2a04:5901:5::/48 maxlen: 48
2a04:5901:2a::/48 maxlen: 48
2a04:5901::/32 maxlen: 32
2a04:5901:20::/48 maxlen: 48
2a04:5901:16::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:22:60:0b:7f:6f:4a:b0:ca:30:f0:98:90:e9:76:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f21c543844c417f61ad7939244d3b759c2a43ed
Validity
Not Before: May 25 08:59:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ddb9a89eae8dc0fc746062f920a2459e3660399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:78:50:ec:77:3d:87:44:24:58:c5:25:1a:96:
c5:cd:83:78:d2:1c:a0:86:28:74:c3:32:87:cf:d1:
4c:8d:3b:8c:13:c4:34:92:8e:b5:ab:d0:37:b2:c8:
e0:c5:58:2b:5b:d9:cf:2b:67:b5:5b:b1:22:bb:23:
36:ed:fe:96:7e:ab:03:4b:fb:11:ad:98:36:74:10:
85:ce:7e:27:59:10:5e:3f:e0:56:45:46:14:4c:29:
f3:eb:23:b7:9f:fa:19:e7:20:0f:9a:18:ea:40:81:
40:08:8f:0e:19:b7:73:ef:ef:71:5b:28:fc:2c:20:
3d:58:d0:9e:6c:65:66:1e:a8:05:89:ab:2f:82:b6:
ee:14:b3:d0:03:17:5e:3c:01:c8:34:41:ce:18:9f:
69:3c:09:ec:65:5e:e1:86:16:a1:e9:db:f0:5c:cb:
c5:cf:6b:ca:c8:90:03:c1:a2:7a:98:99:59:59:47:
b5:65:53:80:7f:af:bf:4c:0f:40:52:de:a2:36:21:
10:f5:a4:d9:9b:e2:81:47:62:65:4c:34:dd:c2:d0:
e2:ae:8e:ce:1f:af:34:35:8c:67:b1:db:2c:67:1d:
8a:23:93:28:c8:af:f3:67:44:fe:0c:46:ff:0d:ab:
e3:e5:22:a6:2e:08:cd:0b:5f:d1:38:72:b0:9b:f5:
2d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DB:9A:89:EA:E8:DC:0F:C7:46:06:2F:92:0A:24:59:E3:66:03:99
X509v3 Authority Key Identifier:
keyid:1F:21:C5:43:84:4C:41:7F:61:AD:79:39:24:4D:3B:75:9C:2A:43:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/Lduaiero3A_HRgYvkgokWeNmA5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.32.0/22
IPv6:
2a04:5900::/29
Signature Algorithm: sha256WithRSAEncryption
03:77:ae:dd:e3:83:23:e3:9a:fc:d1:ab:c3:de:8c:85:5b:0c:
52:c5:2f:0e:72:c0:65:a6:33:df:61:c2:8d:7f:7d:21:ab:2c:
fd:8d:84:1d:fd:d1:d7:26:bd:fb:85:62:49:2c:60:7a:70:38:
94:aa:fd:b8:23:da:16:ec:fc:58:e2:fb:45:f0:81:af:8c:e4:
a0:ba:01:c8:6e:8d:12:b3:0f:2b:6a:10:fc:b8:f4:cc:7f:09:
48:a9:10:89:01:d2:2b:5f:33:e8:11:bb:4b:1f:df:bb:1f:85:
08:57:1a:2a:b3:a8:bf:70:7e:a5:53:23:c2:05:d8:c0:d4:d4:
2d:cc:0a:21:8a:86:fd:0f:8d:e4:15:5f:86:bd:22:bb:19:76:
8c:15:c8:d0:d9:19:4f:2b:fe:3f:05:b4:f0:1c:b1:65:bb:d3:
ed:ad:a8:af:de:cd:01:5a:75:68:ef:b7:86:27:fd:e0:de:bd:
34:a1:2c:a8:dc:02:74:07:e6:1f:8f:20:26:13:8e:6d:32:6e:
62:33:47:b1:10:d7:16:ef:b4:81:c2:a5:47:17:7a:b3:b0:37:
65:19:a5:7c:29:3d:ae:6a:d4:b0:75:b6:3b:a0:2e:84:49:44:
61:53:19:b3:34:61:94:23:e3:90:93:99:7d:de:6a:1d:d8:ee:
4f:12:ce:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:41 2024 by rpki-client on console-fra.rpki-client.org