Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/dLxOlzcPQENM0Sr1p7JEVvtq_Gg.roa
File: dLxOlzcPQENM0Sr1p7JEVvtq_Gg.roa (raw, json)
Hash identifier: Ciyqmwk4J8xb96pRpF6gMUfAmutSepIl1Qno4eA+q24=
Subject key identifier: 74:BC:4E:97:37:0F:40:43:4C:D1:2A:F5:A7:B2:44:56:FB:6A:FC:68
Certificate issuer: /CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Certificate serial: 018C342AFD31682DF7E1765A80F487C095D1
Authority key identifier: 02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/dLxOlzcPQENM0Sr1p7JEVvtq_Gg.roa
Signing time: Mon 04 Dec 2023 09:31:21 +0000
ROA not before: Mon 04 Dec 2023 09:31:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40065
IP address blocks: 185.194.148.0/24 maxlen: 24
185.201.227.0/24 maxlen: 24
2.59.151.0/24 maxlen: 24
185.238.248.0/24 maxlen: 24
185.238.250.0/24 maxlen: 24
193.22.152.0/24 maxlen: 24
193.9.44.0/24 maxlen: 24
193.9.46.0/24 maxlen: 24
5.181.219.0/24 maxlen: 24
31.40.214.0/24 maxlen: 24
185.186.146.0/23 maxlen: 23
45.67.223.0/24 maxlen: 24
212.103.62.0/24 maxlen: 24
45.12.88.0/24 maxlen: 24
45.12.90.0/24 maxlen: 24
2.56.255.0/24 maxlen: 24
185.183.84.0/24 maxlen: 24
185.201.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:34:2a:fd:31:68:2d:f7:e1:76:5a:80:f4:87:c0:95:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Validity
Not Before: Dec 4 09:31:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74bc4e97370f40434cd12af5a7b24456fb6afc68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:5f:78:55:ae:dd:96:83:e1:45:09:e1:c8:
73:7e:61:d7:ea:eb:65:61:f5:00:dd:e1:ca:87:f3:
ff:f6:4d:f1:06:56:c5:81:c5:e0:b6:f7:53:b0:19:
12:e3:5b:58:d0:b7:2c:d5:50:af:06:58:e9:68:a0:
20:ca:1c:f0:dd:97:3e:f5:ad:68:2e:51:0a:25:e0:
8b:b3:76:c7:e6:17:a6:03:55:26:a3:43:1c:c5:a8:
4f:2f:11:b9:9b:b4:3b:04:0c:4e:a6:34:5f:8d:77:
b6:9e:32:71:cf:d5:59:3f:57:e5:0e:ad:46:dc:18:
ac:7d:3a:f7:38:8b:aa:c3:c0:da:c7:43:65:4f:cb:
a5:eb:62:09:58:2a:52:b1:42:b6:71:ed:5e:b6:cc:
9e:25:1c:f1:ca:43:ac:ed:cf:d2:1b:24:5a:c2:96:
db:69:32:30:ae:e3:58:88:a0:10:b6:1d:19:fc:26:
d0:a8:c1:a9:aa:8d:ae:04:4e:09:74:b2:08:78:63:
6c:a3:e0:9a:26:a9:83:1d:95:4f:69:64:10:44:f6:
94:5f:3e:9d:7c:81:6c:28:f8:65:0f:50:b4:97:c0:
ff:c9:7e:95:2d:d9:5f:fb:9c:c6:5a:d3:b6:8a:b6:
70:30:19:7d:f5:b5:63:49:5e:ce:2c:7e:26:a9:6e:
05:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BC:4E:97:37:0F:40:43:4C:D1:2A:F5:A7:B2:44:56:FB:6A:FC:68
X509v3 Authority Key Identifier:
keyid:02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/dLxOlzcPQENM0Sr1p7JEVvtq_Gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/AhKgfOeTpfBBYCe_SquL0c6vD84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.255.0/24
2.59.151.0/24
5.181.219.0/24
31.40.214.0/24
45.12.88.0/24
45.12.90.0/24
45.67.223.0/24
185.183.84.0/24
185.186.146.0/23
185.194.148.0/24
185.201.226.0/23
185.238.248.0/24
185.238.250.0/24
193.9.44.0/24
193.9.46.0/24
193.22.152.0/24
212.103.62.0/24
Signature Algorithm: sha256WithRSAEncryption
19:71:a4:39:86:7c:cb:90:ed:ef:65:87:98:fd:cb:9f:80:46:
64:86:54:71:2b:a9:75:55:78:45:0f:98:6d:4d:7c:a7:af:02:
f0:25:ae:89:ce:f4:44:25:0d:a1:b3:0c:19:d8:78:91:e3:ca:
39:3a:88:13:28:f2:8a:8a:3a:ec:0c:3d:a7:63:1e:75:65:e6:
3c:c4:1b:6e:76:c7:b2:f9:e3:80:a7:d3:97:41:aa:22:c1:4b:
f1:c9:bb:34:1a:35:a7:a4:72:a7:47:a2:a6:ff:53:ce:59:ed:
b4:97:f3:79:fe:60:1e:32:39:52:d9:c9:3e:36:68:67:99:54:
a0:7d:a6:44:d2:e5:dd:a1:1f:33:61:54:21:23:3e:56:be:b2:
56:ca:a9:f0:1a:b4:c2:02:b6:ac:7c:c9:e8:1c:88:a4:30:68:
ec:43:b0:6d:1c:cd:b8:3a:b7:40:65:c1:87:51:b4:e2:3b:f4:
14:a2:bc:ce:b5:04:2b:91:30:4d:d9:12:b3:8e:a0:9b:a7:2d:
47:8a:83:42:de:03:e8:a2:d5:1e:00:4e:81:b2:21:b2:34:66:
0f:11:ea:48:9b:e4:d9:91:7c:65:5d:1a:39:ba:5c:fa:63:ff:
18:6a:d9:b9:e9:f0:07:2d:da:7c:df:de:17:ec:36:e9:4d:d5:
19:3f:de:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:03 2024 by rpki-client on console-fra.rpki-client.org