Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/72IGbyHLfB5uPoQdgA47ronFPRI.roa
File: 72IGbyHLfB5uPoQdgA47ronFPRI.roa (raw, json)
Hash identifier: 6G4QoXaKHbX/saEfYc5Ig100IuhlYWWt+ciclj34R/8=
Subject key identifier: EF:62:06:6F:21:CB:7C:1E:6E:3E:84:1D:80:0E:3B:AE:89:C5:3D:12
Certificate issuer: /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial: 01856F149FB6BB1C72309A4E8DE5D8E58198
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/72IGbyHLfB5uPoQdgA47ronFPRI.roa
Signing time: Sun 01 Jan 2023 20:45:00 +0000
ROA not before: Sun 01 Jan 2023 20:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200960
IP address blocks: 185.18.197.0/24 maxlen: 24
185.45.72.0/24 maxlen: 24
185.18.196.0/24 maxlen: 24
31.14.255.0/24 maxlen: 24
217.148.137.0/24 maxlen: 24
217.148.136.0/24 maxlen: 24
31.14.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:9f:b6:bb:1c:72:30:9a:4e:8d:e5:d8:e5:81:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Validity
Not Before: Jan 1 20:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef62066f21cb7c1e6e3e841d800e3bae89c53d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:df:ae:3c:77:52:46:20:53:08:5a:b7:18:
b7:d8:d0:d3:a8:d3:5d:f5:0a:d2:d7:cd:68:91:a4:
61:0a:a2:53:51:bf:11:fc:62:0c:2b:23:d0:ff:47:
97:c1:ba:c3:2b:7f:a0:cc:b1:98:39:62:e6:8e:8f:
ed:54:c7:14:36:78:f5:dd:fc:f4:08:6d:c4:8d:ca:
ac:98:a7:87:2c:3f:21:9c:a5:a6:58:a0:39:9c:ee:
b7:9e:c4:38:bd:c7:d2:e4:be:2d:d4:3a:36:98:07:
be:35:8a:f7:bb:83:e7:d8:10:24:1f:64:3e:37:ab:
6e:c2:d7:f2:8d:9a:9c:2c:9b:94:de:04:cb:b6:76:
91:6a:d6:e7:d7:63:f2:77:62:0d:1d:a8:a8:49:32:
65:e4:ac:aa:05:65:cf:ad:63:d0:cb:d4:c2:01:ff:
ea:74:04:b5:d7:04:2d:3e:bc:34:3c:d9:3c:30:f7:
4f:b7:9b:35:e9:25:79:37:9b:cf:85:d2:50:7e:47:
00:26:49:a6:04:a0:19:b8:11:35:ce:86:d1:cc:2b:
29:25:de:1c:14:2b:98:21:df:bb:e5:01:8d:07:20:
df:aa:a7:46:a8:f3:b2:eb:76:69:50:38:2f:9e:ea:
53:05:a3:e6:7c:bc:3e:e0:97:40:94:20:dd:5d:64:
fd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:62:06:6F:21:CB:7C:1E:6E:3E:84:1D:80:0E:3B:AE:89:C5:3D:12
X509v3 Authority Key Identifier:
keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/72IGbyHLfB5uPoQdgA47ronFPRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.103.0/24
31.14.255.0/24
185.18.196.0/23
185.45.72.0/24
217.148.136.0/23
Signature Algorithm: sha256WithRSAEncryption
22:b5:95:17:b7:ac:fd:29:4f:5e:21:da:ec:f2:ea:69:bf:82:
b6:47:f1:0c:50:9d:ea:bb:6f:7e:5d:09:41:12:0b:b8:e1:06:
e2:fa:a5:b2:aa:27:0c:72:f2:7b:f5:e6:fd:52:73:96:93:d2:
15:f1:93:e2:48:20:4d:cf:d9:a9:e4:91:0f:ac:c8:c1:bc:3e:
78:2a:35:f4:7e:4a:ec:fd:75:fc:91:da:ec:0b:aa:6a:12:fc:
21:18:ca:98:7d:a7:1f:ca:23:8c:f6:45:f1:d7:19:b2:35:24:
d8:a0:aa:2e:95:85:ef:02:3d:45:40:8d:e3:70:b1:66:09:eb:
e3:d9:97:15:57:c2:10:39:08:ba:32:e6:82:03:9a:8d:56:1b:
28:08:83:06:dc:7b:9c:79:f0:a5:10:27:e6:41:5f:b3:ab:2a:
94:69:c2:1b:f8:42:89:d9:84:57:57:64:02:d2:90:82:b4:e1:
a6:5b:25:ff:09:ae:c2:18:15:0f:4e:9c:3f:83:0a:ce:a6:8c:
1e:dd:e0:df:a5:a4:b9:43:f2:52:77:ed:c0:56:9e:7a:8f:c6:
dc:87:d3:68:45:7a:6b:20:e6:a5:90:22:65:58:69:16:d9:7e:
0e:43:10:2b:59:49:cf:af:29:a9:2e:af:eb:9d:7e:d6:a1:23:
7c:15:b7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:40 2024 by rpki-client on console-fra.rpki-client.org