Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/DCLcYrAHZ2yDS_9e6rbOW1fOUp0.roa
File: DCLcYrAHZ2yDS_9e6rbOW1fOUp0.roa (raw, json)
Hash identifier: EuOxZB1kdPd0sCzRN7HAYb0xO4AMiV0g1f03XZ+xavg=
Subject key identifier: 0C:22:DC:62:B0:07:67:6C:83:4B:FF:5E:EA:B6:CE:5B:57:CE:52:9D
Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial: 018CB57C1960880DE54D0CD6474706749E51
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/DCLcYrAHZ2yDS_9e6rbOW1fOUp0.roa
Signing time: Fri 29 Dec 2023 12:10:58 +0000
ROA not before: Fri 29 Dec 2023 12:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34534
IP address blocks: 37.44.239.0/24 maxlen: 24
185.142.53.0/24 maxlen: 24
213.5.130.0/24 maxlen: 24
193.177.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b5:7c:19:60:88:0d:e5:4d:0c:d6:47:47:06:74:9e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Validity
Not Before: Dec 29 12:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c22dc62b007676c834bff5eeab6ce5b57ce529d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ed:f5:25:a2:c2:8d:09:a3:d6:76:b8:85:bc:
82:bd:08:4b:8a:60:87:97:c5:b7:bf:7d:b0:4b:f7:
3a:03:32:8b:84:72:95:df:9c:00:43:91:72:d5:4b:
93:ab:34:ac:80:00:4c:9e:1b:c0:b6:7f:c0:12:33:
44:6b:1f:b4:19:4b:98:7d:44:f2:4b:0f:96:1d:bc:
16:4a:a0:d0:8d:23:8d:c1:3e:1c:e8:2c:d0:12:f2:
d4:fc:47:d6:5a:5e:b6:ca:c6:91:b9:b5:04:e8:0d:
a0:e4:28:12:04:2a:a2:0f:9a:2d:e9:fc:d4:3b:9e:
ca:52:a2:0a:85:88:5e:46:23:48:1f:6a:16:33:7a:
82:13:32:16:5c:4c:f5:49:70:23:b2:d5:64:c6:c3:
62:61:d8:22:ae:e4:18:9b:fa:1b:67:5d:ba:13:a6:
4c:15:96:7d:eb:d1:c1:0a:5d:df:0f:3f:fd:da:53:
18:62:db:f1:52:a8:11:3f:29:e8:a5:0c:ca:d6:68:
7f:54:05:c6:a2:0d:3b:1d:8d:24:f3:78:b5:e6:80:
03:48:14:e6:ce:86:cc:ef:78:ae:2a:6a:39:da:9a:
f5:ac:96:dc:88:b2:c2:54:d6:ad:25:16:54:81:4e:
7a:26:2e:ed:0b:ef:d6:f2:bf:8e:36:9c:ea:46:8b:
d5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:22:DC:62:B0:07:67:6C:83:4B:FF:5E:EA:B6:CE:5B:57:CE:52:9D
X509v3 Authority Key Identifier:
keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/DCLcYrAHZ2yDS_9e6rbOW1fOUp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.239.0/24
185.142.53.0/24
193.177.182.0/24
213.5.130.0/24
Signature Algorithm: sha256WithRSAEncryption
44:07:3c:93:54:40:26:4f:f3:d9:2a:d6:62:98:5a:eb:2d:81:
e4:9a:51:fb:77:1d:ff:3d:da:38:2d:bb:3d:2d:9d:49:75:d1:
36:fe:06:ac:1b:6c:89:97:c7:6a:8e:41:dd:7f:51:bc:06:c9:
8a:34:63:89:65:b7:df:2d:6d:9c:78:35:ff:eb:e0:97:0b:5b:
d0:a1:86:0d:31:62:f0:79:26:ee:85:b3:ec:c1:78:f8:5c:59:
e3:89:13:8e:d3:06:04:b3:4f:04:ea:f2:66:83:d2:fe:9e:bf:
54:ac:07:e4:50:e0:1a:8e:cc:08:c5:a1:09:62:29:a6:33:55:
54:6e:23:f7:12:5a:c3:f3:35:33:9b:b5:70:d2:9f:0e:3b:2c:
38:01:15:6c:00:b7:a2:0c:b6:55:1d:fb:c4:2f:a1:dd:db:0f:
69:d0:44:e3:42:8c:ce:bb:12:2a:26:44:2c:ec:c3:5c:f7:e1:
a8:8a:30:9a:42:75:6d:7c:18:e8:f2:4b:58:20:dd:de:bf:3e:
81:ae:32:11:15:16:7a:f3:52:2b:5c:ee:3b:59:52:9a:7d:a0:
04:3e:98:a3:b6:a0:b7:7f:b7:0a:c0:7e:f9:df:f8:a2:a2:65:
80:04:19:3f:c4:9b:87:5c:ec:a7:0d:f9:d6:0e:04:45:e2:23:
82:48:96:9f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYy1fBlgiA3lTQzWR0cGdJ5RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NjNjYjI2M2RmNTBkMmQ0ZDA3M2MwZjdkYjZjZDI3NzYz
MDJjOWQwHhcNMjMxMjI5MTIxMDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzIyZGM2MmIwMDc2NzZjODM0YmZmNWVlYWI2Y2U1YjU3Y2U1MjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO31JaLCjQmj1na4hbyCvQhLimCH
l8W3v32wS/c6AzKLhHKV35wAQ5Fy1UuTqzSsgABMnhvAtn/AEjNEax+0GUuYfUTy
Sw+WHbwWSqDQjSONwT4c6CzQEvLU/EfWWl62ysaRubUE6A2g5CgSBCqiD5ot6fzU
O57KUqIKhYheRiNIH2oWM3qCEzIWXEz1SXAjstVkxsNiYdgiruQYm/obZ126E6ZM
FZZ969HBCl3fDz/92lMYYtvxUqgRPynopQzK1mh/VAXGog07HY0k83i15oADSBTm
zobM73iuKmo52pr1rJbciLLCVNatJRZUgU56Ji7tC+/W8r+ONpzqRovVFwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAwi3GKwB2dsg0v/Xuq2zltXzlKdMB8GA1UdIwQY
MBaAFAVjyyY99Q0tTQc8D322zSd2MCydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldQTEpqMzFEUzFOQnp3UGZiYk5KM1l3TEowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82MmU1ZjItMjViMy00NTU3LWFhOTQt
MTUwMzU0YjAwZTU1LzEvRENMY1lyQUhaMnlEU185ZTZyYk9XMWZPVXAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi82MmU1ZjItMjViMy00NTU3LWFhOTQtMTUwMzU0YjAwZTU1
LzEvQldQTEpqMzFEUzFOQnp3UGZiYk5KM1l3TEowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJSzvAwQA
uY41AwQAwbG2AwQA1QWCMA0GCSqGSIb3DQEBCwUAA4IBAQBEBzyTVEAmT/PZKtZi
mFrrLYHkmlH7dx3/Pdo4Lbs9LZ1JddE2/gasG2yJl8dqjkHdf1G8BsmKNGOJZbff
LW2ceDX/6+CXC1vQoYYNMWLweSbuhbPswXj4XFnjiROO0wYEs08E6vJmg9L+nr9U
rAfkUOAajswIxaEJYimmM1VUbiP3ElrD8zUzm7Vw0p8OOyw4ARVsALeiDLZVHfvE
L6Hd2w9p0ETjQozOuxIqJkQs7MNc9+GoijCaQnVtfBjo8ktYIN3evz6BrjIRFRZ6
81IrXO47WVKafaAEPpijtqC3f7cKwH753/iiomWABBk/xJuHXOynDfnWDgRF4iOC
SJaf
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:42 2024 by rpki-client on console-ams.rpki-client.org