Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/dVmIrQ5CeaL73O5Wz26y7vP-RVI.roa
File: dVmIrQ5CeaL73O5Wz26y7vP-RVI.roa (raw, json)
Hash identifier: O4+tMqcbUpnaopABzpF7m/g2++NJDO+vW0Xoj0zqAl4=
Subject key identifier: 75:59:88:AD:0E:42:79:A2:FB:DC:EE:56:CF:6E:B2:EE:F3:FE:45:52
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 018CC5026736E4883A2CCF5D53D15EB31412
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/dVmIrQ5CeaL73O5Wz26y7vP-RVI.roa
Signing time: Mon 01 Jan 2024 12:31:58 +0000
ROA not before: Mon 01 Jan 2024 12:31:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48359
IP address blocks: 185.239.1.0/24 maxlen: 24
89.44.240.0/24 maxlen: 24
89.44.241.0/24 maxlen: 24
89.42.44.0/22 maxlen: 22
45.94.214.0/24 maxlen: 24
45.94.215.0/24 maxlen: 24
89.46.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:02:67:36:e4:88:3a:2c:cf:5d:53:d1:5e:b3:14:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 1 12:31:58 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=755988ad0e4279a2fbdcee56cf6eb2eef3fe4552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:92:35:a8:27:eb:10:12:b4:86:20:6c:ac:
db:38:9d:25:b1:b5:00:e7:40:d1:8b:23:f5:1d:9e:
14:d7:12:b9:7b:da:a9:11:bf:92:d9:6a:55:bf:66:
a1:6f:03:57:c3:55:7a:ef:c3:83:6c:d8:61:e1:5c:
b5:9b:38:d3:18:30:22:b0:5b:0a:79:59:bb:6b:5b:
82:73:4b:c5:59:45:f7:29:1d:02:49:f0:da:98:91:
fb:d9:40:1c:24:ee:45:7d:a3:66:25:30:ba:27:7d:
b6:51:16:a8:c5:54:47:65:87:49:74:39:15:e4:d9:
bd:64:a0:64:26:38:47:2c:c4:e9:0d:54:35:a2:dc:
27:1f:e0:8b:72:4d:95:83:d0:16:ae:fd:2c:28:ac:
4e:6e:71:e3:8c:55:dd:98:4e:1e:97:09:ef:c9:c0:
62:bc:21:03:9a:7d:47:32:4c:8d:f0:98:45:e2:ec:
41:67:78:bd:e2:a6:0f:68:88:8b:96:bc:e3:e6:14:
00:ff:5b:18:b0:f4:78:6e:84:08:28:48:0b:6c:7f:
b0:db:ff:21:02:24:47:a3:bb:0d:c3:cb:80:1f:d7:
be:af:93:45:88:e7:f4:07:cb:40:14:ee:49:13:73:
a1:ec:e0:13:47:88:b5:7a:cb:dc:58:23:da:3a:96:
0b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:59:88:AD:0E:42:79:A2:FB:DC:EE:56:CF:6E:B2:EE:F3:FE:45:52
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/dVmIrQ5CeaL73O5Wz26y7vP-RVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.214.0/23
89.42.44.0/22
89.44.240.0/23
89.46.217.0/24
185.239.1.0/24
Signature Algorithm: sha256WithRSAEncryption
43:aa:2e:c6:55:68:e2:8d:4c:5f:b7:f3:70:b8:aa:87:83:5d:
b0:a2:66:af:73:37:b5:ec:6c:79:1d:6d:fb:c0:02:34:c3:e5:
1b:02:eb:c3:79:56:6b:94:57:3c:0c:ba:19:83:c9:c5:d3:d8:
be:55:ed:97:06:37:f5:1c:c7:02:d7:28:73:00:0f:74:01:d3:
83:70:d6:b4:0b:9a:e2:ab:4b:cd:7d:52:bf:f6:3e:43:24:8d:
39:69:c7:de:a0:e4:22:9b:f3:69:9b:8a:17:e1:93:16:a1:38:
04:69:5a:ca:f7:4c:ca:62:13:66:19:df:83:2d:75:fe:af:91:
67:2a:7d:0b:4c:a7:1d:a9:23:8c:cd:90:35:e1:38:eb:41:a5:
5d:dc:d5:ad:e2:ef:54:6f:54:b2:0a:8d:f5:2d:92:0b:10:12:
18:f0:b7:b5:51:9b:23:90:aa:70:6a:0f:45:97:c8:59:f1:45:
86:4b:88:5f:33:87:1c:55:a2:84:f8:5e:ca:68:6b:0e:8b:09:
a2:6b:2c:5b:b3:c5:a1:40:49:a0:c8:67:6d:95:54:e4:ca:23:
a4:fe:e7:f7:30:75:e2:b1:be:1e:a6:bb:fc:9d:a1:07:db:53:
ae:a7:28:3b:82:df:90:3e:b2:e9:70:1d:4c:e4:6c:77:00:4c:
a8:48:58:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:26:57 2024 by rpki-client on console-fra.rpki-client.org