Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/3VzscwVpd2YWiD8yv5vT1U6cG74.roa
File: 3VzscwVpd2YWiD8yv5vT1U6cG74.roa (raw, json)
Hash identifier: 4dv9qD5r68AfOluuCv2FO+mxoIkfOMUydVyQUHTw0ZE=
Subject key identifier: DD:5C:EC:73:05:69:77:66:16:88:3F:32:BF:9B:D3:D5:4E:9C:1B:BE
Certificate issuer: /CN=d513872512f1f2d037b401c2603ca8994e721e55
Certificate serial: 0188204A711AA68651988F7BAA03F2B608AD
Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/3VzscwVpd2YWiD8yv5vT1U6cG74.roa
Signing time: Mon 15 May 2023 16:42:09 +0000
ROA not before: Mon 15 May 2023 16:42:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31034
IP address blocks: 185.8.196.0/22 maxlen: 24
95.141.36.0/23 maxlen: 24
94.198.101.0/24 maxlen: 24
158.58.172.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 May 2023 09:17:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:4a:71:1a:a6:86:51:98:8f:7b:aa:03:f2:b6:08:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55
Validity
Not Before: May 15 16:42:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd5cec730569776616883f32bf9bd3d54e9c1bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:1b:bf:fc:ac:d2:9d:93:3c:4a:bb:1b:c7:
f8:ef:de:f7:85:af:70:b7:fa:33:74:d4:4f:a8:d1:
30:cb:07:13:2b:10:4c:44:44:48:3e:84:23:d8:ad:
c7:18:e2:c7:22:bf:85:97:26:de:43:cd:c2:e3:df:
ef:91:b6:2b:c5:36:1a:31:c0:34:16:ab:11:4f:3a:
6e:29:6d:3d:d5:c9:ab:31:a3:b3:cf:fc:99:0c:7a:
4c:93:30:9f:4a:c7:91:5c:8c:a7:ce:7b:6b:67:9d:
67:21:f3:5e:5f:cd:f7:d1:2e:e4:36:64:28:5b:81:
5e:22:f5:74:45:aa:12:3b:7d:83:ed:b8:71:f2:3e:
bc:ef:a5:be:a4:1e:3c:4f:61:1f:65:a4:ac:1e:32:
a0:59:b5:d0:b4:7e:42:cf:aa:7e:e5:b5:f2:a6:bf:
6f:5f:50:4c:bf:da:4a:7b:fb:84:de:40:ff:4c:62:
06:08:2b:fd:a0:b3:d4:48:c6:61:df:1a:b8:96:37:
29:10:63:da:33:d4:ec:84:fb:8b:02:7e:88:47:ef:
41:46:38:0c:31:80:d9:3c:d0:60:ba:a5:b7:b1:9e:
7f:c7:d1:ed:62:c3:c8:31:81:ab:20:2b:72:55:e6:
49:69:58:bf:9a:5f:ae:90:f0:6e:c2:da:42:7f:f7:
c6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5C:EC:73:05:69:77:66:16:88:3F:32:BF:9B:D3:D5:4E:9C:1B:BE
X509v3 Authority Key Identifier:
keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/3VzscwVpd2YWiD8yv5vT1U6cG74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.198.101.0/24
95.141.36.0/23
158.58.172.0/23
185.8.196.0/22
Signature Algorithm: sha256WithRSAEncryption
77:a4:68:ef:59:1f:3f:e7:f5:9b:1d:99:13:09:e8:49:90:1a:
8d:49:d0:c9:26:65:50:f9:1f:3c:3b:cf:bb:53:75:b3:b0:81:
86:e3:04:0a:5b:69:ec:19:21:c9:21:22:72:b0:dd:bf:1e:5d:
d9:9f:b2:5a:3f:65:90:df:cb:f6:4f:f1:4f:e7:15:a2:52:66:
6c:37:5a:24:7e:8b:3f:70:ac:b1:82:3f:9e:64:6e:cc:65:3d:
b1:23:11:7e:a2:4e:f6:c6:28:90:c4:d9:ca:96:84:d2:e0:2f:
b7:92:a1:87:f5:04:90:fc:30:bb:27:76:1a:4d:cf:a1:d1:20:
ef:46:fd:e0:5d:05:25:82:3e:69:c2:f9:54:18:e1:53:0e:9f:
2f:c9:2c:ee:1f:af:00:23:f5:fd:b4:c4:f4:18:6c:03:99:2a:
26:69:3f:48:e3:76:91:f8:81:21:15:a0:b2:b8:90:b1:35:c5:
19:06:64:0b:7f:a8:3c:92:7f:17:31:55:25:1b:9e:40:72:44:
59:60:af:27:4d:64:8b:6b:41:b2:32:a9:6e:fb:65:ec:60:40:
73:7f:8a:d9:55:36:15:41:9b:2e:60:37:3a:72:81:ec:68:df:
68:57:5c:5c:fb:a3:06:49:92:fd:1a:81:a1:b0:af:01:96:af:
2d:44:64:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:56 2024 by rpki-client on console-fra.rpki-client.org