Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/DK12-K5NWUaq06xq61e0BLthkqg.roa
File: DK12-K5NWUaq06xq61e0BLthkqg.roa (raw, json)
Hash identifier: j95yiA/06AQh7EToctpm61wTWP4UhrRubI9kFHeycQc=
Subject key identifier: 0C:AD:76:F8:AE:4D:59:46:AA:D3:AC:6A:EB:57:B4:04:BB:61:92:A8
Certificate issuer: /CN=ad52c28ef9a5b2291aba671ac9a65d8faadc5518
Certificate serial: 0188436B0B482336872819B1A976672987BB
Authority key identifier: AD:52:C2:8E:F9:A5:B2:29:1A:BA:67:1A:C9:A6:5D:8F:AA:DC:55:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVLCjvmlsikaumcayaZdj6rcVRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/DK12-K5NWUaq06xq61e0BLthkqg.roa
Signing time: Mon 22 May 2023 12:24:28 +0000
ROA not before: Mon 22 May 2023 12:24:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29255
IP address blocks: 89.237.176.0/20 maxlen: 20
82.147.192.0/19 maxlen: 19
212.24.224.0/19 maxlen: 19
89.237.128.0/19 maxlen: 19
89.237.128.0/18 maxlen: 18
85.194.64.0/18 maxlen: 18
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:43:6b:0b:48:23:36:87:28:19:b1:a9:76:67:29:87:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad52c28ef9a5b2291aba671ac9a65d8faadc5518
Validity
Not Before: May 22 12:24:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cad76f8ae4d5946aad3ac6aeb57b404bb6192a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:26:d6:71:f4:9b:62:72:9c:bd:a2:7b:dd:29:
b4:5a:bd:ea:7d:25:56:2c:da:9d:39:2f:5d:ad:f0:
fb:83:27:1a:a8:97:73:cd:fa:cc:43:67:13:8c:02:
98:f3:d9:82:34:4e:84:3a:f8:38:13:3d:3c:2a:da:
62:f2:d2:67:86:b5:0b:42:5a:c3:c7:02:0a:ac:ee:
33:81:02:5a:97:30:5c:c8:d1:b9:be:15:4f:21:8a:
56:9c:95:d2:89:a9:fa:09:2e:80:64:7e:f7:ba:ad:
a5:76:fa:50:11:4a:d5:54:aa:b4:f1:fa:2e:46:a2:
48:87:a7:0d:ba:77:50:fa:83:b1:41:b7:d1:eb:94:
ac:b4:a7:20:2d:10:bc:ab:0c:18:56:6e:62:21:cb:
3c:87:97:ff:a2:f2:7c:d1:30:e2:57:94:f8:0e:61:
61:33:e9:09:f4:3e:31:6e:fd:a8:fc:c9:cc:4e:40:
20:7b:c4:be:bf:9c:3d:4a:1c:fa:df:5d:29:03:bd:
59:25:13:93:c8:f5:01:5a:04:cf:76:2d:18:77:f6:
c3:cc:c5:57:34:67:76:7b:5b:d6:74:ee:69:bf:ff:
bb:fd:0a:41:5c:c9:97:e4:9c:8e:35:44:71:d6:96:
b2:16:a4:2c:88:33:87:a8:a1:5b:40:96:5a:39:b7:
2e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AD:76:F8:AE:4D:59:46:AA:D3:AC:6A:EB:57:B4:04:BB:61:92:A8
X509v3 Authority Key Identifier:
keyid:AD:52:C2:8E:F9:A5:B2:29:1A:BA:67:1A:C9:A6:5D:8F:AA:DC:55:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVLCjvmlsikaumcayaZdj6rcVRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/DK12-K5NWUaq06xq61e0BLthkqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/rVLCjvmlsikaumcayaZdj6rcVRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.147.192.0/19
85.194.64.0/18
89.237.128.0/18
212.24.224.0/19
Signature Algorithm: sha256WithRSAEncryption
27:71:15:ef:3c:4d:b1:24:a1:0d:83:64:19:93:ef:bc:2b:63:
f2:77:0e:dc:46:7a:f1:d6:ac:7c:60:c9:f8:48:dd:59:96:09:
09:07:7f:d9:f1:24:16:7c:34:00:92:8c:98:b1:93:86:ef:dc:
19:98:3b:f8:80:0d:14:af:38:b2:94:c7:bf:2c:4a:f0:3c:10:
53:b7:43:47:c5:ff:1e:0f:e3:72:f3:35:46:61:95:bc:eb:30:
22:5d:14:8e:b5:12:d4:4c:ef:12:af:b3:26:3a:24:fa:00:3b:
56:3a:ef:3a:96:d7:1b:24:c6:8d:e6:8d:bf:82:58:59:dc:b7:
e5:78:56:d4:dd:7e:77:62:e3:e3:52:28:18:be:f5:60:8c:0f:
91:2a:dd:c2:84:c5:8a:a2:44:00:d0:bb:b9:32:df:e9:89:fa:
8c:cc:6a:62:69:23:0d:93:4e:cf:cb:99:bd:84:8d:db:8c:db:
32:61:bf:ad:e3:17:ee:ae:70:5c:45:3d:d0:13:62:a7:40:07:
7a:1d:27:35:c1:d4:dd:98:ce:8a:99:3d:e1:b0:0c:e7:5f:ca:
4e:c0:ff:af:62:36:e8:c8:0b:11:49:f5:d2:44:7f:50:d9:47:
6d:56:0b:2b:a3:3f:69:f2:39:b8:25:71:16:d0:f4:19:53:06:
47:7d:07:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 17:22:14 2023 by rpki-client on console-ams.rpki-client.org