Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/DpYNJh3nGo6WtC9TMh6IKJSsRBw.roa
File: DpYNJh3nGo6WtC9TMh6IKJSsRBw.roa (raw, json)
Hash identifier: p0LXSz3XXSvsQaaCwrInkcpgE74814ePKOqJUSMOcCU=
Subject key identifier: 0E:96:0D:26:1D:E7:1A:8E:96:B4:2F:53:32:1E:88:28:94:AC:44:1C
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 0189C0478086020DA651C3344FB5BC05C4D8
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/DpYNJh3nGo6WtC9TMh6IKJSsRBw.roa
Signing time: Fri 04 Aug 2023 11:20:58 +0000
ROA not before: Fri 04 Aug 2023 11:20:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49332
IP address blocks: 188.190.32.0/19 maxlen: 20
5.57.64.0/21 maxlen: 22
176.32.0.0/21 maxlen: 22
86.111.64.0/20 maxlen: 21
176.39.64.0/20 maxlen: 21
91.212.203.0/24 maxlen: 24
86.111.84.0/23 maxlen: 24
80.243.144.0/20 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c0:47:80:86:02:0d:a6:51:c3:34:4f:b5:bc:05:c4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Aug 4 11:20:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e960d261de71a8e96b42f53321e882894ac441c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f3:42:3c:6b:e0:5e:e2:5b:43:1d:b6:9c:a1:
da:9d:ec:02:ad:3b:e3:02:9f:10:cd:3a:03:45:cb:
23:be:53:d0:be:a0:94:10:4a:d5:c5:e8:94:cf:98:
43:62:42:bf:f1:20:e6:6c:9d:a3:f2:6e:50:f9:11:
00:d3:d4:83:6f:9f:dc:79:9c:53:86:db:02:25:ec:
74:03:65:4f:b3:c3:5f:ec:93:57:db:93:1a:d0:20:
c1:00:bc:77:04:44:34:98:49:07:29:eb:b2:1a:54:
1a:8a:52:d8:86:7f:e8:21:d1:7c:67:87:4f:ed:2c:
d6:c6:8d:03:46:84:73:1a:05:12:bc:5f:b1:76:c0:
aa:86:f9:d6:52:d7:60:b3:9f:05:01:19:d1:65:f9:
a2:b4:77:7f:ac:f0:d0:79:8b:bf:75:26:1b:64:5c:
6e:72:67:35:11:35:d7:a3:aa:53:ad:19:02:c6:27:
d3:c7:52:91:0b:4d:58:96:61:b1:0f:7a:f5:d9:72:
1a:d5:ea:80:11:cb:03:9a:aa:60:07:8f:94:0f:bd:
10:c4:2d:ff:9c:ec:00:fc:4e:e4:82:86:b1:be:55:
69:0d:64:dc:a7:cb:f4:8b:9a:79:4f:14:ca:bb:87:
79:c5:e7:91:65:ae:e7:10:8e:1c:7d:4c:10:56:32:
76:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:96:0D:26:1D:E7:1A:8E:96:B4:2F:53:32:1E:88:28:94:AC:44:1C
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/DpYNJh3nGo6WtC9TMh6IKJSsRBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.64.0/21
80.243.144.0/20
86.111.64.0/20
86.111.84.0/23
91.212.203.0/24
176.32.0.0/21
176.39.64.0/20
188.190.32.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:96:8b:af:ab:6e:f7:e9:d6:c0:61:0d:86:94:a2:79:fa:10:
eb:03:a3:39:08:aa:53:6c:02:b2:de:01:26:db:dd:6e:0c:d3:
6e:35:17:a7:dd:28:33:5e:4b:25:53:91:47:9f:55:c5:47:81:
68:af:48:89:6c:d2:58:28:98:73:c0:71:c9:f0:de:01:86:b8:
d9:fb:16:46:4d:78:1e:ac:fe:a9:98:09:4d:8b:a3:81:16:76:
68:4b:62:a5:53:37:1f:9f:f0:50:35:e6:7d:f9:08:76:ff:f9:
cc:1a:6c:2d:af:9b:fe:27:6d:fa:d4:98:73:06:ae:49:2e:04:
14:5b:83:44:3b:69:59:0b:0d:74:34:6b:12:02:20:fb:b4:6e:
37:f9:52:2d:c5:3b:c0:f1:4d:65:02:d4:c1:a1:2d:c4:f4:ce:
ce:21:65:dd:fd:44:c3:60:6e:79:73:f4:e4:f1:1d:35:37:b9:
04:e5:2b:d0:ab:5e:75:6d:29:69:6c:3d:64:fd:b2:de:9e:99:
58:b9:71:82:2e:b3:24:e6:79:eb:4b:08:70:1d:c0:8d:6c:7e:
24:05:ec:29:ba:54:81:68:1d:81:17:11:f5:99:e8:8b:21:b0:
ab:43:41:e8:52:ae:2e:76:86:4f:c8:d5:da:39:e6:bc:4d:d3:
fa:c2:6d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:51 2024 by rpki-client on console-fra.rpki-client.org