Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/dim7PLtVQdXmOuhNlb8nwUVLlg0.roa
File: dim7PLtVQdXmOuhNlb8nwUVLlg0.roa (raw, json)
Hash identifier: uersPyLtFtNZ1EXYbsCDSO0w/PYcV5rai4kGeClpK+I=
Subject key identifier: 76:29:BB:3C:BB:55:41:D5:E6:3A:E8:4D:95:BF:27:C1:45:4B:96:0D
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAD2DC5374CC1C7A5536F02637115F
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/dim7PLtVQdXmOuhNlb8nwUVLlg0.roa
Signing time: Mon 01 Jan 2024 02:29:29 +0000
ROA not before: Mon 01 Jan 2024 02:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43769
IP address blocks: 195.136.197.0/24 maxlen: 24
82.177.95.0/24 maxlen: 24
82.177.92.0/23 maxlen: 23
82.177.100.0/24 maxlen: 24
81.15.187.0/24 maxlen: 24
82.177.110.0/24 maxlen: 24
2a00:4120:8001::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d2:dc:53:74:cc:1c:7a:55:36:f0:26:37:11:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7629bb3cbb5541d5e63ae84d95bf27c1454b960d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:f1:c8:2d:d6:fe:d5:8a:27:b2:54:c4:05:
a4:f2:ff:51:e4:8e:92:bf:59:84:ad:f8:e4:27:39:
82:e9:14:02:ee:6a:a5:19:bf:28:79:aa:de:21:2a:
f2:04:cf:25:b1:61:95:7b:8c:13:3c:c2:c6:51:5d:
49:63:cf:a5:ac:c1:e0:fb:95:58:f3:39:21:53:bb:
3a:96:73:96:32:a0:e1:7e:77:46:7d:67:ca:3b:96:
f4:0e:71:5b:e6:67:26:6f:6c:bc:60:50:00:76:52:
8c:ef:d4:e9:da:61:93:1d:be:0c:af:01:64:5d:0f:
ed:14:44:e7:65:8b:31:b4:2f:34:ff:4e:81:2b:c1:
b6:24:4f:75:1d:b1:28:69:3f:49:c1:3c:0c:4e:92:
48:7f:1e:4d:62:be:f9:84:42:75:05:c0:45:fe:0c:
35:d3:bf:cc:75:d9:6f:69:89:0d:b2:85:3d:66:8b:
e4:19:38:7d:42:72:0e:90:ca:5e:e4:9d:4e:bc:2e:
c2:6f:82:99:e8:63:2a:fb:77:2f:00:34:a1:dc:fa:
8d:54:e3:b8:4e:e9:c3:dd:40:65:af:7f:76:c5:be:
6f:ce:20:9a:dc:a4:3a:65:ff:3c:39:90:ee:a3:6e:
24:e0:d6:22:d4:e6:61:fc:e5:d5:55:3a:ae:92:ce:
00:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:29:BB:3C:BB:55:41:D5:E6:3A:E8:4D:95:BF:27:C1:45:4B:96:0D
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/dim7PLtVQdXmOuhNlb8nwUVLlg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.187.0/24
82.177.92.0/23
82.177.95.0/24
82.177.100.0/24
82.177.110.0/24
195.136.197.0/24
IPv6:
2a00:4120:8001::/48
Signature Algorithm: sha256WithRSAEncryption
72:7f:4d:38:dc:ef:9a:94:20:48:98:27:4f:c4:fe:8a:52:03:
89:0c:e5:f7:03:f9:bf:8b:90:64:5a:c3:68:64:a2:d8:71:ff:
e8:e7:b6:92:ef:01:2e:e3:80:3d:a9:32:32:a3:6a:6a:6a:31:
bc:1d:cb:d6:49:9c:87:ad:12:1b:24:b5:e4:ba:92:14:1d:a7:
46:01:bf:2d:6d:cd:18:1a:3c:15:04:7f:42:5d:78:33:3f:5d:
3d:20:56:19:df:2c:1c:8c:25:d4:c9:ea:2b:65:89:e6:47:a5:
ca:3c:3c:7d:72:b2:2b:48:ad:78:41:12:dc:b7:bc:9e:7b:c5:
8d:4a:fc:7b:7f:e1:6c:71:5f:38:f5:48:64:21:3e:f8:eb:f6:
79:c5:6d:9c:ca:26:3f:4e:88:5f:4e:b6:fa:b6:57:71:b3:02:
fd:a0:e0:9b:41:12:16:1b:85:26:85:ed:f5:5c:3f:a6:72:1f:
b7:58:4d:df:b4:f5:c9:30:1f:35:27:38:1b:d0:32:47:a3:93:
ae:40:98:38:7a:2f:db:72:d5:56:53:63:71:36:5d:fe:9e:92:
22:7b:dd:cc:fb:df:63:b3:d9:41:86:e5:e1:0b:26:e7:cf:03:
f5:f3:54:50:f0:50:cb:35:e4:9b:70:69:ef:e0:b9:2a:21:6b:
ab:6e:ad:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 11:29:46 2024 by rpki-client on console-ams.rpki-client.org