Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DN40WXXCg_lzOdsuy3hCsK5BJBs.roa
File: DN40WXXCg_lzOdsuy3hCsK5BJBs.roa (raw, json)
Hash identifier: 1XTxzo0jCo4wTlbJ11Yg05pVnVlGMCAWyizs7DjrjwE=
Subject key identifier: 0C:DE:34:59:75:C2:83:F9:73:39:DB:2E:CB:78:42:B0:AE:41:24:1B
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 0189405DFF730447047ADCBC6485F8147C60
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DN40WXXCg_lzOdsuy3hCsK5BJBs.roa
Signing time: Mon 10 Jul 2023 15:14:09 +0000
ROA not before: Mon 10 Jul 2023 15:14:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 37.252.3.0/24 maxlen: 24
37.252.14.0/23 maxlen: 23
37.252.13.0/24 maxlen: 24
213.142.146.0/23 maxlen: 23
185.238.170.0/23 maxlen: 23
185.238.168.0/23 maxlen: 23
5.45.72.0/22 maxlen: 22
5.45.76.0/22 maxlen: 22
5.45.84.0/22 maxlen: 22
188.116.24.0/24 maxlen: 24
188.116.23.0/24 maxlen: 24
188.116.21.0/24 maxlen: 24
5.45.88.0/22 maxlen: 22
5.45.92.0/22 maxlen: 22
188.116.26.0/24 maxlen: 24
188.116.25.0/24 maxlen: 24
188.116.27.0/24 maxlen: 24
176.97.79.0/24 maxlen: 24
46.102.106.0/24 maxlen: 24
5.45.64.0/21 maxlen: 21
45.136.48.0/22 maxlen: 22
37.1.200.0/21 maxlen: 21
62.197.48.0/23 maxlen: 23
37.1.216.0/21 maxlen: 21
5.61.48.0/22 maxlen: 22
5.61.56.0/22 maxlen: 22
5.61.52.0/22 maxlen: 22
2a02:c6c3::/32 maxlen: 32
2a02:c6c1:2::/48 maxlen: 48
2a02:c6c2::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:40:5d:ff:73:04:47:04:7a:dc:bc:64:85:f8:14:7c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jul 10 15:14:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cde345975c283f97339db2ecb7842b0ae41241b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ca:63:b5:6f:e9:4d:63:ce:ac:0c:46:ad:5f:
ce:af:ef:0e:e8:2b:a1:20:71:71:9d:c2:85:f7:e7:
7b:57:e2:41:30:c2:86:1a:61:43:6d:3e:90:67:2a:
44:ef:44:fb:43:62:a4:54:8a:fe:0f:df:85:fc:1a:
19:28:61:e9:87:e7:4c:4d:5e:37:47:f6:ff:0c:ed:
fd:05:70:23:60:94:1c:80:25:e1:af:42:7b:cf:d9:
50:bd:e0:b5:aa:35:be:f1:36:10:1f:8e:3c:b1:63:
54:9b:4a:f0:5a:94:a0:0b:f7:e4:ab:ec:1d:f5:e6:
a3:81:3f:44:a4:12:83:a7:5a:85:dc:b1:66:93:f5:
66:45:f4:7b:f4:5a:9b:55:d2:a4:94:86:2a:7f:e9:
97:d2:b0:09:5e:28:c8:7e:63:53:6c:4e:d4:ae:42:
64:0b:d9:c8:57:2e:84:a2:11:30:e2:16:73:52:37:
6c:96:33:68:02:27:ed:db:b7:65:47:78:bd:8e:91:
84:5f:d3:67:a9:c6:86:ad:9a:05:6a:e1:12:5a:f9:
5e:b5:e5:1d:f2:b1:6d:4e:70:48:35:32:f3:58:80:
f5:be:0f:62:df:70:0a:cc:9e:d7:42:04:2a:e6:24:
42:13:aa:2f:c6:16:50:b2:62:f5:e7:ac:48:14:48:
04:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DE:34:59:75:C2:83:F9:73:39:DB:2E:CB:78:42:B0:AE:41:24:1B
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DN40WXXCg_lzOdsuy3hCsK5BJBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.64.0/20
5.45.84.0-5.45.95.255
5.61.48.0-5.61.59.255
37.1.200.0/21
37.1.216.0/21
37.252.3.0/24
37.252.13.0-37.252.15.255
45.136.48.0/22
46.102.106.0/24
62.197.48.0/23
176.97.79.0/24
185.238.168.0/22
188.116.21.0/24
188.116.23.0-188.116.27.255
213.142.146.0/23
IPv6:
2a02:c6c1:2::/48
2a02:c6c2::/31
Signature Algorithm: sha256WithRSAEncryption
7f:fa:f6:f7:e7:ee:4f:40:c2:4d:f3:2d:f6:1e:e7:f2:bb:af:
d2:05:a9:59:da:df:91:f4:14:31:49:ed:6f:54:dd:89:ab:87:
45:66:f2:6e:7f:87:ea:e2:df:e5:68:57:d7:2f:de:aa:97:04:
eb:cd:b3:34:09:1f:ea:2b:e0:0e:d6:c4:c1:14:62:bf:9c:9d:
3e:c9:c6:f6:6f:00:61:af:76:e8:9c:45:26:63:ca:42:8b:01:
28:c1:b5:f9:1c:46:43:d9:33:89:db:71:fc:50:03:ed:9f:9f:
f6:2b:2a:cd:81:45:e7:61:09:aa:cb:22:57:ce:3c:3a:7f:11:
f5:8c:a5:1c:2f:d6:ad:6d:c3:28:36:37:d3:41:3b:58:c0:76:
1e:29:7e:16:ca:a6:8d:0b:94:51:43:fd:b2:d4:2c:d4:9c:19:
2d:8b:93:d9:5f:99:b6:56:a9:ef:3c:aa:88:fb:13:47:d0:8f:
30:9f:33:bb:c6:a0:b4:69:08:51:40:18:8d:94:35:08:61:74:
70:63:9f:8b:c1:a3:a0:20:0c:75:28:a8:60:c1:37:21:d2:0b:
1f:e1:dc:20:c6:70:25:70:ba:08:41:8f:b9:4f:7d:f6:e9:63:
5c:e9:04:42:9f:d6:03:9c:8d:2f:96:d5:ec:88:b1:88:f2:11:
f1:1a:4d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 16:27:09 2023 by rpki-client on console-ams.rpki-client.org