Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/1RHbWKUwNEz7ClOMifU3V1HM-wE.roa
File: 1RHbWKUwNEz7ClOMifU3V1HM-wE.roa (raw, json)
Hash identifier: rSo8lqRuzaOQOUY1p3EUOOzTjlqD2qayaRpMFkKx64U=
Subject key identifier: D5:11:DB:58:A5:30:34:4C:FB:0A:53:8C:89:F5:37:57:51:CC:FB:01
Certificate issuer: /CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Certificate serial: 018B74C5B5E8AA2EABB9322B23DC69C437CF
Authority key identifier: DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/1RHbWKUwNEz7ClOMifU3V1HM-wE.roa
Signing time: Sat 28 Oct 2023 05:33:16 +0000
ROA not before: Sat 28 Oct 2023 05:33:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59675
IP address blocks: 213.185.78.0/23 maxlen: 23
213.185.80.0/22 maxlen: 22
213.185.84.0/23 maxlen: 23
31.220.150.0/24 maxlen: 24
185.5.10.0/23 maxlen: 23
185.5.8.0/23 maxlen: 23
128.0.144.0/23 maxlen: 23
128.0.150.0/24 maxlen: 24
128.0.151.0/24 maxlen: 24
128.0.152.0/24 maxlen: 24
128.0.148.0/23 maxlen: 23
128.0.146.0/23 maxlen: 23
128.0.154.0/24 maxlen: 24
128.0.153.0/24 maxlen: 24
2a02:45c0::/32 maxlen: 32
2a02:45c0:10::/48 maxlen: 48
2a02:45c0:13::/48 maxlen: 48
2a02:45c0:3::/48 maxlen: 48
2a02:45c0:9::/48 maxlen: 48
2a02:45c0:19::/48 maxlen: 48
2a02:45c0:7::/48 maxlen: 48
2a02:45c0:18::/48 maxlen: 48
2a02:45c0:8::/48 maxlen: 48
2a02:45c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:74:c5:b5:e8:aa:2e:ab:b9:32:2b:23:dc:69:c4:37:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Validity
Not Before: Oct 28 05:33:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d511db58a530344cfb0a538c89f5375751ccfb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a2:3a:7d:03:ee:0f:1a:1b:95:ad:32:dd:8e:
54:13:cd:39:96:54:d9:22:ed:ab:cf:75:64:47:d0:
7d:cd:30:cf:6d:77:01:35:47:92:54:d3:d9:10:0b:
cb:b3:92:bb:6e:60:89:58:93:9e:5c:56:8a:31:f0:
c2:4d:d2:b4:4b:c6:0d:93:90:90:25:13:44:ca:b0:
fe:af:72:c9:c5:7c:74:cd:3a:bf:e3:ed:77:03:76:
6c:5a:d1:78:27:86:68:44:5d:5f:1e:ff:81:12:cf:
7b:f4:d3:bf:12:b4:69:4c:14:be:6a:b1:59:f7:57:
33:88:cb:db:f6:32:5e:74:18:34:b7:d1:3a:3f:10:
4b:f3:78:31:4d:31:fc:69:e2:36:17:3e:53:40:7e:
33:6f:e7:25:f3:4f:b1:08:c6:11:b8:dc:09:5d:da:
0a:b1:d2:db:f0:d0:0b:de:31:3f:a2:99:2e:f6:5a:
34:11:f2:6d:d5:d4:dd:7c:4d:ef:57:f0:f9:39:64:
18:35:e6:4f:41:d0:88:36:46:07:e1:0a:74:c5:49:
93:cb:f6:c0:cd:68:0c:0f:5f:2a:ec:2a:33:c2:7d:
03:41:1b:fd:9a:37:0b:52:f4:10:b9:43:6a:07:72:
35:a3:7d:87:5b:5e:19:63:f3:2c:6d:11:b9:2f:48:
01:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:11:DB:58:A5:30:34:4C:FB:0A:53:8C:89:F5:37:57:51:CC:FB:01
X509v3 Authority Key Identifier:
keyid:DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/1RHbWKUwNEz7ClOMifU3V1HM-wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.150.0/24
128.0.144.0-128.0.154.255
185.5.8.0/22
213.185.78.0-213.185.85.255
IPv6:
2a02:45c0::/32
Signature Algorithm: sha256WithRSAEncryption
b4:dd:b9:15:c8:49:7f:97:82:cb:ef:98:2a:d9:97:e0:0c:0b:
2c:36:cb:1e:10:7c:ef:62:6e:c4:91:c3:b0:df:a9:a5:2f:d1:
aa:81:fe:19:93:9e:8c:30:fe:63:62:58:8b:95:66:2b:ea:9b:
f1:62:6d:bc:82:f6:8e:cb:df:8b:c3:9e:cc:f2:7a:81:3b:7e:
40:b7:8b:54:4f:b5:ce:7b:0c:c3:20:f1:00:d5:5b:bc:ea:66:
e6:71:7b:c6:b0:a1:01:93:31:1a:b5:16:cc:01:1c:75:02:e8:
6e:e7:ec:c2:2b:8d:cc:87:3b:68:c4:12:44:09:bd:b8:f2:2b:
e5:fb:06:1a:00:f5:61:73:a5:d6:b1:df:99:54:15:37:76:d8:
37:67:ce:c3:0c:5b:72:44:bb:ce:cc:23:de:6e:e8:17:4f:c6:
f8:77:02:29:fc:28:28:a6:33:72:f2:1e:19:6a:75:32:e2:be:
08:39:f2:58:95:de:ff:be:82:34:21:f4:6d:d3:c8:fa:31:09:
aa:96:17:0c:0d:fb:eb:f6:56:a0:04:66:8c:01:62:9a:22:3b:
06:c7:d9:2d:d7:2b:b4:e8:bb:ec:18:04:56:5e:a8:c2:49:d9:
c1:08:b5:4e:ff:72:cc:e8:69:fb:fe:c5:73:bd:c9:8b:c6:31:
f5:87:ab:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 17 07:34:42 2023 by rpki-client on console-fra.rpki-client.org