Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/DqIXhfKGPnpM2tQCTm4lpwlgIZw.roa
File: DqIXhfKGPnpM2tQCTm4lpwlgIZw.roa (raw, json)
Hash identifier: Ge9+F5pnOrkQNP+pphXm8yNaaxN5Z1VDXhSO94ykqA0=
Subject key identifier: 0E:A2:17:85:F2:86:3E:7A:4C:DA:D4:02:4E:6E:25:A7:09:60:21:9C
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 018BF0B90EF1E429818706BAC0E0A33C38D4
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/DqIXhfKGPnpM2tQCTm4lpwlgIZw.roa
Signing time: Tue 21 Nov 2023 07:12:21 +0000
ROA not before: Tue 21 Nov 2023 07:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199242
IP address blocks: 146.19.199.0/24 maxlen: 24
193.162.135.0/24 maxlen: 24
193.162.133.0/24 maxlen: 24
212.52.14.0/24 maxlen: 24
212.52.28.0/24 maxlen: 24
194.26.231.0/24 maxlen: 24
194.26.230.0/24 maxlen: 24
185.234.12.0/24 maxlen: 24
146.19.203.0/24 maxlen: 24
194.9.180.0/24 maxlen: 24
146.19.208.0/24 maxlen: 24
62.3.11.0/24 maxlen: 24
194.99.158.0/24 maxlen: 24
62.106.90.0/24 maxlen: 24
188.244.119.0/24 maxlen: 24
91.246.50.0/24 maxlen: 24
91.241.55.0/24 maxlen: 24
176.126.101.0/24 maxlen: 24
37.72.142.0/24 maxlen: 24
176.97.219.0/24 maxlen: 24
176.97.217.0/24 maxlen: 24
193.9.51.0/24 maxlen: 24
146.19.74.0/24 maxlen: 24
193.162.132.0/24 maxlen: 24
80.71.144.0/24 maxlen: 24
80.71.145.0/24 maxlen: 24
62.233.61.0/24 maxlen: 24
146.19.4.0/24 maxlen: 24
195.96.131.0/24 maxlen: 24
195.96.130.0/24 maxlen: 24
195.96.145.0/24 maxlen: 24
31.222.228.0/24 maxlen: 24
31.222.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:b9:0e:f1:e4:29:81:87:06:ba:c0:e0:a3:3c:38:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Nov 21 07:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ea21785f2863e7a4cdad4024e6e25a70960219c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6b:40:38:6b:ab:56:42:eb:9e:01:29:4e:76:
0a:88:24:9b:89:f4:2e:56:4c:8e:7a:65:c9:83:92:
28:27:fa:65:d4:ea:05:bc:21:29:83:ac:98:0c:c2:
1a:1e:a7:29:de:56:45:9c:a2:80:38:12:aa:74:fc:
7f:31:3f:8c:0b:7d:f8:88:9c:49:8a:e8:a8:2a:ac:
e2:3b:7a:42:a9:7b:1e:d1:39:d4:01:55:87:53:15:
55:ee:c0:ec:d1:10:b5:49:1c:24:e2:dd:99:ef:8b:
06:bf:b6:a4:1e:b8:17:94:bc:15:ac:db:32:ab:4c:
2b:f1:da:b9:ad:2b:3e:02:e3:58:ab:d2:f4:97:f9:
ec:1d:4d:ea:29:80:fd:89:41:2d:50:ee:31:3b:eb:
48:84:c1:eb:3c:47:2e:83:db:b9:d4:64:61:37:97:
83:71:ac:7a:a4:13:77:75:1a:a0:29:64:f3:7b:82:
8f:f5:4e:a5:dd:09:f1:93:a1:47:3d:c0:8c:f6:5c:
df:5d:a9:10:14:54:5e:eb:87:19:57:57:16:d1:f1:
bd:bf:67:99:82:9b:57:b6:63:41:2f:ee:d9:2d:d6:
8b:fc:28:3e:58:07:9c:b3:ae:c8:80:db:03:69:6c:
81:69:3f:08:0f:c1:cb:b8:93:17:7a:a3:38:7a:09:
d5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A2:17:85:F2:86:3E:7A:4C:DA:D4:02:4E:6E:25:A7:09:60:21:9C
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/DqIXhfKGPnpM2tQCTm4lpwlgIZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.228.0/24
31.222.234.0/24
37.72.142.0/24
62.3.11.0/24
62.106.90.0/24
62.233.61.0/24
80.71.144.0/23
91.241.55.0/24
91.246.50.0/24
146.19.4.0/24
146.19.74.0/24
146.19.199.0/24
146.19.203.0/24
146.19.208.0/24
176.97.217.0/24
176.97.219.0/24
176.126.101.0/24
185.234.12.0/24
188.244.119.0/24
193.9.51.0/24
193.162.132.0/23
193.162.135.0/24
194.9.180.0/24
194.26.230.0/23
194.99.158.0/24
195.96.130.0/23
195.96.145.0/24
212.52.14.0/24
212.52.28.0/24
Signature Algorithm: sha256WithRSAEncryption
28:97:4a:5c:52:d4:bc:78:f7:8b:2b:4f:65:30:84:ea:be:08:
b8:78:47:b4:8c:a5:1a:ff:be:ad:d8:2a:dc:a6:76:98:fc:52:
1a:8e:a8:05:43:73:2c:d3:10:29:30:27:3d:2e:c1:9f:fd:0a:
7a:0a:e4:79:9f:21:6c:4f:c3:09:03:94:08:e9:a9:c7:d2:e6:
93:43:28:3a:ce:8a:cf:97:83:26:e1:c6:ce:3d:ea:4f:b2:58:
01:b4:72:f3:47:cd:d5:8d:1b:d2:c4:39:2b:e4:f4:2b:03:8e:
e5:02:8e:1c:c5:c9:b4:73:12:e9:b9:9f:6d:90:4d:94:b1:f8:
83:4f:41:14:da:2f:e2:db:7d:22:16:58:51:70:d9:89:8b:13:
40:cb:40:52:1c:73:67:a7:93:49:b0:70:c0:43:5d:27:76:cd:
4d:5c:b5:48:f1:4b:d1:8d:de:db:a9:f6:03:47:09:6c:a8:9b:
f7:ae:80:a8:24:76:1d:d3:c4:4d:7a:91:e4:d6:50:6e:8f:10:
b5:68:12:9b:d4:a1:46:48:c0:fe:c7:33:f1:3b:ea:8b:37:af:
92:5f:8a:a0:e7:a7:e7:dc:6c:a3:b0:c7:40:25:5c:39:29:92:
a3:9f:21:dd:89:3c:f8:bd:e6:82:ad:58:c9:43:6f:21:84:87:
f0:eb:97:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:03 2024 by rpki-client on console-fra.rpki-client.org