Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/DogUN1BHvaKkz6sNUrj7iYrLVdw.roa
File: DogUN1BHvaKkz6sNUrj7iYrLVdw.roa (raw, json)
Hash identifier: La/gT3g+EQbVp2D2Z1xjjhtPZKTXXtFYvplOoarg484=
Subject key identifier: 0E:88:14:37:50:47:BD:A2:A4:CF:AB:0D:52:B8:FB:89:8A:CB:55:DC
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 018571B0E4538696D59F18F7DB53C3BEA8D9
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/DogUN1BHvaKkz6sNUrj7iYrLVdw.roa
Signing time: Mon 02 Jan 2023 08:54:56 +0000
ROA not before: Mon 02 Jan 2023 08:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197328
IP address blocks: 176.53.112.0/24 maxlen: 24
176.53.118.0/24 maxlen: 24
176.53.117.0/24 maxlen: 24
176.53.116.0/24 maxlen: 24
176.53.115.0/24 maxlen: 24
176.53.114.0/24 maxlen: 24
176.53.113.0/24 maxlen: 24
176.53.17.0/24 maxlen: 24
176.53.16.0/24 maxlen: 24
176.53.21.0/24 maxlen: 24
176.53.20.0/24 maxlen: 24
176.53.19.0/24 maxlen: 24
176.53.18.0/24 maxlen: 24
176.53.24.0/24 maxlen: 24
176.53.23.0/24 maxlen: 24
176.53.22.0/24 maxlen: 24
176.53.31.0/24 maxlen: 24
176.53.30.0/24 maxlen: 24
176.53.29.0/24 maxlen: 24
176.53.28.0/24 maxlen: 24
176.53.27.0/24 maxlen: 24
176.53.26.0/24 maxlen: 24
176.53.25.0/24 maxlen: 24
176.53.119.0/24 maxlen: 24
176.53.125.0/24 maxlen: 24
176.53.124.0/24 maxlen: 24
176.53.123.0/24 maxlen: 24
176.53.122.0/24 maxlen: 24
176.53.121.0/24 maxlen: 24
176.53.120.0/24 maxlen: 24
176.53.126.0/24 maxlen: 24
176.53.127.0/24 maxlen: 24
46.45.178.0/24 maxlen: 24
46.45.177.0/24 maxlen: 24
46.45.176.0/24 maxlen: 24
46.45.175.0/24 maxlen: 24
46.45.174.0/24 maxlen: 24
46.45.173.0/24 maxlen: 24
46.45.179.0/24 maxlen: 24
46.45.183.0/24 maxlen: 24
46.45.182.0/24 maxlen: 24
46.45.181.0/24 maxlen: 24
46.45.180.0/24 maxlen: 24
46.45.128.0/24 maxlen: 24
46.45.136.0/24 maxlen: 24
46.45.139.0/24 maxlen: 24
46.45.138.0/24 maxlen: 24
46.45.137.0/24 maxlen: 24
46.45.143.0/24 maxlen: 24
46.45.142.0/24 maxlen: 24
46.45.141.0/24 maxlen: 24
46.45.140.0/24 maxlen: 24
46.45.171.0/24 maxlen: 24
46.45.170.0/24 maxlen: 24
46.45.169.0/24 maxlen: 24
46.45.168.0/24 maxlen: 24
46.45.172.0/24 maxlen: 24
178.211.44.0/24 maxlen: 24
178.211.43.0/24 maxlen: 24
178.211.41.0/24 maxlen: 24
178.211.40.0/24 maxlen: 24
178.211.39.0/24 maxlen: 24
178.211.47.0/24 maxlen: 24
178.211.46.0/24 maxlen: 24
178.211.45.0/24 maxlen: 24
178.211.33.0/24 maxlen: 24
178.211.32.0/24 maxlen: 24
178.211.38.0/24 maxlen: 24
178.211.37.0/24 maxlen: 24
178.211.36.0/24 maxlen: 24
178.211.35.0/24 maxlen: 24
178.211.34.0/24 maxlen: 24
31.210.98.0/24 maxlen: 24
31.210.97.0/24 maxlen: 24
31.210.96.0/24 maxlen: 24
31.210.101.0/24 maxlen: 24
31.210.100.0/24 maxlen: 24
31.210.99.0/24 maxlen: 24
31.210.105.0/24 maxlen: 24
31.210.104.0/24 maxlen: 24
31.210.103.0/24 maxlen: 24
31.210.102.0/24 maxlen: 24
31.210.108.0/24 maxlen: 24
31.210.107.0/24 maxlen: 24
31.210.106.0/24 maxlen: 24
31.210.112.0/24 maxlen: 24
31.210.111.0/24 maxlen: 24
31.210.110.0/24 maxlen: 24
31.210.109.0/24 maxlen: 24
31.210.118.0/24 maxlen: 24
31.210.117.0/24 maxlen: 24
31.210.116.0/24 maxlen: 24
31.210.115.0/24 maxlen: 24
31.210.114.0/24 maxlen: 24
31.210.113.0/24 maxlen: 24
31.210.122.0/24 maxlen: 24
31.210.121.0/24 maxlen: 24
31.210.120.0/24 maxlen: 24
31.210.119.0/24 maxlen: 24
31.210.125.0/24 maxlen: 24
31.210.124.0/24 maxlen: 24
31.210.123.0/24 maxlen: 24
31.210.127.0/24 maxlen: 24
31.210.126.0/24 maxlen: 24
213.128.84.0/24 maxlen: 24
213.128.83.0/24 maxlen: 24
213.128.82.0/24 maxlen: 24
213.128.81.0/24 maxlen: 24
213.128.80.0/24 maxlen: 24
213.128.85.0/24 maxlen: 24
213.128.87.0/24 maxlen: 24
213.128.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:e4:53:86:96:d5:9f:18:f7:db:53:c3:be:a8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Jan 2 08:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e8814375047bda2a4cfab0d52b8fb898acb55dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:52:f2:72:29:40:da:f4:e8:f3:6b:c2:f3:82:
8f:23:23:6a:d7:bd:fd:fa:4a:2d:5b:ea:b2:eb:3a:
20:de:01:37:b9:be:83:7b:11:45:8c:f2:be:d1:bc:
b2:6a:1d:8e:f9:48:4b:33:8c:65:9d:01:1a:58:4a:
40:2e:d1:33:2f:ee:e1:a5:10:94:57:56:25:0f:23:
0f:6f:76:ad:9e:47:ce:a1:90:9f:95:c6:61:b7:c8:
0a:14:f4:c7:96:0b:b7:9d:d9:f1:a1:47:ab:ce:ed:
3a:c8:75:87:91:22:8e:af:f0:97:c3:71:55:99:d4:
4d:e8:e5:01:5d:cc:c7:cc:24:0d:f4:1b:08:a6:a6:
d9:b1:bf:87:94:0c:16:dc:83:58:a8:1a:d9:eb:b9:
5c:6a:ff:39:8b:7b:69:68:10:69:8c:b2:dc:ab:e5:
3b:f4:31:9c:0c:78:bf:9e:8c:ab:51:36:29:dd:c6:
04:a4:3f:92:03:68:be:49:3d:b0:d6:96:79:c0:da:
8f:7f:2b:3a:ef:a2:80:76:61:9c:27:47:05:25:ba:
eb:f0:80:b1:47:64:14:8f:8e:06:0d:84:0f:e4:fb:
39:9c:14:d1:d2:6a:fd:36:b2:e4:44:79:ff:3b:6f:
f3:8c:ea:5b:09:a0:cf:05:d1:03:a2:af:25:ad:c0:
cf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:88:14:37:50:47:BD:A2:A4:CF:AB:0D:52:B8:FB:89:8A:CB:55:DC
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/DogUN1BHvaKkz6sNUrj7iYrLVdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.96.0/19
46.45.128.0/24
46.45.136.0/21
46.45.168.0-46.45.183.255
176.53.16.0/20
176.53.112.0/20
178.211.32.0-178.211.41.255
178.211.43.0-178.211.47.255
213.128.80.0/21
Signature Algorithm: sha256WithRSAEncryption
20:83:f9:89:78:1f:22:9a:7b:54:e2:b2:7e:43:ce:00:09:d9:
86:d6:da:6f:be:c4:9a:c5:08:5b:07:ff:4a:b7:e0:ec:61:a0:
4c:76:ad:a7:82:a4:23:05:16:90:79:e8:32:8e:35:f7:1e:af:
84:d7:13:c0:26:fa:bd:99:ef:15:0d:6c:fa:b6:b7:72:4a:a5:
55:5b:62:15:ac:cd:08:46:27:ac:f0:7f:5e:14:ee:14:c9:b5:
bf:7f:80:e6:50:9e:99:89:6f:59:48:18:42:28:a4:37:6a:4b:
13:d4:2c:39:eb:2c:c3:f1:5b:19:75:90:00:b2:f9:8d:55:58:
f3:98:0a:f9:00:bc:b4:09:f3:cd:fd:3b:15:6b:4b:da:10:84:
92:84:ea:48:28:59:8b:3f:a0:ab:3e:83:ef:9d:47:60:a6:03:
6a:3f:a1:1a:01:fe:d5:bb:d2:ef:da:c9:4f:04:7e:2d:e4:db:
45:60:b0:f1:0d:95:a5:30:34:b3:0a:25:ab:48:19:0c:88:b2:
f7:63:0c:61:d2:a6:e6:78:ff:67:3c:4a:bd:dc:a4:85:c4:2f:
69:7e:08:04:4f:c4:4a:97:5e:f5:6f:88:86:6c:ed:25:f1:b3:
12:5e:e2:27:57:9f:b8:bd:45:36:ec:4a:89:c9:50:ec:87:46:
a6:bf:77:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:43 2024 by rpki-client on console-ams.rpki-client.org