Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Dnt_4e5sOfdIqFA_EK_W29BiVlE.roa
File: Dnt_4e5sOfdIqFA_EK_W29BiVlE.roa (raw, json)
Hash identifier: Oen0lOnYQNayOUFe54dwwmlfbqWFja6i+rdui+CoiA4=
Subject key identifier: 0E:7B:7F:E1:EE:6C:39:F7:48:A8:50:3F:10:AF:D6:DB:D0:62:56:51
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 018AB772EE2FDF2BB377EFABC48D71E07576
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Dnt_4e5sOfdIqFA_EK_W29BiVlE.roa
Signing time: Thu 21 Sep 2023 11:14:37 +0000
ROA not before: Thu 21 Sep 2023 11:14:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36454
IP address blocks: 65.181.112.0/24 maxlen: 24
65.181.116.0/24 maxlen: 24
65.181.113.0/24 maxlen: 24
192.243.98.0/24 maxlen: 24
192.243.97.0/24 maxlen: 24
192.243.96.0/24 maxlen: 24
162.208.9.0/24 maxlen: 24
162.208.11.0/24 maxlen: 24
162.208.10.0/24 maxlen: 24
162.208.8.0/24 maxlen: 24
192.243.105.0/24 maxlen: 24
192.243.102.0/24 maxlen: 24
192.243.101.0/24 maxlen: 24
192.243.104.0/24 maxlen: 24
192.243.99.0/24 maxlen: 24
192.243.100.0/24 maxlen: 24
192.243.103.0/24 maxlen: 24
192.243.109.0/24 maxlen: 24
192.243.108.0/24 maxlen: 24
192.243.111.0/24 maxlen: 24
192.243.106.0/24 maxlen: 24
192.243.107.0/24 maxlen: 24
192.250.226.0/24 maxlen: 24
192.250.224.0/20 maxlen: 20
192.250.227.0/24 maxlen: 24
192.250.236.0/24 maxlen: 24
65.181.125.0/24 maxlen: 24
65.181.124.0/24 maxlen: 24
65.181.123.0/24 maxlen: 24
199.175.51.0/24 maxlen: 24
199.175.48.0/24 maxlen: 24
199.175.50.0/24 maxlen: 24
199.175.49.0/24 maxlen: 24
199.175.55.0/24 maxlen: 24
199.175.54.0/24 maxlen: 24
199.175.52.0/24 maxlen: 24
199.175.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:72:ee:2f:df:2b:b3:77:ef:ab:c4:8d:71:e0:75:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Sep 21 11:14:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e7b7fe1ee6c39f748a8503f10afd6dbd0625651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:b3:cc:51:89:4e:be:7b:ad:b3:76:5e:0f:
76:f8:0e:00:bf:04:7d:a9:64:69:63:e1:89:d8:7f:
b8:7c:2e:6b:ef:69:d1:e3:4b:3e:b8:0a:12:bb:58:
3d:54:15:4a:5e:52:79:1f:e5:ef:6c:7d:ac:f0:82:
ca:bc:95:6d:99:87:25:46:2d:fb:04:e2:c6:58:81:
14:42:16:36:6a:03:4d:67:d6:f2:c0:53:3f:8a:96:
65:36:5d:1c:99:fd:9b:2b:13:2a:dd:2c:29:13:1c:
2e:4f:aa:b0:e2:0c:6b:bd:44:d6:db:e3:3a:fd:62:
ea:18:92:48:99:1d:9e:1b:9c:42:2b:47:0f:89:4b:
2f:b3:ae:06:8f:c5:f7:80:e8:71:79:01:47:08:6b:
b5:c3:b4:7c:8b:52:13:7d:9c:c8:fb:d2:94:2b:b9:
06:d6:4d:b1:af:f4:42:01:5f:e3:13:a9:50:fb:a7:
3f:6e:3c:13:84:cd:72:52:de:47:d5:a9:c7:75:14:
d5:a9:9d:ac:c7:20:e3:23:2a:03:21:2f:f7:3e:bc:
9e:12:c3:19:5c:bd:ec:44:72:b6:61:21:5a:31:68:
98:96:a9:4f:1a:f7:57:11:ea:5a:bc:09:d0:7c:75:
b9:67:8b:2a:47:23:4e:ee:cd:9f:0a:c9:e1:d6:b9:
ff:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7B:7F:E1:EE:6C:39:F7:48:A8:50:3F:10:AF:D6:DB:D0:62:56:51
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Dnt_4e5sOfdIqFA_EK_W29BiVlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.181.112.0/23
65.181.116.0/24
65.181.123.0-65.181.125.255
162.208.8.0/22
192.243.96.0-192.243.109.255
192.243.111.0/24
192.250.224.0/20
199.175.48.0/21
Signature Algorithm: sha256WithRSAEncryption
48:df:76:c3:cb:aa:7e:1a:90:a5:64:13:24:07:1c:4b:74:5a:
d7:a2:e5:80:a0:57:fd:14:ef:0d:e8:ca:08:87:00:d3:36:9e:
ba:e5:73:f0:dc:d4:a2:10:98:61:3e:ba:45:ee:07:01:16:13:
68:86:06:8d:cc:65:d0:55:82:b9:e9:d5:51:2e:e8:88:08:a0:
0d:1a:d0:7c:77:54:e9:8b:ab:77:fe:67:cd:dc:88:e6:8e:74:
1b:db:f6:3b:15:ac:38:0f:03:39:f8:60:02:af:58:94:3c:6e:
77:63:e6:56:0d:82:43:7d:04:93:cf:a8:25:a3:0b:23:27:d4:
5a:6b:7f:b7:ef:56:34:af:1c:0e:5b:c3:4c:e1:45:21:1b:8b:
3a:92:7c:63:e6:33:21:43:ff:ce:d6:25:07:e9:70:9b:02:b7:
a4:44:66:18:7d:ed:de:42:13:d8:61:2b:4d:fd:69:33:51:c7:
23:2e:5e:6b:f2:3c:c4:37:ad:01:c8:1b:c4:a0:26:2d:89:64:
9c:48:89:ae:2c:3a:11:03:bd:f7:48:54:1d:4a:b8:c9:aa:79:
a2:71:ae:c2:3f:99:5a:e1:0e:b5:9d:c1:e7:2a:e7:79:ba:47:
78:e0:4d:d0:d3:05:d0:35:1f:01:27:e4:dc:2c:5b:95:0c:d9:
56:00:1f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:30 2024 by rpki-client on console-fra.rpki-client.org