Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Dsls7MIvfHE2p-NPZppxcH_DOUo.roa
File: Dsls7MIvfHE2p-NPZppxcH_DOUo.roa (raw, json)
Hash identifier: Vk2L6S638BjtQh29xTxxaHFmhPKwmQ1hoxmU97V/MFI=
Subject key identifier: 0E:C9:6C:EC:C2:2F:7C:71:36:A7:E3:4F:66:9A:71:70:7F:C3:39:4A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018AF9B01FE80DF04E2C312A320176600D6A
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Dsls7MIvfHE2p-NPZppxcH_DOUo.roa
Signing time: Wed 04 Oct 2023 07:56:23 +0000
ROA not before: Wed 04 Oct 2023 07:56:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 37.140.222.0/24 maxlen: 24
188.241.248.0/24 maxlen: 24
193.221.210.0/24 maxlen: 24
46.253.135.0/24 maxlen: 24
62.122.191.0/24 maxlen: 24
185.161.123.0/24 maxlen: 24
89.38.136.0/24 maxlen: 24
78.142.243.0/24 maxlen: 24
193.38.154.0/24 maxlen: 24
185.234.15.0/24 maxlen: 24
185.151.145.0/24 maxlen: 24
185.184.216.0/24 maxlen: 24
213.173.37.0/24 maxlen: 24
79.110.228.0/24 maxlen: 24
91.209.12.0/24 maxlen: 24
176.118.35.0/24 maxlen: 24
45.86.37.0/24 maxlen: 24
193.163.192.0/24 maxlen: 24
194.150.76.0/24 maxlen: 24
193.163.193.0/24 maxlen: 24
185.252.213.0/24 maxlen: 24
193.201.14.0/24 maxlen: 24
193.201.12.0/24 maxlen: 24
188.241.159.0/24 maxlen: 24
62.197.128.0/24 maxlen: 24
5.180.178.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f9:b0:1f:e8:0d:f0:4e:2c:31:2a:32:01:76:60:0d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Oct 4 07:56:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ec96cecc22f7c7136a7e34f669a71707fc3394a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cf:3a:40:a7:48:86:e1:9e:d0:c1:60:62:88:
c5:02:72:45:ba:7f:42:f5:67:42:a7:74:90:82:2e:
cd:b5:9a:c4:e1:82:59:77:7e:76:1c:12:c4:40:ad:
2b:bf:a3:58:e8:33:26:d5:71:b3:3f:33:54:36:93:
fb:e3:8c:40:a7:10:ec:cf:dd:4c:54:96:8e:30:f6:
0b:d4:c2:99:2e:00:1d:d8:21:2d:64:62:51:37:be:
89:01:9e:fa:fa:33:29:6c:12:9e:f1:db:2b:00:9a:
04:f3:bf:71:2c:1d:6f:15:44:0e:f9:33:93:a5:5a:
f3:70:47:5d:58:06:90:e4:ae:99:7c:d2:f1:f1:d7:
fc:bb:c5:d0:36:7b:c5:c7:4d:00:e6:ad:de:b9:69:
22:d5:d6:85:c5:46:ac:26:ea:b6:82:13:df:83:58:
16:af:7f:f9:e9:4f:fc:1f:c6:5a:76:8f:f4:04:1d:
fd:81:b3:fe:43:69:4a:37:bc:5c:22:e7:15:fb:d9:
44:72:7a:f8:21:33:18:df:ad:d2:20:60:0b:d6:21:
34:56:59:86:5e:8d:40:5c:4d:26:37:88:be:8f:9f:
4a:ae:2d:cb:4b:62:33:64:c7:2f:43:29:10:b2:ef:
c1:cd:d8:7b:7a:3b:93:12:04:dd:92:04:cd:d5:2f:
6f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C9:6C:EC:C2:2F:7C:71:36:A7:E3:4F:66:9A:71:70:7F:C3:39:4A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Dsls7MIvfHE2p-NPZppxcH_DOUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.178.0/24
37.140.222.0/24
45.86.37.0/24
46.253.135.0/24
62.122.191.0/24
62.197.128.0/24
78.142.243.0/24
79.110.228.0/24
89.38.136.0/24
91.209.12.0/24
176.118.35.0/24
185.151.145.0/24
185.161.123.0/24
185.184.216.0/24
185.234.15.0/24
185.252.213.0/24
188.241.159.0/24
188.241.248.0/24
193.38.154.0/24
193.163.192.0/23
193.201.12.0/24
193.201.14.0/24
193.221.210.0/24
194.150.76.0/24
213.173.37.0/24
Signature Algorithm: sha256WithRSAEncryption
28:47:06:0e:dc:39:9a:9f:00:3a:41:a2:fe:a7:c0:7a:89:9d:
0a:36:4c:7a:b0:0b:28:86:59:e4:37:8e:43:98:7c:76:72:c5:
91:36:67:bc:d7:29:d3:66:80:e6:bb:51:9d:5c:d7:c2:23:e5:
e2:1e:32:03:59:09:88:92:3e:ea:bd:46:4f:51:7c:a5:ad:dc:
dc:fa:c2:11:46:6e:da:09:e9:47:6a:5e:4d:d2:d9:ff:99:42:
b1:64:50:10:26:f9:89:6c:bb:d3:08:2f:30:fa:f3:56:f6:d6:
d7:46:53:9a:7f:1c:52:a3:9f:61:00:23:a3:b9:d7:71:ee:93:
63:19:c9:9e:05:a0:c4:e1:54:1b:02:a1:5c:f4:60:ad:1b:92:
54:ac:9b:3b:9d:73:e4:fa:8d:f6:a7:fd:bf:61:53:ef:8f:c3:
28:94:f7:7e:5f:72:c4:d3:c1:b7:a7:36:49:ea:04:f0:21:21:
68:32:e5:02:00:09:ff:80:c9:07:f3:4c:0b:38:96:c0:69:7f:
47:41:9e:55:95:08:53:c7:78:bb:a4:45:10:36:20:7d:e8:bb:
3c:bb:f9:fe:6f:8b:a9:44:f2:31:3c:cf:2b:f5:67:95:fd:24:
a2:3d:5b:cb:c4:c5:9c:ca:ad:d8:32:7e:3d:eb:a0:76:0e:24:
22:a2:85:27
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgISAYr5sB/oDfBOLDEqMgF2YA1qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMxMDA0MDc1NjIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWM5NmNlY2MyMmY3YzcxMzZhN2UzNGY2NjlhNzE3MDdmYzMzOTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls86QKdIhuGe0MFgYojFAnJFun9C
9WdCp3SQgi7NtZrE4YJZd352HBLEQK0rv6NY6DMm1XGzPzNUNpP744xApxDsz91M
VJaOMPYL1MKZLgAd2CEtZGJRN76JAZ76+jMpbBKe8dsrAJoE879xLB1vFUQO+TOT
pVrzcEddWAaQ5K6ZfNLx8df8u8XQNnvFx00A5q3euWki1daFxUasJuq2ghPfg1gW
r3/56U/8H8Zado/0BB39gbP+Q2lKN7xcIucV+9lEcnr4ITMY363SIGAL1iE0VlmG
Xo1AXE0mN4i+j59Kri3LS2IzZMcvQykQsu/Bzdh7ejuTEgTdkgTN1S9vqQIDAQAB
o4ICnjCCApowHQYDVR0OBBYEFA7JbOzCL3xxNqfjT2aacXB/wzlKMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvRHNsczdNSXZmSEUycC1OUFpwcHhjSF9ET1VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAAF
tLIDBAAljN4DBAAtViUDBAAu/YcDBAA+er8DBAA+xYADBABOjvMDBABPbuQDBABZ
JogDBABb0QwDBACwdiMDBAC5l5EDBAC5oXsDBAC5uNgDBAC56g8DBAC5/NUDBAC8
8Z8DBAC88fgDBADBJpoDBAHBo8ADBADByQwDBADByQ4DBADB3dIDBADClkwDBADV
rSUwDQYJKoZIhvcNAQELBQADggEBAChHBg7cOZqfADpBov6nwHqJnQo2THqwCyiG
WeQ3jkOYfHZyxZE2Z7zXKdNmgOa7UZ1c18Ij5eIeMgNZCYiSPuq9Rk9RfKWt3Nz6
whFGbtoJ6UdqXk3S2f+ZQrFkUBAm+Ylsu9MILzD681b21tdGU5p/HFKjn2EAI6O5
13Huk2MZyZ4FoMThVBsCoVz0YK0bklSsmzudc+T6jfan/b9hU++PwyiU935fcsTT
wbenNknqBPAhIWgy5QIACf+AyQfzTAs4lsBpf0dBnlWVCFPHeLukRRA2IH3ouzy7
+f5vi6lE8jE8zyv1Z5X9JKI9W8vExZzKrdgyfj3roHYOJCKihSc=
-----END CERTIFICATE-----
Generated at Tue Oct 31 17:58:47 2023 by rpki-client on console-fra.rpki-client.org