Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/S1Dnv8BMUZ4KIL8zSrxmTC-Hupw.roa
File: S1Dnv8BMUZ4KIL8zSrxmTC-Hupw.roa (raw, json)
Hash identifier: NtI+vwwEQMeG62BrOLrnXmTFy4K/JxgzO0C3EUdUUNA=
Subject key identifier: 4B:50:E7:BF:C0:4C:51:9E:0A:20:BF:33:4A:BC:66:4C:2F:87:BA:9C
Certificate issuer: /CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
Certificate serial: 0185704BA8403404B8F6AA4C295BE4AD6584
Authority key identifier: 3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/S1Dnv8BMUZ4KIL8zSrxmTC-Hupw.roa
Signing time: Mon 02 Jan 2023 02:24:44 +0000
ROA not before: Mon 02 Jan 2023 02:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12703
IP address blocks: 212.20.224.0/19 maxlen: 24
195.248.70.0/24 maxlen: 24
185.64.88.0/22 maxlen: 24
195.47.244.0/24 maxlen: 24
87.246.64.0/18 maxlen: 24
5.172.152.0/21 maxlen: 24
5.153.64.0/19 maxlen: 24
193.29.223.0/24 maxlen: 24
46.249.192.0/19 maxlen: 24
84.19.224.0/19 maxlen: 24
217.30.112.0/20 maxlen: 24
2a02:16e0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:a8:40:34:04:b8:f6:aa:4c:29:5b:e4:ad:65:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
Validity
Not Before: Jan 2 02:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b50e7bfc04c519e0a20bf334abc664c2f87ba9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:6f:58:4c:9b:bd:af:f7:46:4b:9b:01:aa:
86:ca:12:d2:cc:61:00:d9:d7:fc:22:bb:65:e6:f4:
4f:72:de:01:61:3a:ee:d1:5e:74:fb:3c:5f:d0:71:
78:46:e4:02:f6:ff:95:d0:c1:39:b8:57:4d:8b:1f:
41:3b:b8:1f:7f:1b:d1:9c:fb:85:be:a7:97:69:6c:
28:8b:bd:dc:54:ea:c0:d6:85:fa:5c:38:dd:aa:3b:
dd:a7:25:b7:67:1d:51:b5:e0:05:4a:7c:b6:57:46:
e3:38:57:75:b2:ec:c3:28:51:30:8f:67:b1:76:67:
56:d1:49:bd:3d:38:36:f9:64:59:37:f5:37:c3:d6:
cb:79:f6:79:9c:34:d1:06:a6:a9:aa:a1:30:ab:9a:
73:6e:da:c3:81:89:18:69:6c:44:bc:c5:27:fa:40:
e0:83:72:a5:a0:f1:b3:a3:b8:8c:ee:18:27:ec:e8:
79:72:b2:f3:ea:ce:3f:86:eb:17:21:e3:4f:d3:12:
e7:1a:a3:3e:f3:fb:6f:c7:ec:b9:d5:f6:b7:5f:68:
44:95:9a:f8:9d:ea:bc:e7:f4:27:da:8b:54:f9:23:
06:d7:42:e0:5a:f9:dd:f8:12:0a:40:7b:5e:97:eb:
2c:fc:bd:6e:ed:95:13:f8:6e:3d:98:56:26:f3:ca:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:50:E7:BF:C0:4C:51:9E:0A:20:BF:33:4A:BC:66:4C:2F:87:BA:9C
X509v3 Authority Key Identifier:
keyid:3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/S1Dnv8BMUZ4KIL8zSrxmTC-Hupw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.64.0/19
5.172.152.0/21
46.249.192.0/19
84.19.224.0/19
87.246.64.0/18
185.64.88.0/22
193.29.223.0/24
195.47.244.0/24
195.248.70.0/24
212.20.224.0/19
217.30.112.0/20
IPv6:
2a02:16e0::/32
Signature Algorithm: sha256WithRSAEncryption
4e:b7:55:14:cc:b6:a4:be:09:e6:8c:ba:29:8b:a1:40:6d:bc:
0e:cb:8f:1e:43:6f:20:7d:4c:d9:f6:18:d8:37:5f:63:46:74:
5e:4e:30:f6:dc:04:e7:55:c9:83:71:4d:0a:2a:f3:66:96:45:
f4:36:cc:fe:40:49:50:2b:d0:44:d6:cd:96:64:fb:b4:69:09:
11:12:bd:fd:74:f6:7b:a3:aa:fc:9a:17:c6:7c:5b:de:d7:85:
00:b3:05:b2:04:c4:f7:50:a9:e6:fe:cb:bd:f1:99:b2:5e:10:
f8:bc:df:58:6f:cd:74:be:cb:9b:e2:ff:ed:aa:af:ea:38:1d:
c4:84:f8:73:d2:0c:38:3f:0a:54:d0:6b:5e:92:70:84:ad:9f:
30:76:6f:89:aa:34:4e:ea:e0:82:44:6c:9f:79:2d:bb:3c:e6:
39:20:74:f6:78:02:b8:72:3b:a1:59:a0:db:1d:b3:cf:75:6f:
f9:d0:eb:1f:46:8e:b3:54:0e:11:13:29:1d:d4:c2:e4:f6:32:
b8:9a:2a:e3:7e:be:35:f3:c2:b3:21:15:9c:65:9c:e2:b3:ac:
63:fc:aa:37:fa:8d:f9:ee:93:06:2d:af:47:53:4d:bc:26:51:
ab:c2:fd:e2:9c:c7:52:2d:02:b8:76:d5:53:dc:c8:ba:7c:24:
15:d0:03:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:38 2024 by rpki-client on console-fra.rpki-client.org