Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/04eqBcb3QtLR3m5UXVS0pKMAxJY.roa
File: 04eqBcb3QtLR3m5UXVS0pKMAxJY.roa (raw, json)
Hash identifier: u0GnopQP9SqKOeWN7UDO/foWVCcMHB37RRtt77sGBgQ=
Subject key identifier: D3:87:AA:05:C6:F7:42:D2:D1:DE:6E:54:5D:54:B4:A4:A3:00:C4:96
Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial: 01888A880DBEE5DC700B71670863425E4876
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/04eqBcb3QtLR3m5UXVS0pKMAxJY.roa
Signing time: Mon 05 Jun 2023 07:49:12 +0000
ROA not before: Mon 05 Jun 2023 07:49:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62455
IP address blocks: 185.182.72.0/22 maxlen: 22
185.233.176.0/22 maxlen: 22
185.205.229.0/24 maxlen: 24
185.205.228.0/24 maxlen: 24
185.205.228.0/22 maxlen: 22
185.205.230.0/24 maxlen: 24
2a0b:bc0::/29 maxlen: 29
2a0a:e780::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:88:0d:be:e5:dc:70:0b:71:67:08:63:42:5e:48:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
Validity
Not Before: Jun 5 07:49:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d387aa05c6f742d2d1de6e545d54b4a4a300c496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:b3:61:c5:92:41:29:4a:1a:08:53:ad:6a:
e3:f3:3e:ab:d1:ec:a1:93:ab:84:c1:e6:56:46:5e:
e0:10:36:6a:d9:f1:a2:7d:ea:4c:6d:cb:b6:a3:aa:
d5:95:18:cc:5e:9a:9d:21:8a:04:5f:28:1d:63:4f:
47:73:32:c9:11:d4:36:d5:e5:b9:7d:f9:32:ea:5d:
89:8b:d8:bd:1e:9d:d5:95:72:67:97:c8:c7:1e:93:
43:84:39:c5:62:34:f6:9f:2b:ae:a4:9f:39:c9:ed:
1c:54:6a:1a:8c:d9:ee:85:a2:f5:59:af:86:2e:c4:
0c:e6:7f:89:5e:73:2e:1e:30:fe:df:d6:5f:68:1f:
a0:25:d9:59:57:91:18:09:b7:0a:a3:32:1a:16:fb:
ba:b2:4e:db:ff:c5:7a:e4:cd:7e:62:7f:97:5e:e0:
a2:0f:60:1a:af:7e:b4:33:c7:7c:6f:72:8b:6b:7c:
88:d1:e5:2f:6c:49:33:5b:99:e1:9d:a4:3d:d3:c3:
84:da:3d:73:b9:01:a6:0d:0d:62:0d:a3:06:28:8d:
fb:e8:b7:e8:87:f5:e3:5f:d8:d3:95:c0:7d:33:4f:
f7:14:79:5e:29:04:da:75:cf:c1:60:19:49:e7:72:
78:e1:5e:30:4a:25:40:dd:76:78:2e:dd:d4:ac:97:
85:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:87:AA:05:C6:F7:42:D2:D1:DE:6E:54:5D:54:B4:A4:A3:00:C4:96
X509v3 Authority Key Identifier:
keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/04eqBcb3QtLR3m5UXVS0pKMAxJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.72.0/22
185.205.228.0/22
185.233.176.0/22
IPv6:
2a0a:e780::/29
2a0b:bc0::/29
Signature Algorithm: sha256WithRSAEncryption
8d:53:24:e9:dd:cf:6a:d6:b1:90:98:4b:c8:c9:7f:64:62:93:
fc:9e:15:d0:e0:d5:4d:ae:1e:03:81:59:3a:48:03:d0:bc:87:
c0:ba:a6:cf:75:47:3c:77:23:32:79:5b:30:8e:2f:be:58:20:
bd:a9:73:1b:c4:d3:51:a6:8c:d5:af:7e:9a:7d:c6:28:0d:8f:
1e:14:28:07:f4:4f:6e:1c:8d:5c:47:e2:dc:ad:9f:14:24:c9:
4d:6f:4b:1c:06:23:de:92:fa:5c:f0:2e:f3:69:0f:58:ad:df:
06:6e:2f:74:3c:8b:67:0a:e9:e2:37:52:b6:62:af:22:be:c9:
22:d4:fa:66:b2:c9:79:c0:84:99:1d:94:31:5a:54:61:e8:fb:
f9:b0:c3:11:a9:6d:32:c2:84:a5:47:37:40:2f:4f:31:0f:f8:
15:8e:b4:52:11:73:52:4b:47:64:21:30:6c:b2:c1:4e:e1:68:
f9:9d:c0:e3:2e:9f:4c:1e:93:05:47:98:aa:07:7d:d1:b7:20:
80:91:3a:1f:2f:d9:10:6f:f4:c3:24:5e:aa:ab:15:87:2b:04:
9c:e4:43:26:7b:64:4b:4c:9f:d3:66:0f:53:b7:fb:40:e1:31:
74:ab:79:de:e6:df:2a:16:c8:f1:42:74:3a:d6:dc:7a:66:71:
58:75:a8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:56 2023 by rpki-client on console-fra.rpki-client.org