Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/duvu_5t6EyynaYXiuEbpbzI5D6s.roa
File: duvu_5t6EyynaYXiuEbpbzI5D6s.roa (raw, json)
Hash identifier: Fla/JpNNS6CVDZF3i6Hoe/0FBCpfzlquGEVJic+wHIQ=
Subject key identifier: 76:EB:EE:FF:9B:7A:13:2C:A7:69:85:E2:B8:46:E9:6F:32:39:0F:AB
Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial: 018573039953A8226A2A7E2AC43CB8115988
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/duvu_5t6EyynaYXiuEbpbzI5D6s.roa
Signing time: Mon 02 Jan 2023 15:04:53 +0000
ROA not before: Mon 02 Jan 2023 15:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35226
IP address blocks: 185.179.40.0/24 maxlen: 24
89.184.56.0/23 maxlen: 23
89.16.64.0/19 maxlen: 19
109.106.96.0/20 maxlen: 20
78.143.128.0/18 maxlen: 18
109.106.112.0/21 maxlen: 21
109.106.124.0/22 maxlen: 22
89.184.32.0/22 maxlen: 22
89.184.40.0/21 maxlen: 21
89.184.48.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:99:53:a8:22:6a:2a:7e:2a:c4:3c:b8:11:59:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
Validity
Not Before: Jan 2 15:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76ebeeff9b7a132ca76985e2b846e96f32390fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:92:59:f1:d0:08:84:cb:96:06:56:88:1b:c2:
65:04:6a:bb:75:d3:77:a9:04:5f:fa:06:6a:ca:c0:
ec:ef:45:4e:13:4a:16:cd:3b:7f:88:ff:86:bf:7b:
e2:fd:42:08:33:85:45:fd:5d:e7:84:6e:42:b6:bf:
38:16:70:91:00:d4:86:31:64:67:ba:4c:dc:39:76:
eb:b2:fe:e2:67:a5:c4:28:31:d5:a4:45:e0:ff:51:
60:af:ae:62:0c:04:65:80:ab:85:cb:31:19:08:b9:
8b:83:c2:c6:9d:03:c5:46:64:4b:75:17:75:3c:e3:
08:5f:3d:0b:c7:a8:7d:7f:eb:12:f3:dd:b9:c5:3b:
c2:1c:8e:51:6e:d0:57:8a:db:50:31:cf:aa:9c:fb:
4a:6b:b9:35:a9:8f:37:b2:99:d8:06:d5:f1:9d:eb:
03:8a:26:39:08:46:91:68:5f:05:89:98:31:9b:0a:
94:d0:32:c3:25:aa:1f:ab:ec:4a:c7:e7:51:7b:75:
6e:c4:00:e4:71:bc:f5:54:3a:8e:49:66:12:54:65:
01:ab:6d:51:41:71:de:0c:90:67:f2:a3:5e:e5:c2:
2b:57:2c:ba:50:6c:86:af:63:89:2a:20:44:f1:32:
69:3f:b5:42:1d:73:92:3b:c9:ca:63:f5:9b:5e:e2:
0c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EB:EE:FF:9B:7A:13:2C:A7:69:85:E2:B8:46:E9:6F:32:39:0F:AB
X509v3 Authority Key Identifier:
keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/duvu_5t6EyynaYXiuEbpbzI5D6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.143.128.0/18
89.16.64.0/19
89.184.32.0/22
89.184.40.0-89.184.57.255
109.106.96.0-109.106.119.255
109.106.124.0/22
185.179.40.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:24:f6:93:aa:05:d2:3e:18:f3:f0:4c:ae:07:0d:04:34:0a:
11:ff:dd:94:73:cf:61:8f:b7:4f:b7:9d:e7:5f:64:b6:c7:37:
8a:cd:76:88:84:ea:bd:d6:46:cf:81:dd:03:59:a0:a9:9e:b8:
35:4b:07:75:a5:ea:4b:2b:f5:99:18:3e:f5:60:e6:82:7f:70:
7a:34:c9:1f:79:71:72:04:6f:4c:02:9c:c4:43:4e:a6:11:11:
a0:0c:a5:fe:70:7e:84:4b:1a:70:d8:cc:d8:f0:15:30:bb:b3:
ae:11:c5:98:aa:49:a7:50:c6:b8:21:73:e9:3a:82:37:31:3d:
cf:3f:56:53:2d:d0:15:19:13:59:92:04:eb:fa:c5:df:67:8a:
53:e0:63:fd:5d:e8:58:c5:81:ca:d3:ea:b8:0b:d5:d6:d4:c9:
51:73:da:cf:1d:2c:eb:07:59:22:37:85:a5:3e:81:c0:5b:e9:
51:6b:bd:1c:a3:40:8f:e5:98:2c:60:a7:d9:5f:2d:10:fb:83:
da:47:e8:8e:54:e4:d5:87:11:3b:34:4e:c2:46:50:5b:6d:76:
f8:1d:a9:e2:8f:f2:2b:6a:1d:72:1b:29:f6:77:8d:03:aa:12:
2f:37:bb:f1:53:9a:dc:b2:dd:8e:6f:fd:5a:74:1d:c5:81:7e:
a1:8b:b1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:35 2024 by rpki-client on console-fra.rpki-client.org