Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/vDDMkKJQFNhHfGgbYo_8894CMLM.roa
File: vDDMkKJQFNhHfGgbYo_8894CMLM.roa (raw, json)
Hash identifier: XPqrz1+bNpT+HzNbMfWzSxvHcwcKvrw8pX5hBty6fFw=
Subject key identifier: BC:30:CC:90:A2:50:14:D8:47:7C:68:1B:62:8F:FC:F3:DE:02:30:B3
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0188BFF6D4A65004F4A0AA339DCB47CA35E0
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/vDDMkKJQFNhHfGgbYo_8894CMLM.roa
Signing time: Thu 15 Jun 2023 16:50:04 +0000
ROA not before: Thu 15 Jun 2023 16:50:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13213
IP address blocks: 162.218.89.0/24 maxlen: 24
162.218.88.0/24 maxlen: 24
162.218.91.0/24 maxlen: 24
162.218.94.0/24 maxlen: 24
162.218.93.0/24 maxlen: 24
162.218.92.0/24 maxlen: 24
212.60.14.0/24 maxlen: 24
185.187.213.0/24 maxlen: 24
185.187.215.0/24 maxlen: 24
185.187.214.0/24 maxlen: 24
79.98.182.0/24 maxlen: 24
78.31.206.0/24 maxlen: 24
78.31.207.0/24 maxlen: 24
185.171.126.0/24 maxlen: 24
185.208.152.0/24 maxlen: 24
185.230.123.0/24 maxlen: 24
185.230.121.0/24 maxlen: 24
185.230.120.0/24 maxlen: 24
185.208.153.0/24 maxlen: 24
185.208.154.0/24 maxlen: 24
45.67.146.0/24 maxlen: 24
185.205.206.0/24 maxlen: 24
185.52.137.0/24 maxlen: 24
185.52.136.0/24 maxlen: 24
185.52.139.0/24 maxlen: 24
185.52.138.0/24 maxlen: 24
185.205.207.0/24 maxlen: 24
185.161.191.0/24 maxlen: 24
185.201.40.0/24 maxlen: 24
5.182.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:f6:d4:a6:50:04:f4:a0:aa:33:9d:cb:47:ca:35:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jun 15 16:50:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc30cc90a25014d8477c681b628ffcf3de0230b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:75:5e:0a:1d:24:dd:a1:e7:ab:d6:3e:93:ed:
57:da:6d:e2:df:55:01:83:78:de:12:24:1d:51:25:
4d:93:08:20:c7:32:6e:51:13:3b:44:b3:c4:4c:c0:
3a:bc:86:f5:e4:36:30:f6:75:81:d4:b5:74:61:0b:
29:4e:19:38:01:69:a6:58:5c:1f:ac:9a:fd:78:5f:
16:ae:ab:48:60:bc:e9:b5:b5:7e:e8:3d:ef:9a:ed:
d0:9b:dd:34:76:b7:97:16:b8:49:b8:84:44:79:c7:
f7:2d:52:9c:ad:fb:cb:af:21:c9:14:c1:b6:f0:19:
26:48:b1:7e:c5:c8:09:94:76:75:1f:5f:b2:b1:88:
91:fe:b1:93:4f:93:83:10:a1:35:89:c3:54:9a:77:
6b:13:52:26:b7:f0:a8:0a:15:19:59:c7:5d:a6:64:
2a:bb:e5:3b:44:58:a6:e6:82:46:a6:8c:b2:6f:5d:
b0:99:57:28:81:f9:03:a7:d6:2e:6c:e1:62:2a:37:
6f:7e:99:a4:88:22:fd:12:92:2f:98:2c:a0:94:8b:
2e:c3:0c:b8:db:63:35:08:d2:4d:f4:2b:34:f8:8c:
4a:31:12:27:29:59:80:0f:e5:7d:b4:e4:fc:7f:a9:
8a:20:1c:64:f7:94:ae:63:53:2b:16:87:cc:8d:89:
d0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:30:CC:90:A2:50:14:D8:47:7C:68:1B:62:8F:FC:F3:DE:02:30:B3
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/vDDMkKJQFNhHfGgbYo_8894CMLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.184.0/24
45.67.146.0/24
78.31.206.0/23
79.98.182.0/24
162.218.88.0/23
162.218.91.0-162.218.94.255
185.52.136.0/22
185.161.191.0/24
185.171.126.0/24
185.187.213.0-185.187.215.255
185.201.40.0/24
185.205.206.0/23
185.208.152.0-185.208.154.255
185.230.120.0/23
185.230.123.0/24
212.60.14.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:30:8f:9c:49:df:82:3b:06:82:19:1d:23:30:d6:28:3f:b0:
bd:d7:f2:1a:e0:7c:7e:78:7d:4f:86:c4:e3:e6:c5:9a:68:2b:
bd:d4:e1:a6:32:d9:5a:2a:20:21:f9:45:0b:93:dd:bc:e1:2d:
ff:24:7e:2c:73:a4:5f:09:86:da:d6:ba:d5:c0:aa:82:a4:0a:
45:e1:03:17:62:f4:7a:0c:21:c3:77:f8:13:07:cc:65:80:72:
d1:84:f7:1d:a1:83:30:1a:76:bd:d6:f2:c0:87:34:0b:10:69:
b1:15:40:b0:59:72:f3:90:52:bb:50:5e:87:d1:e0:05:af:49:
a8:b1:5c:11:b1:9f:f1:86:9a:09:e7:0b:a9:25:24:ae:7f:77:
85:a5:d1:fd:37:ba:ad:33:28:02:16:94:eb:18:dd:31:24:32:
e7:d6:de:3b:0d:05:ea:31:9d:d5:24:46:f5:cb:eb:7c:09:a2:
f2:c0:fc:ea:ff:52:75:0a:75:70:d5:c1:3c:46:26:27:1f:d0:
04:15:85:64:c1:b9:71:37:a3:f6:32:2f:be:08:84:36:43:d3:
c1:30:b8:3e:e3:99:be:71:6c:ad:cc:71:a3:2a:05:61:67:bf:
99:3c:22:55:83:15:a9:03:80:69:8a:ca:11:70:53:34:49:5c:
f0:fc:76:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:41 2024 by rpki-client on console-fra.rpki-client.org