Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/DoGL6MANH5dS3vOmV3_3loRa4o0.roa
File: DoGL6MANH5dS3vOmV3_3loRa4o0.roa (raw, json)
Hash identifier: bpOo5KC0YiVY98aT9g8FflXvAuPmC5/SIbURhaxmwSc=
Subject key identifier: 0E:81:8B:E8:C0:0D:1F:97:52:DE:F3:A6:57:7F:F7:96:84:5A:E2:8D
Certificate issuer: /CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Certificate serial: 01857139A9CA3AD751A200AFAF637E7B9991
Authority key identifier: 53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/DoGL6MANH5dS3vOmV3_3loRa4o0.roa
Signing time: Mon 02 Jan 2023 06:44:42 +0000
ROA not before: Mon 02 Jan 2023 06:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205842
IP address blocks: 185.239.190.0/23 maxlen: 23
185.239.188.0/23 maxlen: 23
185.202.72.0/23 maxlen: 23
185.202.74.0/23 maxlen: 23
2a0a:d2c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:a9:ca:3a:d7:51:a2:00:af:af:63:7e:7b:99:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Validity
Not Before: Jan 2 06:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e818be8c00d1f9752def3a6577ff796845ae28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:88:23:a1:c7:d2:53:e6:88:d1:18:71:fe:d2:
5e:5a:89:1e:34:21:98:19:87:74:7f:b9:88:41:66:
cb:a9:ea:6c:94:dc:e6:19:2e:b1:d4:53:b4:c3:40:
ad:b7:e8:a3:ee:df:6e:c4:1f:65:d7:33:66:4b:a8:
7c:1d:95:29:46:da:c2:92:30:6b:d5:68:08:e6:0c:
67:ff:2f:39:8c:8a:f2:13:9d:a9:c7:dc:56:4d:77:
47:b2:b5:61:5f:86:a6:eb:3f:94:6c:25:7c:be:2d:
fe:db:66:6c:13:a9:84:d9:73:ab:ff:d3:0d:65:82:
c9:aa:ab:5a:2b:1f:96:b3:1d:d5:26:ca:6d:0e:3b:
db:b4:11:ee:07:8f:06:8d:5c:64:b6:1a:f1:b5:7f:
80:2c:77:d4:83:d8:27:a5:de:dc:ee:30:ed:43:71:
28:64:e5:f3:1a:97:be:61:be:48:23:c7:f1:57:92:
9c:f2:e2:3d:74:7c:bf:ea:76:4f:91:b4:ff:30:9f:
48:0d:40:44:4f:74:ed:1c:b9:e3:f4:12:a3:a2:0f:
a2:b7:73:e0:5e:50:b0:c2:9d:17:a1:bd:d0:b7:ad:
c2:1b:46:f2:d6:7c:2d:c7:b8:c5:e0:26:bd:75:54:
e7:80:d7:ad:b0:55:8d:93:e5:df:1a:c1:00:b9:38:
d6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:81:8B:E8:C0:0D:1F:97:52:DE:F3:A6:57:7F:F7:96:84:5A:E2:8D
X509v3 Authority Key Identifier:
keyid:53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/DoGL6MANH5dS3vOmV3_3loRa4o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.72.0/22
185.239.188.0/22
IPv6:
2a0a:d2c0::/29
Signature Algorithm: sha256WithRSAEncryption
49:b1:03:f5:da:7b:77:66:b1:12:4e:b9:a9:25:59:d1:56:51:
04:68:c0:29:56:b9:ce:05:c7:be:05:4e:4d:41:5d:e1:8b:6f:
ed:56:ed:87:79:b7:e9:9b:fb:96:c6:ff:f4:e2:1d:e6:94:9f:
89:61:e0:14:92:d7:38:3c:ce:2c:af:f0:89:3a:a9:c0:9a:ab:
90:83:3d:f4:16:0c:7a:78:74:74:2a:91:04:46:8e:5b:8d:e6:
51:ba:94:61:4e:cd:e1:d9:83:10:ec:f4:ec:23:4a:ad:d1:93:
4f:d9:a2:2c:f5:d9:2f:da:6b:e4:8d:27:6d:9a:ff:cf:26:42:
b5:da:6a:be:30:51:3a:21:d9:15:0f:cd:ba:57:72:d9:5e:1f:
88:d5:91:ee:d8:13:ac:e3:b1:3e:ae:d0:88:31:27:38:3e:90:
22:c3:be:db:83:7b:b9:33:5a:d5:ae:54:68:9a:8d:39:f3:f1:
7f:d3:4e:3f:17:8d:fb:03:77:95:bb:35:c9:47:66:b1:d9:33:
d0:ba:c4:9e:eb:83:19:56:96:7b:f6:53:4f:85:d8:24:5a:ad:
d8:3e:ef:31:08:5e:80:ee:6e:9e:e4:3e:1c:07:6e:83:d1:c7:
8e:44:47:0f:27:93:9d:a0:f8:f2:7d:2c:64:6b:09:7c:3c:79:
eb:97:b5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 15 15:04:33 2023 by rpki-client on console-fra.rpki-client.org