Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/DAZkPnQ6KNEvMZYj5Qy2rDdldOw.roa
File: DAZkPnQ6KNEvMZYj5Qy2rDdldOw.roa (raw, json)
Hash identifier: 3qmpejKXrChtokmsV1a7pM3TnOybqWRHkT+mReNuRqo=
Subject key identifier: 0C:06:64:3E:74:3A:28:D1:2F:31:96:23:E5:0C:B6:AC:37:65:74:EC
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01896499DC79217121DC9F632D2CD3A64384
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/DAZkPnQ6KNEvMZYj5Qy2rDdldOw.roa
Signing time: Mon 17 Jul 2023 16:05:52 +0000
ROA not before: Mon 17 Jul 2023 16:05:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 194.156.0.0/24 maxlen: 24
193.8.171.0/24 maxlen: 24
91.188.231.0/24 maxlen: 24
91.188.228.0/24 maxlen: 24
91.188.229.0/24 maxlen: 24
91.188.230.0/24 maxlen: 24
91.220.229.0/24 maxlen: 24
194.156.27.0/24 maxlen: 24
45.143.142.0/24 maxlen: 24
45.92.172.0/24 maxlen: 24
91.213.35.0/24 maxlen: 24
45.135.177.0/24 maxlen: 24
91.220.206.0/24 maxlen: 24
213.226.102.0/24 maxlen: 24
213.226.103.0/24 maxlen: 24
45.142.74.0/24 maxlen: 24
45.142.75.0/24 maxlen: 24
45.142.72.0/24 maxlen: 24
45.142.73.0/24 maxlen: 24
87.247.141.0/24 maxlen: 24
45.138.144.0/24 maxlen: 24
45.138.147.0/24 maxlen: 24
45.147.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:99:dc:79:21:71:21:dc:9f:63:2d:2c:d3:a6:43:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jul 17 16:05:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c06643e743a28d12f319623e50cb6ac376574ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:02:c5:46:e9:71:d9:96:67:da:d5:59:d1:55:
18:d5:fe:f0:c9:ff:2e:e6:be:3c:00:0c:55:6f:11:
39:ed:1f:8d:bd:9c:71:c8:84:6b:91:da:ca:f6:98:
51:b4:53:19:15:4e:8b:5a:6b:20:63:ae:aa:b8:71:
e7:34:37:f7:62:47:6a:79:37:9a:d8:2e:61:bc:2f:
45:5a:b1:39:02:62:96:d9:ad:12:b9:95:b3:d1:72:
5d:fc:17:c3:5b:cd:10:c6:ee:a8:bf:49:33:2d:1b:
ef:26:43:87:53:da:de:e4:a1:87:22:43:c3:2e:b4:
d4:88:d6:7c:45:c4:94:84:d9:7a:2e:54:2d:9f:13:
e5:b7:18:cf:83:3d:7d:a7:11:24:ce:7d:1a:df:61:
ce:bb:ec:6c:26:be:36:4b:ab:f3:71:f2:b4:a4:d0:
30:7e:9f:85:eb:99:80:49:2f:ee:a5:d1:5b:83:bc:
24:7e:cc:f7:d0:68:30:e6:5f:f9:4c:fb:07:12:b1:
9c:7e:14:16:f0:db:56:bc:4d:85:58:49:e6:06:5c:
b9:b7:c8:77:c4:68:90:ef:63:31:90:57:25:d1:b2:
af:59:b9:68:c5:9a:dd:85:a5:78:ad:c1:85:a9:5c:
02:cc:f2:37:8c:30:1c:50:89:b9:32:6a:88:9a:87:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:06:64:3E:74:3A:28:D1:2F:31:96:23:E5:0C:B6:AC:37:65:74:EC
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/DAZkPnQ6KNEvMZYj5Qy2rDdldOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.172.0/24
45.135.177.0/24
45.138.144.0/24
45.138.147.0/24
45.142.72.0/22
45.143.142.0/24
45.147.252.0/24
87.247.141.0/24
91.188.228.0/22
91.213.35.0/24
91.220.206.0/24
91.220.229.0/24
193.8.171.0/24
194.156.0.0/24
194.156.27.0/24
213.226.102.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:9a:bc:68:2c:d4:e1:ba:86:2e:9d:11:02:b9:1c:9f:98:a3:
af:17:27:57:ce:48:08:bc:7c:40:1d:7c:64:b5:b6:63:0c:c7:
80:e6:17:21:67:4b:ae:ab:40:2e:7b:1f:8b:9e:f9:1c:5e:37:
03:78:42:af:ee:a9:32:a1:61:26:47:6d:bc:c2:b2:93:31:0e:
ad:0c:50:ba:cd:8b:4d:6b:2d:7e:d0:7d:8d:41:82:66:ed:ba:
60:62:c9:46:c5:ac:c4:5e:fa:43:81:06:11:65:d3:1b:f1:32:
a0:29:58:7a:5c:76:35:e1:9f:83:d4:4c:67:e9:e6:16:8d:d0:
36:50:72:f4:26:07:c2:34:2d:53:25:64:61:2f:53:1f:16:17:
bf:18:e0:67:98:ff:f4:2e:ac:4e:9f:f4:1d:5d:81:8c:83:53:
a3:34:b7:98:8d:05:74:0c:19:cc:d6:7a:31:61:17:74:c4:fe:
32:fa:f3:7d:e5:76:bd:8e:7d:e3:b7:8c:92:49:eb:e2:51:4b:
22:9a:08:eb:03:a8:58:40:98:82:fd:7e:d0:e3:02:01:2a:c4:
c0:9c:d9:56:8e:dc:8b:8a:54:8d:ee:ca:3e:f6:49:44:dc:cd:
7f:c3:b2:3b:60:9e:5a:80:29:8e:6b:e1:a8:66:ba:7c:22:e0:
1e:72:51:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:10 2023 by rpki-client on console-fra.rpki-client.org