Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/1_EDwdXmGuhj99QkaYNgp0Dslnw.roa
File: 1_EDwdXmGuhj99QkaYNgp0Dslnw.roa (raw, json)
Hash identifier: QDVxtO8WQxevdOILEgBIu8vq7H+xIpNiH8MSEsnhs1w=
Subject key identifier: D7:F1:03:C1:D5:E6:1A:E8:63:F7:D4:24:69:83:60:A7:40:EC:96:7C
Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial: 01876FAF3F3C902393E0E740D518439E2BDF
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/1_EDwdXmGuhj99QkaYNgp0Dslnw.roa
Signing time: Tue 11 Apr 2023 09:39:28 +0000
ROA not before: Tue 11 Apr 2023 09:39:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39386
IP address blocks: 84.235.56.0/23 maxlen: 23
37.224.192.0/24 maxlen: 24
84.235.0.0/24 maxlen: 24
84.235.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:af:3f:3c:90:23:93:e0:e7:40:d5:18:43:9e:2b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Validity
Not Before: Apr 11 09:39:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7f103c1d5e61ae863f7d424698360a740ec967c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:5e:86:62:87:3f:01:52:95:1f:3c:ab:5c:
3d:56:58:13:6a:64:14:0a:26:93:b4:cd:25:3e:13:
ad:4a:dc:8d:dc:83:80:f3:ab:f5:ee:2c:63:33:d0:
c6:e0:b9:68:56:7d:b6:6b:4f:a0:a6:81:ad:7e:fd:
c1:18:b1:04:b4:cb:6d:e1:c5:29:bb:56:42:21:65:
0a:98:d5:87:2f:2a:ba:4a:d5:12:c7:e8:63:0e:b5:
9c:53:8e:ce:d9:74:dc:67:a8:22:7f:89:34:5a:61:
ed:4c:68:67:32:c2:03:c2:51:cc:28:3d:3b:cb:93:
28:4f:94:54:7d:90:f9:85:ef:53:89:8b:47:40:21:
93:34:59:2a:ed:af:eb:6b:ae:ae:7a:88:46:77:20:
c6:a2:c4:5c:1c:f4:6d:e1:72:b1:fb:cf:4a:25:2a:
6b:5c:a6:7a:2c:4b:9b:78:3a:7a:3f:e7:02:50:95:
80:e7:2a:95:ec:b2:8a:57:5c:a7:81:67:65:35:b3:
cc:75:a9:3d:b6:ff:48:80:77:02:0f:60:c9:86:5c:
f1:85:9c:b4:a8:e5:14:9c:c2:2e:25:64:ff:8c:a8:
ca:c7:7f:24:10:20:d7:02:53:4e:17:8e:2e:6a:0c:
1a:6c:90:45:da:72:0a:73:2b:19:01:6e:f7:e7:f7:
e0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F1:03:C1:D5:E6:1A:E8:63:F7:D4:24:69:83:60:A7:40:EC:96:7C
X509v3 Authority Key Identifier:
keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/1_EDwdXmGuhj99QkaYNgp0Dslnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.224.192.0/24
84.235.0.0/24
84.235.14.0/24
84.235.56.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:cc:b3:33:e8:64:97:35:62:50:33:5f:f9:35:9a:a5:f0:41:
3c:09:93:01:ae:03:8f:4a:6d:9f:f7:f9:16:92:49:13:00:20:
f1:17:0b:f3:9c:d8:de:3d:37:8e:f4:14:41:3d:f1:d8:04:dc:
ff:ab:fe:ba:c5:6e:de:ff:83:c3:8f:1c:f2:7c:81:5a:79:49:
25:2f:7b:9e:00:21:cb:fc:63:a0:12:cc:1a:d0:50:9b:5e:6d:
39:b9:6d:b3:69:4b:14:e0:03:c6:6d:ff:bb:3d:fa:8a:19:0f:
c4:94:ad:bd:20:4c:ae:c4:85:50:40:a8:af:57:38:4d:4f:69:
18:cd:fe:2e:df:47:58:d3:b8:73:ab:3d:89:3b:38:a5:9a:ea:
b9:ec:36:4c:8e:c1:6b:b8:fc:22:51:76:04:11:7b:0a:ce:9a:
aa:6a:ed:2a:04:42:a0:c3:6a:fc:c4:4b:f2:0a:bc:28:28:73:
27:cf:1f:d6:61:24:00:05:51:7d:e2:dc:a6:c2:6a:84:0d:0a:
68:02:40:55:dc:ed:07:fd:5d:86:cf:f9:c5:0e:ae:fa:ba:07:
78:5f:d1:5c:72:7b:24:76:7c:ba:6c:09:41:41:72:74:56:ef:
35:e6:ba:74:a2:ef:62:30:8a:85:a0:7e:9d:70:06:b1:02:ad:
22:32:85:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:18 2023 by rpki-client on console-fra.rpki-client.org