Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/dPWpgRnoOqmC__n_l31REqsuAzk.roa
File: dPWpgRnoOqmC__n_l31REqsuAzk.roa (raw, json)
Hash identifier: Uh7K3kEi4d2Se8IP2FPQXoq5upprFX2psMoIbLvwvZs=
Subject key identifier: 74:F5:A9:81:19:E8:3A:A9:82:FF:F9:FF:97:7D:51:12:AB:2E:03:39
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 0187B92BB227BB80A2C13F6FFEC646A56A23
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/dPWpgRnoOqmC__n_l31REqsuAzk.roa
Signing time: Tue 25 Apr 2023 16:07:41 +0000
ROA not before: Tue 25 Apr 2023 16:07:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8560
IP address blocks: 46.16.72.0/21 maxlen: 24
217.72.192.0/20 maxlen: 24
217.160.0.0/16 maxlen: 24
78.137.96.0/21 maxlen: 24
213.165.64.0/19 maxlen: 24
195.20.224.0/19 maxlen: 24
87.106.0.0/16 maxlen: 24
81.173.112.0/22 maxlen: 24
82.165.0.0/16 maxlen: 24
185.48.116.0/22 maxlen: 24
194.126.206.0/24 maxlen: 24
212.227.0.0/16 maxlen: 24
213.244.192.0/24 maxlen: 24
157.97.104.0/21 maxlen: 24
157.97.105.0/24 maxlen: 32
157.97.104.0/24 maxlen: 32
85.184.248.0/22 maxlen: 24
217.160.150.0/23 maxlen: 32
2001:8d8::/32 maxlen: 48
2a02:2478::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Nov 2023 11:45:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b9:2b:b2:27:bb:80:a2:c1:3f:6f:fe:c6:46:a5:6a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Apr 25 16:07:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74f5a98119e83aa982fff9ff977d5112ab2e0339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:49:2c:57:3c:42:41:b8:30:5d:ca:b3:78:25:
52:7b:60:f6:ff:ca:1f:49:48:80:67:66:59:2a:6d:
e4:88:dd:b0:27:fc:a6:60:90:14:07:47:f3:52:8a:
67:d8:2e:35:22:cf:e5:fb:9d:79:6a:3b:03:54:74:
d0:ad:58:5d:79:47:dc:39:51:e3:53:28:61:cb:af:
7e:91:15:a9:36:e0:ac:56:ce:2b:5e:92:74:db:65:
34:74:57:c5:31:09:a3:24:fc:72:7c:12:12:2e:6c:
55:c7:0c:6b:6b:97:16:11:f9:4e:91:0f:2f:9a:62:
d1:23:b2:04:d6:7d:7b:d3:ef:97:10:11:e1:7d:52:
87:f1:da:07:76:cc:d6:4e:9f:02:55:6c:2e:0c:57:
aa:91:17:30:97:a6:7a:e0:30:ba:ba:25:f6:5d:00:
40:14:3b:7a:dd:4a:e1:31:21:d1:c2:34:33:30:e6:
01:57:b7:c2:1b:2e:30:2e:1f:b9:8b:45:01:5c:90:
a5:cb:fd:8a:45:86:82:ae:9f:2d:f2:0d:66:32:e3:
20:f9:4f:83:d2:60:ca:06:b0:14:b7:2b:01:fe:67:
d4:58:23:94:f2:f1:77:aa:9a:89:ec:32:a0:24:7d:
c8:24:a7:72:b3:32:76:a9:dc:e7:c3:50:75:91:f1:
b1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F5:A9:81:19:E8:3A:A9:82:FF:F9:FF:97:7D:51:12:AB:2E:03:39
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/dPWpgRnoOqmC__n_l31REqsuAzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.72.0/21
78.137.96.0/21
81.173.112.0/22
82.165.0.0/16
85.184.248.0/22
87.106.0.0/16
157.97.104.0/21
185.48.116.0/22
194.126.206.0/24
195.20.224.0/19
212.227.0.0/16
213.165.64.0/19
213.244.192.0/24
217.72.192.0/20
217.160.0.0/16
IPv6:
2001:8d8::/32
2a02:2478::/29
Signature Algorithm: sha256WithRSAEncryption
c2:90:90:28:5d:33:58:91:c9:55:19:ca:27:8c:da:b3:21:a2:
0e:c7:fd:41:bc:dd:31:10:68:80:1b:6f:09:1a:4f:f1:7a:09:
79:55:55:f8:34:7e:60:50:50:61:16:30:ef:f6:a4:bb:c0:3a:
1f:1c:88:f3:11:c9:7c:0a:99:86:14:70:94:de:d1:25:c3:7e:
17:2b:63:a6:01:2b:60:2c:2c:35:31:93:6d:cf:7e:16:5f:37:
4c:b5:b6:9b:c3:3f:d0:67:33:6c:4b:a5:26:19:62:13:cd:92:
ac:95:e6:9c:45:e2:36:ab:ca:7b:cc:75:c2:dd:5a:88:b5:7e:
d7:63:1f:b5:29:0d:34:f8:d9:6d:aa:e2:40:d2:4b:10:a4:e5:
9b:ad:24:65:ff:b7:a9:31:63:a7:98:7d:27:f9:65:70:e1:f8:
5b:73:28:53:6f:64:15:26:16:6a:e4:d6:61:14:11:3e:72:d5:
67:c3:41:00:e9:2b:80:1d:b1:0d:63:0d:29:37:79:e9:07:f3:
e2:ad:92:9e:82:1f:d9:b0:fd:2a:81:85:7a:80:a5:a4:2f:2a:
ab:7d:33:59:ed:bc:ae:a2:3c:33:69:e5:f7:80:17:17:71:b6:
53:87:6c:f5:b2:6b:3c:71:80:23:34:75:3b:c0:65:7a:95:dd:
31:5e:ec:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:21 2024 by rpki-client on console-fra.rpki-client.org