Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/de3cV0osA-rFSeBDyEJ-LKh9gNY.roa
File: de3cV0osA-rFSeBDyEJ-LKh9gNY.roa (raw, json)
Hash identifier: M+A5rimvzyk/pIYX42/26Tn8XeuBsGHhdj4fiuJ0stM=
Subject key identifier: 75:ED:DC:57:4A:2C:03:EA:C5:49:E0:43:C8:42:7E:2C:A8:7D:80:D6
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018B1D48DA63F023982A0F6F212B0E7C46A5
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/de3cV0osA-rFSeBDyEJ-LKh9gNY.roa
Signing time: Wed 11 Oct 2023 05:49:55 +0000
ROA not before: Wed 11 Oct 2023 05:49:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 89.40.176.0/22 maxlen: 24
5.35.192.0/21 maxlen: 24
194.135.26.0/23 maxlen: 24
89.37.228.0/22 maxlen: 24
62.112.0.0/21 maxlen: 24
85.204.160.0/22 maxlen: 24
194.88.112.0/20 maxlen: 24
89.37.236.0/22 maxlen: 24
91.232.136.0/22 maxlen: 24
89.36.236.0/22 maxlen: 24
85.204.148.0/22 maxlen: 22
84.234.16.0/20 maxlen: 24
194.88.96.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1d:48:da:63:f0:23:98:2a:0f:6f:21:2b:0e:7c:46:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Oct 11 05:49:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75eddc574a2c03eac549e043c8427e2ca87d80d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:12:e1:49:49:f6:a1:08:c5:c4:2a:64:a1:
99:7b:05:bb:c2:7b:5d:97:28:42:7e:81:6e:c7:13:
6c:9c:d1:af:75:c9:ea:2b:29:05:15:ea:6c:fd:69:
d8:45:21:e6:2f:5f:76:70:01:c9:af:97:d8:f4:4a:
a9:1b:32:c7:bd:ce:f7:6e:57:04:c2:15:18:ab:8b:
98:cf:56:f7:8e:a3:4b:23:b1:72:85:ca:30:b8:fe:
10:a4:1e:f0:a6:8b:57:fd:8e:6a:fd:2f:b8:53:8b:
00:f8:16:04:ea:dc:fc:fe:60:3e:8a:91:2b:32:1a:
98:35:43:e0:a2:af:5a:4a:7f:b3:0d:87:d2:fc:e8:
99:dc:38:43:9b:9f:7b:e0:7c:e4:75:bc:00:55:c8:
b0:b2:9a:b5:c9:53:3a:65:67:9d:70:ad:d9:25:9c:
60:e1:01:cd:c2:04:c2:d9:9c:94:ad:6b:8b:5a:e6:
a9:dd:07:3a:d7:f4:36:2e:31:ba:ca:6b:5f:57:56:
65:6a:cd:0b:4a:c0:53:db:5e:f1:19:e9:45:23:83:
37:df:d0:d2:1e:c2:dd:d2:18:c3:4b:fb:84:7b:d8:
39:1d:ad:0a:a5:be:65:b3:d6:4f:de:70:06:ed:14:
12:16:91:e2:91:46:19:d4:d5:d7:e4:e8:16:ed:83:
6e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:ED:DC:57:4A:2C:03:EA:C5:49:E0:43:C8:42:7E:2C:A8:7D:80:D6
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/de3cV0osA-rFSeBDyEJ-LKh9gNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
62.112.0.0/21
84.234.16.0/20
85.204.148.0/22
85.204.160.0/22
89.36.236.0/22
89.37.228.0/22
89.37.236.0/22
89.40.176.0/22
91.232.136.0/22
194.88.96.0/21
194.88.112.0/20
194.135.26.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:b5:72:a0:71:09:27:eb:4e:ff:c3:52:24:9c:16:e7:58:76:
4b:09:5e:28:58:49:bc:83:a0:75:53:90:0e:3d:bc:7a:56:af:
8d:7a:c6:05:a2:8f:1f:cc:d4:28:50:e9:73:ae:a6:b5:c8:86:
f8:b1:a5:1b:7b:08:65:21:25:7d:e3:2e:52:73:41:60:68:f2:
1f:90:6f:7a:14:ac:ab:95:6c:9f:bb:65:e0:0a:89:d2:75:a6:
14:c4:7a:c5:e2:71:10:68:e3:98:34:3c:27:75:2e:6c:c2:ee:
9f:4a:35:ef:2f:59:23:13:40:9f:9e:f4:e5:2e:01:8e:35:2a:
d7:63:a0:4e:f9:95:a8:da:e3:43:37:e5:52:de:fa:9d:ca:58:
14:71:18:6a:96:6c:fc:25:d0:d0:9d:ac:69:26:97:d8:ef:4d:
3e:d3:2e:65:dd:92:0f:19:f2:6a:bc:36:be:55:dd:3e:7d:da:
34:a5:11:45:f8:35:f6:0e:04:92:b6:e0:83:7b:83:76:41:35:
e2:6d:3c:b5:72:75:fd:32:04:c1:f9:93:6a:1f:ea:02:e8:2c:
63:d6:14:65:e5:c0:23:7c:46:ba:cf:9b:14:01:73:5c:57:58:
4d:df:6d:93:cc:0b:57:2e:9a:75:13:76:c2:68:da:fb:3e:53:
18:4d:60:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 03:11:34 2023 by rpki-client on console-fra.rpki-client.org