Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/3Gcme9NX5SV_aTPxv2lxV1XHFm4.roa
File: 3Gcme9NX5SV_aTPxv2lxV1XHFm4.roa (raw, json)
Hash identifier: g5JDG6Ya+00J7T1yvpt/kgROmO6p8y6UkMHq0i22qjA=
Subject key identifier: DC:67:26:7B:D3:57:E5:25:7F:69:33:F1:BF:69:71:57:55:C7:16:6E
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 018CC4935719D469A05B36D026644DFAC3D5
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/3Gcme9NX5SV_aTPxv2lxV1XHFm4.roa
Signing time: Mon 01 Jan 2024 10:30:39 +0000
ROA not before: Mon 01 Jan 2024 10:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54339
IP address blocks: 185.36.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 07:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:57:19:d4:69:a0:5b:36:d0:26:64:4d:fa:c3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Jan 1 10:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc67267bd357e5257f6933f1bf69715755c7166e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6b:99:fc:67:29:a5:cf:73:f8:04:6e:1d:d7:
c1:80:29:1f:03:ca:7d:ce:e7:b6:91:3c:99:76:a3:
32:a3:ab:7f:77:06:be:10:f0:83:e7:49:aa:b2:43:
02:34:cd:c3:c0:59:95:52:79:46:80:0a:71:6f:d0:
97:88:06:bb:46:df:56:f4:16:29:9b:f7:ca:6f:d5:
30:92:29:c7:5c:22:b4:fb:da:5b:d9:33:c3:6e:b4:
a8:b0:25:83:df:8c:25:13:a2:f8:15:95:da:7a:8c:
27:ed:8e:9a:38:85:b8:b4:6f:2f:43:65:b8:5c:03:
4c:16:5c:0e:de:fa:09:99:ee:37:d5:40:81:67:97:
ac:bc:1d:fa:30:dc:b9:fe:5a:64:aa:6e:04:4d:ce:
3b:6d:37:6d:1e:b5:46:7b:55:65:77:01:b5:ba:d6:
63:00:9d:a7:68:98:2d:17:76:39:e9:82:27:a9:19:
fa:4c:e7:08:be:6f:4f:74:3c:69:71:1f:3c:ba:a1:
22:90:03:36:76:fe:b8:f1:3e:3d:5a:64:34:9f:78:
65:c5:b3:b4:be:82:d5:c1:7b:79:bc:60:cd:38:d2:
d3:6e:e6:a7:42:af:13:2e:6b:e5:0b:f9:5f:2e:ff:
4d:02:86:10:dd:39:da:d1:4e:29:af:45:9e:c6:dc:
10:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:67:26:7B:D3:57:E5:25:7F:69:33:F1:BF:69:71:57:55:C7:16:6E
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/3Gcme9NX5SV_aTPxv2lxV1XHFm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.126.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ca:94:a8:fb:94:25:1c:52:9b:84:48:38:f4:3d:ef:26:ed:
0d:28:6d:f8:f5:fb:68:70:0d:87:3d:96:ed:6e:83:83:15:d7:
fc:e5:ba:7c:df:49:e4:34:17:50:d2:62:ae:e8:ad:40:f6:0a:
98:be:25:10:94:a9:67:f5:0f:6b:f6:85:a7:3b:b4:88:c4:0b:
85:d8:b6:04:18:b6:cb:a4:d5:d2:da:84:dd:ca:07:ad:8a:7f:
a7:2f:b3:d1:da:cb:94:d0:7d:d4:ff:ef:45:2e:67:74:75:90:
d7:dd:c4:40:8b:1d:f2:14:db:cf:11:ed:00:56:c7:6b:c5:2e:
6e:e5:30:63:aa:79:8a:10:54:5d:c3:fb:f8:c5:2d:0a:45:bf:
d7:e1:0c:8e:cd:d1:d8:49:aa:b1:78:b9:00:f8:fd:22:60:a5:
46:4c:a9:53:d9:ac:eb:b2:9b:b7:d4:e9:34:cf:3a:79:17:27:
4c:39:ff:33:62:73:89:50:c7:58:31:83:b5:e1:56:38:ce:dc:
57:4d:a2:54:ff:5e:6e:a7:27:dc:dc:ab:2b:aa:c9:75:d7:0e:
70:a8:7d:25:4b:46:05:ef:db:5e:6b:80:74:7c:32:b3:a9:db:
5f:b8:d7:28:80:43:5c:af:c0:ec:ec:3f:2b:22:8e:13:ff:c3:
b4:fd:a4:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk1cZ1GmgWzbQJmRN+sPVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx
MjMwN2IwHhcNMjQwMTAxMTAzMDM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzY3MjY3YmQzNTdlNTI1N2Y2OTMzZjFiZjY5NzE1NzU1YzcxNjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2uZ/Gcppc9z+ARuHdfBgCkfA8p9
zue2kTyZdqMyo6t/dwa+EPCD50mqskMCNM3DwFmVUnlGgApxb9CXiAa7Rt9W9BYp
m/fKb9UwkinHXCK0+9pb2TPDbrSosCWD34wlE6L4FZXaeown7Y6aOIW4tG8vQ2W4
XANMFlwO3voJme431UCBZ5esvB36MNy5/lpkqm4ETc47bTdtHrVGe1VldwG1utZj
AJ2naJgtF3Y56YInqRn6TOcIvm9PdDxpcR88uqEikAM2dv648T49WmQ0n3hlxbO0
voLVwXt5vGDNONLTbuanQq8TLmvlC/lfLv9NAoYQ3Tna0U4pr0WextwQEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNxnJnvTV+Ulf2kz8b9pcVdVxxZuMB8GA1UdIwQY
MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt
NWI4NzgyNWMwN2VlLzEvM0djbWU5Tlg1U1ZfYVRQeHYybHhWMVhIRm00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl
LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSR+MA0G
CSqGSIb3DQEBCwUAA4IBAQBJypSo+5QlHFKbhEg49D3vJu0NKG349ftocA2HPZbt
boODFdf85bp830nkNBdQ0mKu6K1A9gqYviUQlKln9Q9r9oWnO7SIxAuF2LYEGLbL
pNXS2oTdygetin+nL7PR2suU0H3U/+9FLmd0dZDX3cRAix3yFNvPEe0AVsdrxS5u
5TBjqnmKEFRdw/v4xS0KRb/X4QyOzdHYSaqxeLkA+P0iYKVGTKlT2azrspu31Ok0
zzp5FydMOf8zYnOJUMdYMYO14VY4ztxXTaJU/15upyfc3Ksrqsl11w5wqH0lS0YF
79tea4B0fDKzqdtfuNcogENcr8Ds7D8rIo4T/8O0/aS7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:11 2024 by rpki-client on console-fra.rpki-client.org