Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/39_dlHs6YdxVLuOe2vnk2K7GTso.roa
File: 39_dlHs6YdxVLuOe2vnk2K7GTso.roa (raw, json)
Hash identifier: yImM0hwnUrawZta9HwW64nEAK1buGuFcYypwjvGnOqU=
Subject key identifier: DF:DF:DD:94:7B:3A:61:DC:55:2E:E3:9E:DA:F9:E4:D8:AE:C6:4E:CA
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 018CC7274F29A70D129088BD04BAD060EE58
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/39_dlHs6YdxVLuOe2vnk2K7GTso.roa
Signing time: Mon 01 Jan 2024 22:31:31 +0000
ROA not before: Mon 01 Jan 2024 22:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201396
IP address blocks: 185.75.148.0/24 maxlen: 24
188.74.44.0/22 maxlen: 24
2a03:4b21::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 31 Jan 2024 03:38:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:4f:29:a7:0d:12:90:88:bd:04:ba:d0:60:ee:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Jan 1 22:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfdfdd947b3a61dc552ee39edaf9e4d8aec64eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:f3:33:cb:e8:d1:34:39:c3:64:13:49:53:
57:67:5d:09:f1:57:a3:0c:21:d2:0d:c3:83:9a:66:
80:ef:09:86:e5:85:a1:35:93:49:f8:5a:da:39:9e:
1e:62:b0:e9:5e:bc:af:5e:b5:6e:e2:a4:4e:4c:13:
9b:56:dc:17:f2:06:45:fb:35:d8:06:ec:a2:99:13:
e9:33:b9:79:db:0f:21:e2:57:9c:36:65:e1:69:ce:
7a:bf:7a:e5:9b:5e:82:20:59:05:f4:c3:98:d9:b1:
7b:29:01:6a:6e:b7:3f:1a:b6:a2:8b:f0:36:92:a6:
29:8f:c7:28:08:19:a8:aa:47:48:97:7f:e2:53:cc:
1c:68:f5:8f:46:74:87:fb:33:bc:42:8c:b7:aa:42:
9a:1a:a5:30:fe:1d:b3:2e:ff:9b:03:9b:36:25:98:
1c:b5:09:62:4a:d3:31:08:62:2b:38:2d:ff:6b:ad:
e2:33:30:46:96:24:b5:7c:3c:be:30:ea:9b:da:c0:
21:8d:dc:f2:47:ff:25:59:58:43:61:e6:d1:7d:53:
a9:2b:7c:ba:d0:55:42:ac:08:9b:35:d3:98:63:d8:
5c:08:e8:83:b8:9a:e5:8a:06:66:ef:10:f1:36:73:
72:6f:34:1a:13:f2:4f:e4:bc:5d:7a:ae:92:b9:4c:
74:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DF:DD:94:7B:3A:61:DC:55:2E:E3:9E:DA:F9:E4:D8:AE:C6:4E:CA
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/39_dlHs6YdxVLuOe2vnk2K7GTso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.148.0/24
188.74.44.0/22
IPv6:
2a03:4b21::/32
Signature Algorithm: sha256WithRSAEncryption
23:28:e5:68:e2:10:43:7b:e9:b5:22:c3:59:7d:00:73:bb:fc:
82:55:78:07:2e:ac:24:16:ac:2c:8b:a6:e7:ea:25:ae:96:33:
0c:33:6f:e3:ea:e3:26:bb:43:e0:89:20:eb:51:f8:08:c5:5e:
5b:93:d4:8e:06:62:ea:13:08:61:69:ae:07:3a:2b:fa:60:93:
66:d2:98:cd:22:b5:03:f5:fb:8f:27:12:41:fb:21:3a:f7:bf:
de:11:81:25:e6:97:46:b3:14:7b:15:29:75:0d:2a:09:68:82:
6c:09:8c:04:0d:6c:30:4a:f9:e0:83:cb:69:0e:a0:b2:f2:c7:
10:78:32:94:4c:b4:8e:e4:f6:14:a5:f0:63:0e:e7:b6:a6:a8:
85:b5:9a:88:f9:4b:5c:42:0b:13:86:3e:b0:04:9d:d7:d0:b4:
97:cb:ef:3b:e8:7e:a9:d3:90:2d:b2:ba:82:03:06:d5:7b:be:
15:92:57:e9:5d:8c:a5:e7:56:34:e8:a6:2e:87:b2:e1:4c:49:
32:27:0b:0c:aa:9b:8e:79:9c:ac:88:20:2d:67:77:8f:24:12:
7e:d0:0c:60:9c:ac:24:95:a3:53:84:e7:de:38:e5:83:25:d6:
09:d7:f0:0d:60:ca:55:80:30:80:59:b0:1a:1a:15:d8:51:4a:
f9:ab:a6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:27 2024 by rpki-client on console-ams.rpki-client.org