Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/_UTh-6mg-J-5CG2BUGUFjSCXbKs.roa
File: _UTh-6mg-J-5CG2BUGUFjSCXbKs.roa (raw, json)
Hash identifier: 8BdexN8tYPatp61KCK6PAQlT3IexNhuyjDcaKbgCsJs=
Subject key identifier: FD:44:E1:FB:A9:A0:F8:9F:B9:08:6D:81:50:65:05:8D:20:97:6C:AB
Certificate issuer: /CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
Certificate serial: 0188E82A654253B40B70FB00639E4A9F0F8B
Authority key identifier: 79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/_UTh-6mg-J-5CG2BUGUFjSCXbKs.roa
Signing time: Fri 23 Jun 2023 12:11:12 +0000
ROA not before: Fri 23 Jun 2023 12:11:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13030
IP address blocks: 185.157.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e8:2a:65:42:53:b4:0b:70:fb:00:63:9e:4a:9f:0f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
Validity
Not Before: Jun 23 12:11:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd44e1fba9a0f89fb9086d815065058d20976cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:58:d5:3a:db:95:f3:bc:dd:c1:7d:c4:cd:65:
c5:83:d9:67:76:eb:d8:90:a9:7c:82:e4:cc:8d:04:
b7:1d:78:9b:84:e7:11:ad:a0:fc:1f:5c:50:b6:bb:
2d:4b:7f:64:82:ac:45:74:05:f8:7f:a4:c1:54:23:
99:25:98:2b:b7:3a:67:cb:ac:2d:3b:89:27:3f:da:
b7:57:bc:6f:cd:67:82:2e:09:ae:aa:3a:18:42:ab:
cc:d7:37:81:67:d7:89:75:32:c0:1b:fa:55:52:0c:
12:16:a1:10:59:97:74:dc:eb:d5:6d:50:b2:e2:56:
26:4a:f4:fd:36:3c:8f:0c:7b:31:a5:ae:f1:1a:b3:
eb:a4:a8:29:67:af:5f:1a:80:c7:ad:cc:b5:1b:96:
72:f7:a4:77:67:5c:e0:b4:78:6d:d8:72:a0:7c:ce:
71:25:f6:b8:9e:10:0c:76:2b:d5:0a:e0:ce:ac:13:
cb:cc:00:1e:27:d0:0d:ff:ae:97:2e:1a:c0:06:98:
99:75:6a:4f:51:59:13:d9:bd:7d:80:74:ef:ce:dc:
59:c5:89:12:b1:b5:bc:e8:b6:50:86:1d:ad:e9:fc:
9c:80:09:16:89:95:1c:9d:a6:4b:dd:02:2e:09:48:
31:d5:af:e5:da:9c:23:c4:58:32:2f:b8:ad:80:38:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:44:E1:FB:A9:A0:F8:9F:B9:08:6D:81:50:65:05:8D:20:97:6C:AB
X509v3 Authority Key Identifier:
keyid:79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/_UTh-6mg-J-5CG2BUGUFjSCXbKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.3.0/24
Signature Algorithm: sha256WithRSAEncryption
02:c9:c7:0b:80:37:d1:5c:6f:10:78:ab:b3:10:2c:bb:5d:8c:
2d:0e:d2:d1:9d:3b:0c:b2:ec:81:bb:e9:c8:7f:90:24:e2:04:
d0:9e:32:88:31:15:49:d2:31:27:87:b8:a8:8b:64:11:f1:7c:
21:5e:67:56:27:5c:8e:6f:51:cc:1a:6c:4e:43:78:35:63:5e:
bb:cf:4e:1c:9a:e4:f6:59:fb:5f:5c:f0:b6:b7:27:cb:b8:11:
75:b3:99:20:16:68:2b:79:58:b2:df:a0:69:ef:5f:e8:8f:c5:
fd:ac:d3:52:3b:a7:41:4c:9a:55:6f:2c:90:55:c4:3f:32:26:
30:3d:8d:8b:f9:08:3c:c9:ed:73:4f:14:31:b6:95:e3:e7:5a:
6c:6b:1b:b9:3e:a4:88:35:9e:6f:cd:62:7b:1c:87:bc:78:2c:
b9:16:77:b2:42:ba:3c:f0:0b:fb:38:a5:75:ce:6a:75:58:f8:
57:37:39:5a:af:d5:87:a4:30:ba:6a:51:32:80:01:b8:f5:c0:
6c:ed:15:02:9d:29:88:aa:ab:ca:2b:df:e2:b3:77:6e:6d:48:
a9:ff:3e:66:e5:84:8c:b5:7d:d1:f1:5f:df:4e:ea:39:10:10:
34:bb:05:a1:34:2c:f6:b7:58:74:cb:2b:7c:9c:76:4a:8e:3c:
60:1e:77:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:05 2024 by rpki-client on console-fra.rpki-client.org