Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/0w3IwvxUtWEVRYm692kL3tIVjTE.roa
File: 0w3IwvxUtWEVRYm692kL3tIVjTE.roa (raw, json)
Hash identifier: /2kVqHalGRGvFcRyVdvUnmgRavu2Xd8wCbKOqfyssBg=
Subject key identifier: D3:0D:C8:C2:FC:54:B5:61:15:45:89:BA:F7:69:0B:DE:D2:15:8D:31
Certificate issuer: /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial: 018DB4E8569A7F910002C3984DE3C55A22F5
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/0w3IwvxUtWEVRYm692kL3tIVjTE.roa
Signing time: Sat 17 Feb 2024 02:32:21 +0000
ROA not before: Sat 17 Feb 2024 02:32:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.139.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 08:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b4:e8:56:9a:7f:91:00:02:c3:98:4d:e3:c5:5a:22:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
Validity
Not Before: Feb 17 02:32:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d30dc8c2fc54b561154589baf7690bded2158d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7f:3b:45:f8:92:59:89:91:c4:ea:10:d9:2e:
0e:87:62:8c:5d:2f:ca:c5:ff:46:2a:58:f7:2b:cc:
96:47:6c:8e:c2:ee:dc:63:29:51:af:62:0d:e2:10:
0c:28:83:3e:38:d3:5d:f1:d2:c3:d2:38:4c:31:4f:
7e:67:b0:8c:3c:85:4f:9f:40:6a:0a:1c:4e:f1:5c:
1c:1b:29:15:cf:9a:a3:e3:2c:68:c4:ce:75:b9:c2:
ed:12:44:c8:5f:cf:5e:99:6d:a7:18:9d:34:18:4d:
45:d6:b3:0e:7f:81:da:48:93:5c:00:49:a9:2e:37:
31:29:7c:2a:9e:83:68:ff:d5:91:1e:9f:1d:db:28:
5a:f6:e4:46:d6:23:fb:24:39:f3:d5:ee:e7:24:3f:
5b:81:01:07:a2:7f:fd:c4:50:54:81:bc:7f:d0:3d:
a2:4a:21:19:4f:a0:35:76:71:80:c4:63:cd:6d:5a:
ea:08:d5:bc:08:d5:65:53:b6:b0:68:d3:6a:50:ad:
b7:b4:f2:b8:38:6d:3a:ef:9e:6c:a8:14:5f:13:f1:
22:37:3d:b2:a9:21:20:28:1f:de:ce:69:f7:9c:25:
6d:df:87:f1:dc:97:f5:09:70:61:18:f6:b4:53:ec:
90:00:8f:96:02:fc:c0:a8:1b:05:77:e5:5e:f4:4d:
ed:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0D:C8:C2:FC:54:B5:61:15:45:89:BA:F7:69:0B:DE:D2:15:8D:31
X509v3 Authority Key Identifier:
keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/0w3IwvxUtWEVRYm692kL3tIVjTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.35.0/24
Signature Algorithm: sha256WithRSAEncryption
49:bf:1b:2f:83:65:58:6f:17:ed:d0:f2:b7:ac:98:27:b5:17:
b8:12:68:6f:e6:65:51:f3:95:d5:74:0c:88:1b:3d:b6:9d:25:
5f:08:79:42:81:cd:06:ae:89:98:fd:d1:cd:0d:49:8d:09:26:
74:11:53:02:cf:f7:f3:24:15:da:26:fa:f4:55:5c:41:38:a7:
b6:c3:e3:c1:aa:0f:99:ff:9e:25:f1:77:57:15:64:c8:f6:82:
b8:ad:b7:bd:b1:66:e9:7e:5f:cd:b7:5a:30:96:62:df:5a:f8:
00:f7:67:a6:e2:e9:64:ba:20:9b:b4:3b:5f:8b:cb:f5:3d:a1:
63:31:03:58:19:10:0c:b0:1b:60:4a:45:4a:9e:1b:f2:83:cd:
c2:b0:e6:42:01:be:55:d5:01:6b:36:b4:7d:d6:21:19:48:2f:
ac:7d:55:13:41:a2:a5:e9:ca:0e:17:cf:0e:7a:f2:2e:c2:f3:
95:f9:a0:13:b0:c6:f8:36:ac:1b:3b:b2:72:8e:9c:9d:70:6a:
54:03:f9:25:3e:c0:86:19:4a:8e:87:94:b9:57:bf:f2:ec:de:
fd:fd:ab:e1:39:84:5f:50:af:cf:37:c9:07:ec:e5:d3:69:d3:
69:db:d6:1c:a6:69:a8:19:c5:a4:d0:fc:8b:28:57:d4:c7:f2:
e2:b0:88:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY206Faaf5EAAsOYTePFWiL1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NzYyZGIxMjgyZmZkMDg0NzYxMjMyMDM4ZjgxZjVkMjll
NjQwZDUwHhcNMjQwMjE3MDIzMjIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzBkYzhjMmZjNTRiNTYxMTU0NTg5YmFmNzY5MGJkZWQyMTU4ZDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg387RfiSWYmRxOoQ2S4Oh2KMXS/K
xf9GKlj3K8yWR2yOwu7cYylRr2IN4hAMKIM+ONNd8dLD0jhMMU9+Z7CMPIVPn0Bq
ChxO8VwcGykVz5qj4yxoxM51ucLtEkTIX89emW2nGJ00GE1F1rMOf4HaSJNcAEmp
LjcxKXwqnoNo/9WRHp8d2yha9uRG1iP7JDnz1e7nJD9bgQEHon/9xFBUgbx/0D2i
SiEZT6A1dnGAxGPNbVrqCNW8CNVlU7awaNNqUK23tPK4OG06755sqBRfE/EiNz2y
qSEgKB/ezmn3nCVt34fx3Jf1CXBhGPa0U+yQAI+WAvzAqBsFd+Ve9E3t2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNMNyML8VLVhFUWJuvdpC97SFY0xMB8GA1UdIwQY
MBaAFLl2LbEoL/0IR2EjIDj4H10p5kDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVhZdHNTZ3ZfUWhIWVNNZ09QZ2ZYU25tUU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mODE5MTUtNDA1ZS00YjU0LTljYjQt
NzBhNTU2YmE4YTExLzEvMHczSXd2eFV0V0VWUlltNjkya0wzdElWalRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mODE5MTUtNDA1ZS00YjU0LTljYjQtNzBhNTU2YmE4YTEx
LzEvdVhZdHNTZ3ZfUWhIWVNNZ09QZ2ZYU25tUU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYsjMA0G
CSqGSIb3DQEBCwUAA4IBAQBJvxsvg2VYbxft0PK3rJgntRe4Emhv5mVR85XVdAyI
Gz22nSVfCHlCgc0GromY/dHNDUmNCSZ0EVMCz/fzJBXaJvr0VVxBOKe2w+PBqg+Z
/54l8XdXFWTI9oK4rbe9sWbpfl/Nt1owlmLfWvgA92em4ulkuiCbtDtfi8v1PaFj
MQNYGRAMsBtgSkVKnhvyg83CsOZCAb5V1QFrNrR91iEZSC+sfVUTQaKl6coOF88O
evIuwvOV+aATsMb4NqwbO7JyjpydcGpUA/klPsCGGUqOh5S5V7/y7N79/avhOYRf
UK/PN8kH7OXTadNp29YcpmmoGcWk0PyLKFfUx/LisIir
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-fra.rpki-client.org