Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/0QYkBG7EmXpS2ndeH6nZr-6E1y4.roa
File: 0QYkBG7EmXpS2ndeH6nZr-6E1y4.roa (raw, json)
Hash identifier: j7/k0/U4+6aHgE19iG4Az5u+gcZbPkhYutw2TlafjQw=
Subject key identifier: D1:06:24:04:6E:C4:99:7A:52:DA:77:5E:1F:A9:D9:AF:EE:84:D7:2E
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 018CC3B6AA0DB0BB5499B64ADFE920C07CC8
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/0QYkBG7EmXpS2ndeH6nZr-6E1y4.roa
Signing time: Mon 01 Jan 2024 06:29:37 +0000
ROA not before: Mon 01 Jan 2024 06:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 185.128.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 11:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:aa:0d:b0:bb:54:99:b6:4a:df:e9:20:c0:7c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Jan 1 06:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d10624046ec4997a52da775e1fa9d9afee84d72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1a:63:65:5f:81:d5:32:b5:82:52:1e:81:dc:
ef:b6:7b:fe:af:42:1a:d3:3d:c7:b8:98:7e:d0:3f:
e5:5b:4b:c0:83:bc:95:c5:42:51:78:6d:0d:d4:ab:
2b:0c:05:81:6d:8f:cc:bd:d5:2b:4d:c2:94:45:1a:
2f:ef:a0:bb:ef:c6:1d:7f:1f:78:4c:3b:1b:a8:cb:
3e:ce:bf:b1:e6:fb:c7:5d:15:10:d8:83:57:b6:87:
2b:9e:22:3f:8a:d2:15:4e:2b:27:fe:82:d0:ba:ec:
e7:2e:4d:3a:c1:ec:2a:70:3a:c3:ce:3d:29:e1:f7:
6f:19:00:68:a6:7b:87:ee:a6:28:68:56:83:b7:c9:
19:0f:7a:e3:c9:4a:0e:50:27:29:a0:cd:77:9f:cf:
61:ef:73:15:63:77:4e:58:9e:a4:2c:e2:13:71:95:
17:fa:9e:be:cf:ff:c4:6d:bb:5f:f4:5e:0f:45:65:
cc:40:69:57:38:c7:8f:cb:9d:39:31:9d:1e:7a:6b:
08:52:b4:3a:bc:02:b8:22:4c:fa:1c:e5:e2:63:34:
74:5d:0c:66:0b:1e:b1:da:70:15:ce:71:ca:df:d7:
5c:17:2e:b9:ba:06:52:2b:ad:8e:f8:f4:f6:45:e6:
d8:18:68:d9:74:1c:ed:8a:59:d7:2b:6d:01:48:bd:
40:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:06:24:04:6E:C4:99:7A:52:DA:77:5E:1F:A9:D9:AF:EE:84:D7:2E
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/0QYkBG7EmXpS2ndeH6nZr-6E1y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.43.0/24
Signature Algorithm: sha256WithRSAEncryption
28:73:c8:b5:45:6b:97:57:23:28:6d:23:04:42:b1:c2:df:0f:
3f:cd:07:44:ed:63:c6:01:0c:6b:c7:0f:86:87:a6:31:c3:60:
37:b8:c5:65:43:54:fb:50:6c:43:00:80:e3:1f:5b:cc:be:eb:
37:cf:49:6c:58:30:6b:c4:79:db:26:61:8f:29:03:85:24:23:
f7:b5:dc:ef:c6:83:5c:7f:ac:11:8d:c3:8e:41:4d:32:90:4b:
b6:c5:c0:f4:32:70:8d:a0:da:27:87:18:2a:c2:c9:a0:05:e3:
aa:1c:94:97:0b:06:4f:0b:9a:cf:53:55:af:48:06:88:e0:67:
c4:77:6a:e6:ec:b7:d3:5b:94:7b:76:e7:23:55:eb:9d:1a:a6:
be:1b:7f:71:2d:03:c4:bb:aa:ba:c2:ec:d9:14:19:62:93:da:
cd:d8:f7:28:65:55:b2:96:a0:1b:17:d3:06:d1:9d:a9:81:35:
69:b7:08:f5:d8:9c:e6:45:eb:f3:f6:c7:c9:6f:12:cb:e6:96:
48:f0:f8:4c:49:70:12:2f:d5:b4:17:b6:e3:31:fd:b5:f1:89:
8d:30:cd:ea:01:77:50:47:0a:71:30:e3:1c:62:de:60:09:c5:
6c:30:b6:0f:f5:2d:9c:3a:71:8f:1c:23:10:aa:fa:b9:e0:c4:
78:cf:47:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtqoNsLtUmbZK3+kgwHzIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzODI4MGM1MzAwYjc0ODg4YWM3ZWI0YmZhNjQxN2Q5YTJl
N2IwYmUwHhcNMjQwMTAxMDYyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTA2MjQwNDZlYzQ5OTdhNTJkYTc3NWUxZmE5ZDlhZmVlODRkNzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxpjZV+B1TK1glIegdzvtnv+r0Ia
0z3HuJh+0D/lW0vAg7yVxUJReG0N1KsrDAWBbY/MvdUrTcKURRov76C778Ydfx94
TDsbqMs+zr+x5vvHXRUQ2INXtocrniI/itIVTisn/oLQuuznLk06wewqcDrDzj0p
4fdvGQBopnuH7qYoaFaDt8kZD3rjyUoOUCcpoM13n89h73MVY3dOWJ6kLOITcZUX
+p6+z//Ebbtf9F4PRWXMQGlXOMePy505MZ0eemsIUrQ6vAK4Ikz6HOXiYzR0XQxm
Cx6x2nAVznHK39dcFy65ugZSK62O+PT2RebYGGjZdBztilnXK20BSL1ALwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNEGJARuxJl6Utp3Xh+p2a/uhNcuMB8GA1UdIwQY
MBaAFMOCgMUwC3SIisfrS/pkF9mi57C+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2Yt
NDFiYjIxYWMyODAxLzEvMFFZa0JHN0VtWHBTMm5kZUg2blpyLTZFMXk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2YtNDFiYjIxYWMyODAx
LzEvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYArMA0G
CSqGSIb3DQEBCwUAA4IBAQAoc8i1RWuXVyMobSMEQrHC3w8/zQdE7WPGAQxrxw+G
h6Yxw2A3uMVlQ1T7UGxDAIDjH1vMvus3z0lsWDBrxHnbJmGPKQOFJCP3tdzvxoNc
f6wRjcOOQU0ykEu2xcD0MnCNoNonhxgqwsmgBeOqHJSXCwZPC5rPU1WvSAaI4GfE
d2rm7LfTW5R7ducjVeudGqa+G39xLQPEu6q6wuzZFBlik9rN2PcoZVWylqAbF9MG
0Z2pgTVptwj12JzmRevz9sfJbxLL5pZI8PhMSXASL9W0F7bjMf218YmNMM3qAXdQ
RwpxMOMcYt5gCcVsMLYP9S2cOnGPHCMQqvq54MR4z0fY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:31 2024 by rpki-client on console-fra.rpki-client.org