Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/PhqjlKaXFe_F5CsABHchAJPrnAk.roa
File: PhqjlKaXFe_F5CsABHchAJPrnAk.roa (raw, json)
Hash identifier: GO27p6e9RBKxoA375EKCADcWBNb54RVZ6g2q7GSc6Y4=
Subject key identifier: 3E:1A:A3:94:A6:97:15:EF:C5:E4:2B:00:04:77:21:00:93:EB:9C:09
Certificate issuer: /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial: 018570B0618F74DAC96F6588590610E6FDDB
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/PhqjlKaXFe_F5CsABHchAJPrnAk.roa
Signing time: Mon 02 Jan 2023 04:14:45 +0000
ROA not before: Mon 02 Jan 2023 04:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.118.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Nov 2023 08:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:61:8f:74:da:c9:6f:65:88:59:06:10:e6:fd:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
Validity
Not Before: Jan 2 04:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e1aa394a69715efc5e42b000477210093eb9c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5c:e8:62:ee:41:e5:6e:6a:df:31:08:e5:e6:
e9:29:60:18:a1:b6:45:e2:ef:7c:04:6f:7f:2e:e7:
4c:2a:db:a9:04:8d:52:15:1b:a7:80:a2:99:ec:b3:
f1:f5:7b:7d:13:d6:54:84:27:6b:d8:0f:45:bd:ba:
ff:e5:ca:47:21:90:6e:3c:6e:43:65:e8:aa:4d:ae:
d5:7a:8e:d4:b6:ab:aa:f7:87:e6:f6:93:95:4d:17:
d1:e8:c9:e3:ba:7a:01:61:54:23:a8:42:81:95:34:
09:86:4f:5a:bc:f8:15:57:44:63:60:b2:de:96:1f:
05:a3:25:49:fc:3d:e6:f2:9a:e1:34:bc:4c:4d:09:
17:67:0e:3c:d3:8b:fd:07:e9:50:76:69:cb:24:32:
2e:ef:ba:84:a5:ea:9c:bd:df:1f:e5:20:81:71:94:
48:d6:d3:c8:5b:37:0a:ce:d4:c8:1e:73:99:b3:c8:
f5:dd:80:10:33:ca:52:c5:9d:71:26:11:fc:93:ae:
a1:16:ae:5a:af:d8:cc:e8:af:21:a8:f3:85:5a:90:
9a:ee:e2:30:65:fa:e3:3c:b2:60:29:19:d0:c0:bd:
8a:44:4d:86:c1:aa:26:e0:db:b7:5c:2c:b5:ab:31:
a5:2e:33:94:39:a6:eb:e9:6e:43:3c:9e:8c:2a:53:
30:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1A:A3:94:A6:97:15:EF:C5:E4:2B:00:04:77:21:00:93:EB:9C:09
X509v3 Authority Key Identifier:
keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/PhqjlKaXFe_F5CsABHchAJPrnAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.141.0/24
Signature Algorithm: sha256WithRSAEncryption
51:7d:43:72:23:10:ef:73:06:26:1f:26:2d:34:68:1c:5a:d6:
af:39:22:0f:51:3c:d7:1d:1e:d7:15:c0:99:d7:ee:84:32:0c:
f5:d5:8f:ab:14:79:d9:06:d2:13:b1:ea:15:15:09:7a:77:2f:
cc:20:fe:12:13:9f:54:e3:67:dc:c6:e1:1f:27:bc:de:70:b7:
c0:34:07:ff:e5:63:22:5d:dd:e2:2f:96:bf:73:3b:0b:ca:69:
74:97:41:e1:ae:e1:2d:f6:13:a9:87:5c:8b:f1:12:ac:e7:4b:
07:ee:24:83:d1:4e:1e:aa:58:21:cd:48:3c:ee:68:b1:1f:8d:
ce:3f:cd:a7:c2:8c:06:50:3d:d6:f6:39:ce:a8:2d:30:e8:4a:
63:62:db:d5:df:47:3d:9d:8d:15:da:28:df:19:88:c8:4c:0f:
39:cd:39:65:b4:67:11:1b:ea:e3:3d:68:13:3e:41:19:59:95:
c4:fa:36:7e:8d:ac:45:5b:d8:06:5a:c6:15:97:64:9a:6c:05:
01:5f:a5:42:95:f5:f3:c1:7a:69:00:2c:66:2e:d9:7e:a1:32:
a9:00:c6:ef:87:53:82:dc:40:45:e5:da:a8:c5:7d:aa:5f:cf:
15:57:e4:dd:17:b6:97:62:b1:f2:bd:e7:58:61:08:40:28:27:
88:33:5b:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwsGGPdNrJb2WIWQYQ5v3bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMjRkZWZiYWFkZTkzZTk5OGUxM2E5NDIwMjlkZDU5M2I4
YjJlYTMwHhcNMjMwMTAyMDQxNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTFhYTM5NGE2OTcxNWVmYzVlNDJiMDAwNDc3MjEwMDkzZWI5YzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglzoYu5B5W5q3zEI5ebpKWAYobZF
4u98BG9/LudMKtupBI1SFRungKKZ7LPx9Xt9E9ZUhCdr2A9Fvbr/5cpHIZBuPG5D
ZeiqTa7Veo7Utquq94fm9pOVTRfR6MnjunoBYVQjqEKBlTQJhk9avPgVV0RjYLLe
lh8FoyVJ/D3m8prhNLxMTQkXZw4804v9B+lQdmnLJDIu77qEpeqcvd8f5SCBcZRI
1tPIWzcKztTIHnOZs8j13YAQM8pSxZ1xJhH8k66hFq5ar9jM6K8hqPOFWpCa7uIw
ZfrjPLJgKRnQwL2KRE2Gwaom4Nu3XCy1qzGlLjOUOabr6W5DPJ6MKlMwwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD4ao5SmlxXvxeQrAAR3IQCT65wJMB8GA1UdIwQY
MBaAFFMk3vuq3pPpmOE6lCAp3Vk7iy6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXlUZS02cmVrLW1ZNFRxVUlDbmRXVHVMTHFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yOTRlODQtY2ZjNS00NWE0LWE1Y2Qt
MzNiNzQ1OTk3NWUwLzEvUGhxamxLYVhGZV9GNUNzQUJIY2hBSlBybkFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yOTRlODQtY2ZjNS00NWE0LWE1Y2QtMzNiNzQ1OTk3NWUw
LzEvVXlUZS02cmVrLW1ZNFRxVUlDbmRXVHVMTHFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXaNMA0G
CSqGSIb3DQEBCwUAA4IBAQBRfUNyIxDvcwYmHyYtNGgcWtavOSIPUTzXHR7XFcCZ
1+6EMgz11Y+rFHnZBtITseoVFQl6dy/MIP4SE59U42fcxuEfJ7zecLfANAf/5WMi
Xd3iL5a/czsLyml0l0HhruEt9hOph1yL8RKs50sH7iSD0U4eqlghzUg87mixH43O
P82nwowGUD3W9jnOqC0w6EpjYtvV30c9nY0V2ijfGYjITA85zTlltGcRG+rjPWgT
PkEZWZXE+jZ+jaxFW9gGWsYVl2SabAUBX6VClfXzwXppACxmLtl+oTKpAMbvh1OC
3EBF5dqoxX2qX88VV+TdF7aXYrHyvedYYQhAKCeIM1vz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:19 2024 by rpki-client on console-fra.rpki-client.org