Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/Me3uxjmYA03ierUTWBCPbbOK0mk.roa
File: Me3uxjmYA03ierUTWBCPbbOK0mk.roa (raw, json)
Hash identifier: JE+rix7YGbg15O6g/AxqrJSCDe3u8LZNfA/t5gKUPRY=
Subject key identifier: 31:ED:EE:C6:39:98:03:4D:E2:7A:B5:13:58:10:8F:6D:B3:8A:D2:69
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0188C3DAE8BE9372BB9B066966113C97094E
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/Me3uxjmYA03ierUTWBCPbbOK0mk.roa
Signing time: Fri 16 Jun 2023 10:58:03 +0000
ROA not before: Fri 16 Jun 2023 10:58:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34984
IP address blocks: 185.169.181.0/24 maxlen: 24
185.174.23.0/24 maxlen: 24
185.174.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:da:e8:be:93:72:bb:9b:06:69:66:11:3c:97:09:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jun 16 10:58:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31edeec63998034de27ab51358108f6db38ad269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:54:14:73:0f:75:f0:5c:99:5b:0f:9d:c7:
ae:4d:db:c9:48:80:31:a6:a9:6c:46:60:c0:80:d4:
15:7f:2d:72:87:1e:c8:c4:f5:47:cb:5d:81:ae:4e:
e1:8b:9c:a7:44:bc:77:bf:b4:5b:02:ab:3e:a6:e4:
dc:f1:5d:9f:b3:3e:2d:33:8f:9d:7b:f7:a4:30:15:
32:0e:3c:cc:ca:ce:ec:3c:7e:59:df:6f:af:f5:cc:
e0:e0:b4:55:20:b6:9e:70:e3:68:39:5f:c9:c7:bb:
19:84:ed:73:2b:3f:26:85:f5:c2:3b:30:e6:36:8e:
fb:ba:43:2a:8f:b2:6c:e6:66:d7:ee:0a:86:6e:99:
7d:52:3c:02:ac:72:93:55:d9:e4:c6:80:11:3e:10:
9f:88:54:54:47:1e:a8:53:2f:29:f9:0a:67:1e:8d:
f9:c7:84:d3:30:51:ce:36:cd:35:da:47:6e:d8:2e:
e2:ee:5a:40:14:c9:c2:a2:51:e1:6d:8c:fb:ee:f9:
ab:0a:91:90:29:a9:56:e1:49:43:9a:c0:dd:e4:1a:
34:ad:81:23:9b:43:a5:26:f6:6f:be:eb:50:aa:64:
b4:0b:b2:37:cc:24:df:99:09:05:d8:82:77:67:70:
b1:70:36:3a:d6:6a:66:39:f3:3f:15:9a:76:f6:9d:
6b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:ED:EE:C6:39:98:03:4D:E2:7A:B5:13:58:10:8F:6D:B3:8A:D2:69
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/Me3uxjmYA03ierUTWBCPbbOK0mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.181.0/24
185.174.22.0/23
Signature Algorithm: sha256WithRSAEncryption
af:37:86:fe:9d:28:03:ce:2c:9c:f8:41:81:16:31:1d:30:71:
48:9d:da:a4:ae:ea:8a:4a:0a:73:e5:dd:7b:dd:b9:f0:f8:3a:
8a:ab:07:1c:60:94:4a:6c:70:df:52:48:64:6b:fe:da:62:a3:
6d:5e:76:22:d1:01:07:c3:38:bb:70:b5:20:31:07:0a:da:bc:
9b:05:e6:6e:ab:68:92:c7:69:8a:96:03:7f:82:e0:94:94:be:
e2:08:c3:6f:42:3c:de:de:09:40:0c:e6:c0:f6:fb:d7:51:ec:
be:a7:94:10:ea:e4:02:9b:a9:57:2b:f3:dc:f7:fd:40:91:bc:
23:08:51:7e:59:b9:93:07:67:27:0b:74:26:1e:2d:79:29:3d:
cc:41:03:7d:ff:27:27:f1:64:ff:a1:76:48:a3:eb:ba:a9:9c:
58:2b:7f:55:2d:b3:cb:96:63:d6:06:0a:bc:69:65:0c:ec:75:
b6:49:1d:64:c3:b9:3a:d7:3b:4e:a3:b3:de:66:77:0a:a0:69:
34:d5:0e:6f:9c:43:db:04:ba:fc:b7:04:7c:a8:58:da:cb:0c:
ba:53:6a:61:17:17:f1:d9:d2:a3:45:e0:cd:dc:3d:8e:db:fa:
7d:93:b0:3e:84:1f:fd:5f:97:77:cd:44:6f:ee:5f:28:78:40:
e2:a8:b1:2a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYjD2ui+k3K7mwZpZhE8lwlOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3
MjAyZDUwHhcNMjMwNjE2MTA1ODAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWVkZWVjNjM5OTgwMzRkZTI3YWI1MTM1ODEwOGY2ZGIzOGFkMjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmahUFHMPdfBcmVsPnceuTdvJSIAx
pqlsRmDAgNQVfy1yhx7IxPVHy12Brk7hi5ynRLx3v7RbAqs+puTc8V2fsz4tM4+d
e/ekMBUyDjzMys7sPH5Z32+v9czg4LRVILaecONoOV/Jx7sZhO1zKz8mhfXCOzDm
No77ukMqj7Js5mbX7gqGbpl9UjwCrHKTVdnkxoARPhCfiFRURx6oUy8p+QpnHo35
x4TTMFHONs012kdu2C7i7lpAFMnColHhbYz77vmrCpGQKalW4UlDmsDd5Bo0rYEj
m0OlJvZvvutQqmS0C7I3zCTfmQkF2IJ3Z3CxcDY61mpmOfM/FZp29p1rKQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDHt7sY5mANN4nq1E1gQj22zitJpMB8GA1UdIwQY
MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct
YzUxNWYzNTRjYzVhLzEvTWUzdXhqbVlBMDNpZXJVVFdCQ1BiYk9LMG1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh
LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuam1AwQB
ua4WMA0GCSqGSIb3DQEBCwUAA4IBAQCvN4b+nSgDziyc+EGBFjEdMHFIndqkruqK
Sgpz5d173bnw+DqKqwccYJRKbHDfUkhka/7aYqNtXnYi0QEHwzi7cLUgMQcK2ryb
BeZuq2iSx2mKlgN/guCUlL7iCMNvQjze3glADObA9vvXUey+p5QQ6uQCm6lXK/Pc
9/1AkbwjCFF+WbmTB2cnC3QmHi15KT3MQQN9/ycn8WT/oXZIo+u6qZxYK39VLbPL
lmPWBgq8aWUM7HW2SR1kw7k61ztOo7PeZncKoGk01Q5vnEPbBLr8twR8qFjaywy6
U2phFxfx2dKjReDN3D2O2/p9k7A+hB/9X5d3zURv7l8oeEDiqLEq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:49 2024 by rpki-client on console-fra.rpki-client.org