Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/3qWw-nkBPweQeOwc9qR_YrPcsc8.roa
File: 3qWw-nkBPweQeOwc9qR_YrPcsc8.roa (raw, json)
Hash identifier: 1BN/s2FrS+PTBAaOrcB6KQoF7fOgAEtiPQrdj9yn+5Y=
Subject key identifier: DE:A5:B0:FA:79:01:3F:07:90:78:EC:1C:F6:A4:7F:62:B3:DC:B1:CF
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 0192FAFA03150518E1E5F9D399285654CD50
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/3qWw-nkBPweQeOwc9qR_YrPcsc8.roa
Signing time: Tue 05 Nov 2024 06:19:01 +0000
ROA not before: Tue 05 Nov 2024 06:19:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38195
IP address blocks: 185.114.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 06:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fa:fa:03:15:05:18:e1:e5:f9:d3:99:28:56:54:cd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Nov 5 06:19:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dea5b0fa79013f079078ec1cf6a47f62b3dcb1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:ec:21:32:b5:22:11:2e:56:6f:ed:89:4d:
d6:82:25:36:27:d7:5a:bc:2c:d8:ec:db:d1:c2:b9:
0d:8e:17:f7:03:3e:69:e1:9f:20:1f:d3:e3:64:61:
2c:2b:a8:3f:ed:2a:92:aa:08:a0:9a:f2:b2:cb:47:
e8:a5:cf:0e:d4:ef:dc:a7:37:f6:7b:e8:c6:47:f0:
fd:7a:09:75:f9:9d:dc:b9:a8:3f:55:d8:20:44:cd:
0a:b7:d2:f8:68:d7:43:7e:5b:a8:52:8e:2f:a0:a9:
e4:e2:47:e2:89:64:a3:96:fb:69:9a:ff:46:b0:ad:
a9:16:ed:90:e4:fd:6b:66:8e:09:cf:47:7a:10:c1:
a6:6a:3c:d2:12:7c:17:d8:72:e5:bb:c1:2b:f3:1f:
0d:30:d0:78:dc:e3:01:df:e2:df:e6:40:b4:fe:d8:
b8:fd:5a:ad:ef:d7:91:6b:b4:bb:06:a8:8c:92:c9:
50:de:ce:04:eb:12:ce:3b:f0:a4:08:c4:77:a5:35:
21:4b:68:22:28:88:6d:0c:7b:37:ca:72:79:24:b1:
19:7c:c4:fb:4d:a4:ff:5b:fe:23:da:c8:fa:2a:f1:
a8:c4:f4:ee:fe:21:85:ab:71:b9:0c:5c:c0:43:42:
11:d0:c7:e2:43:8b:0c:04:db:ce:87:42:1c:74:7f:
5c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A5:B0:FA:79:01:3F:07:90:78:EC:1C:F6:A4:7F:62:B3:DC:B1:CF
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/3qWw-nkBPweQeOwc9qR_YrPcsc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.32.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:dc:3b:51:17:cf:57:0a:39:78:a1:26:2a:6b:64:dc:cf:a4:
61:e6:e4:d8:ec:be:df:98:8c:bd:15:f4:40:2b:59:8d:0a:a4:
fe:bd:43:bf:1d:77:81:60:42:e2:3b:59:10:77:85:b6:83:6f:
c2:ea:49:bb:85:c4:17:35:f7:58:c4:8f:f6:4c:2c:a2:dc:eb:
65:26:44:f2:22:69:ec:44:90:96:08:4d:49:5b:90:06:43:39:
16:2f:53:98:7a:0f:5e:59:19:dc:3c:a3:25:e4:44:4f:26:cd:
ff:ba:41:d7:8b:2d:1e:21:4a:93:23:5d:a6:bf:b3:ba:38:25:
2e:fd:b0:2f:1a:71:bc:0a:d4:e0:00:fe:ac:df:a6:31:65:65:
75:bf:e8:87:1e:fb:4d:a2:62:18:0b:9d:6b:6e:45:53:d7:80:
f1:a3:0a:4d:a1:29:9b:af:b7:72:74:c3:44:d2:25:94:85:12:
09:c8:51:52:99:1a:1d:93:af:de:a8:0a:fd:f1:68:d5:d4:6d:
72:19:c6:d6:33:78:e8:a4:0d:ff:98:0a:f1:5a:80:af:a6:1b:
34:68:e0:79:9e:c4:3a:4f:7d:65:89:60:af:b7:7e:06:4f:ca:
92:d0:45:ec:cf:55:49:6f:98:b3:eb:3c:f9:14:b5:45:a4:70:
ea:0a:69:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 08:31:07 2024 by rpki-client on console-fra.rpki-client.org