Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/PpZz0iM0ijBH7HyDGoUFjwf9hlo.roa
File: PpZz0iM0ijBH7HyDGoUFjwf9hlo.roa (raw, json)
Hash identifier: We7lfF/Sr53OyeGT24ePu1KULborzSDiOAEqLjx//1E=
Subject key identifier: 3E:96:73:D2:23:34:8A:30:47:EC:7C:83:1A:85:05:8F:07:FD:86:5A
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 018CC2DAF2A6928DC072AA9740F336A54006
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/PpZz0iM0ijBH7HyDGoUFjwf9hlo.roa
Signing time: Mon 01 Jan 2024 02:29:37 +0000
ROA not before: Mon 01 Jan 2024 02:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212097
IP address blocks: 185.230.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 11:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f2:a6:92:8d:c0:72:aa:97:40:f3:36:a5:40:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: Jan 1 02:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e9673d223348a3047ec7c831a85058f07fd865a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1d:dc:4d:a1:b2:17:1c:c8:bf:f6:e4:de:d4:
0d:7b:72:d3:98:9a:b7:85:57:81:ba:32:ae:c7:2b:
33:ea:7d:9b:96:3d:ba:e5:20:43:e5:a9:95:e8:89:
a4:4e:7b:d8:b9:61:04:d8:8c:8d:5e:16:04:60:2b:
00:52:1e:fa:e9:36:dc:ab:dc:1e:b2:c9:42:c3:f1:
0a:c1:15:3b:8a:bd:03:a4:cd:08:b2:6f:93:a2:32:
db:ac:b0:24:b9:db:46:de:1a:22:4e:50:43:8e:9d:
f0:f0:87:54:f1:b9:e4:f1:0a:ca:b0:c0:ce:1c:bf:
03:f7:d2:2d:e3:6d:28:90:81:68:97:3d:18:c0:a5:
ec:2c:2a:3e:16:27:68:ca:d0:6a:20:10:eb:f9:2f:
56:37:15:c7:7a:bd:d5:df:af:95:5f:4a:25:eb:70:
c6:ff:48:36:e0:4a:c6:be:b7:39:ac:75:75:80:b9:
ca:e1:79:84:b4:37:4b:44:f8:b8:d2:e6:e8:8e:a2:
e6:fe:d1:90:62:b7:7e:43:1b:58:6b:53:2f:3b:d2:
a1:68:81:66:13:c4:3c:5c:ee:df:13:07:6d:f3:d3:
e9:dd:05:51:b9:76:e2:70:ae:98:1d:51:bf:53:86:
67:2f:0c:41:91:4b:e3:f5:13:af:dd:43:cc:91:28:
b3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:96:73:D2:23:34:8A:30:47:EC:7C:83:1A:85:05:8F:07:FD:86:5A
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/PpZz0iM0ijBH7HyDGoUFjwf9hlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.102.0/24
Signature Algorithm: sha256WithRSAEncryption
30:85:8e:8a:fd:dc:5f:d7:35:4a:91:8a:a0:18:c4:23:4c:c4:
38:08:c1:e7:28:b6:8c:1e:8a:f6:12:85:75:7b:91:f3:5c:c0:
17:05:3d:62:49:4e:c4:5c:e0:3a:39:35:7f:9c:c6:ef:78:89:
92:97:64:72:63:93:86:82:a3:32:d1:48:52:e8:d5:2c:ff:a6:
eb:b6:ff:16:e4:8d:95:a7:ec:ee:8b:6a:dd:85:93:5f:34:08:
77:a3:86:5a:66:db:f7:45:df:72:c2:2b:f7:22:7b:0e:a1:a6:
a2:71:56:96:67:76:11:0f:f0:32:6c:ae:0d:12:ab:16:e3:dc:
00:08:54:29:f1:84:fc:69:d9:d6:b9:b3:3c:d8:90:4d:d7:e9:
4b:15:65:ae:ea:bf:b1:66:17:b0:c3:5b:cd:3e:02:dd:b3:98:
cf:39:89:e4:8b:db:c7:ae:a8:76:c3:79:d2:42:9c:ea:5e:90:
1b:09:f7:18:ec:7f:ba:20:0e:db:60:e8:c0:3a:ae:a2:49:23:
59:ca:ec:9e:28:1f:93:07:0e:5a:78:65:1b:ec:97:55:c2:54:
98:d9:31:c2:b8:70:e5:46:89:72:f8:cd:4d:f6:29:08:96:d3:
31:88:12:2e:4c:29:62:9f:1b:cd:4d:69:b1:51:37:d9:21:c5:
ce:9e:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org