Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/3KXtC7NhSzo4ZKw064HBthj9i4Y.roa
File: 3KXtC7NhSzo4ZKw064HBthj9i4Y.roa (raw, json)
Hash identifier: tOkphMYC6SvC2CEQM/Z4Gc7mLHmK+uqtYe+P9KH/7YA=
Subject key identifier: DC:A5:ED:0B:B3:61:4B:3A:38:64:AC:34:EB:81:C1:B6:18:FD:8B:86
Certificate issuer: /CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Certificate serial: 018A21C20CCC3211F36E220BA80A61336FFA
Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/3KXtC7NhSzo4ZKw064HBthj9i4Y.roa
Signing time: Wed 23 Aug 2023 09:37:59 +0000
ROA not before: Wed 23 Aug 2023 09:37:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207369
IP address blocks: 185.39.79.0/24 maxlen: 24
185.138.184.0/23 maxlen: 23
185.138.184.0/22 maxlen: 22
185.138.186.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:21:c2:0c:cc:32:11:f3:6e:22:0b:a8:0a:61:33:6f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Validity
Not Before: Aug 23 09:37:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dca5ed0bb3614b3a3864ac34eb81c1b618fd8b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c1:c7:52:31:a6:a5:41:14:74:1a:dc:21:d0:
c4:6e:6f:09:e2:48:11:0f:78:ee:47:b3:fc:da:bd:
5e:8a:3e:0b:c4:ea:8d:e3:5d:f2:ef:e2:db:13:88:
a4:2e:bd:6f:38:6f:6d:e4:3c:f0:65:0f:5d:4c:70:
de:2d:89:1d:f3:cd:d9:a3:37:c3:ef:c9:30:03:fa:
e7:75:f8:5d:c9:aa:77:f3:3f:c6:9a:02:e3:32:c3:
73:0e:54:3d:79:f5:77:f5:ac:fb:ce:0f:0a:9c:75:
92:99:80:a5:9e:73:7f:46:14:94:79:27:e2:1d:8d:
5c:67:46:17:4c:67:45:91:f4:94:f2:d8:12:34:c1:
98:61:5d:b5:3d:fd:3c:fd:5b:7b:d9:7d:88:47:05:
18:e3:bd:5e:a6:f6:f8:d8:36:25:95:fc:37:93:91:
93:78:35:ce:08:15:0b:4b:c2:25:00:2e:9c:68:21:
3c:cf:0a:f0:c9:13:71:cf:2a:9a:e4:f0:cf:fe:20:
4a:c3:69:f6:ad:ab:e4:45:68:42:70:5e:65:6d:d3:
91:40:71:c6:77:4b:e0:00:39:6f:aa:93:46:7c:20:
34:ad:c1:b5:e1:c5:13:d4:e2:2c:69:b8:ac:d4:dc:
9a:54:46:68:3c:32:c1:d2:db:d6:0d:b6:96:07:2a:
a2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A5:ED:0B:B3:61:4B:3A:38:64:AC:34:EB:81:C1:B6:18:FD:8B:86
X509v3 Authority Key Identifier:
keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/3KXtC7NhSzo4ZKw064HBthj9i4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.79.0/24
185.138.184.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:84:3d:1e:3e:19:0c:23:cd:bb:b8:70:d8:45:21:67:8b:6e:
bb:e6:c6:81:a3:09:35:6c:93:05:eb:03:72:68:5e:51:6c:fb:
ff:56:bb:42:b9:48:40:2d:c7:ff:e3:84:35:d8:f5:98:c4:49:
5a:99:cc:76:6b:6f:b1:31:6d:67:af:e3:c0:c1:6e:bb:0e:ec:
03:ee:71:65:66:10:18:27:b8:a9:f8:c1:b2:2f:ca:b1:aa:37:
2f:cf:cc:e7:e6:ae:b3:44:ef:b7:4b:31:77:7e:aa:cc:57:46:
d6:eb:af:28:da:84:72:c2:25:15:a7:0c:d7:16:e9:a6:ec:2c:
24:0b:ec:c5:8a:20:89:1b:07:a0:97:74:94:bf:23:19:a1:b4:
10:af:de:87:dd:27:b7:05:07:c8:75:b7:cf:f7:cf:52:70:1f:
ae:d2:b3:c4:47:a2:1d:68:49:72:8f:e6:cc:34:5d:0d:c8:4d:
e6:fb:02:9d:ed:ce:1d:99:ce:c2:9e:d6:18:4d:8e:64:a0:00:
f5:51:93:61:dd:11:f5:5a:59:f5:5e:53:19:3b:0c:c2:80:1e:
f1:43:df:3b:fc:f3:d1:47:ad:08:00:4b:95:5f:71:9f:ce:29:
2a:7e:86:e0:8b:c5:74:2b:41:f3:15:c5:ca:4b:f9:33:d5:07:
e8:88:6d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:13 2024 by rpki-client on console-ams.rpki-client.org