Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/dhu-PznNmFQf88e5b_12HOpghkg.roa
File: dhu-PznNmFQf88e5b_12HOpghkg.roa (raw, json)
Hash identifier: X+hqi9e+opF8Bsd5AyCwnyAUeQGkdAeW0GT2uzy0uZA=
Subject key identifier: 76:1B:BE:3F:39:CD:98:54:1F:F3:C7:B9:6F:FD:76:1C:EA:60:86:48
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 0189B6BB2BBA2C734AF1C809C6A21D083CB7
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/dhu-PznNmFQf88e5b_12HOpghkg.roa
Signing time: Wed 02 Aug 2023 14:51:07 +0000
ROA not before: Wed 02 Aug 2023 14:51:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51030
IP address blocks: 185.188.142.0/24 maxlen: 24
185.188.141.0/24 maxlen: 24
185.121.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:bb:2b:ba:2c:73:4a:f1:c8:09:c6:a2:1d:08:3c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Aug 2 14:51:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=761bbe3f39cd98541ff3c7b96ffd761cea608648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ce:f7:2a:83:93:c3:46:b2:e7:5a:07:6d:db:
f8:42:93:89:a0:cd:8e:f1:28:b5:46:a3:0c:a1:92:
69:42:62:50:8c:a5:4c:4e:75:93:d6:f8:8f:05:39:
74:1d:03:03:9b:77:a7:a0:97:47:59:d5:4e:24:cd:
f7:0a:d5:06:68:7d:4d:07:31:f3:6e:8c:35:e9:12:
bb:9d:4d:04:0c:40:5e:22:8f:e3:f9:4f:dc:6c:14:
25:a3:49:2e:f5:b3:13:a3:97:15:bd:3d:e8:70:b7:
79:a0:44:56:31:78:e8:3a:e2:9c:12:72:99:a7:5d:
18:1d:97:f1:b9:88:36:1e:09:6e:55:ee:11:a6:d3:
33:50:7a:8b:9e:99:fe:d6:e4:67:59:84:80:5c:c7:
99:7f:0e:dc:6b:02:75:c2:eb:38:39:0f:f6:ae:a3:
3a:cb:0e:12:d0:88:ce:d9:18:7a:09:e9:14:bd:3d:
19:5b:f3:f2:c1:c3:98:f4:d5:f9:8f:c8:c6:a9:ae:
68:cf:02:05:b7:37:e2:5c:db:aa:02:ca:a6:c1:8c:
6e:df:16:48:f5:a9:9a:b9:e4:11:55:ce:c1:dd:ab:
bf:22:4e:66:73:e6:6b:d9:2e:95:67:55:49:a4:e8:
ad:26:b0:ee:06:08:9f:bc:99:30:f8:28:b7:69:a4:
09:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1B:BE:3F:39:CD:98:54:1F:F3:C7:B9:6F:FD:76:1C:EA:60:86:48
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/dhu-PznNmFQf88e5b_12HOpghkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.224.0/24
185.188.141.0-185.188.142.255
Signature Algorithm: sha256WithRSAEncryption
11:0f:2b:57:ac:15:18:b1:6b:c2:ef:9e:5a:2b:61:17:84:10:
13:43:28:ea:fe:33:13:a8:b3:f8:ec:c7:bb:aa:fa:24:b3:89:
c9:63:0d:7c:4a:cd:43:fb:48:2b:84:4b:38:c9:cf:e4:1a:fc:
6c:e6:1e:1d:b1:5d:8c:38:08:8c:b7:4f:65:31:bf:34:8f:91:
e3:02:9f:6b:20:85:89:4d:e0:5e:f8:00:36:85:4a:72:95:06:
21:06:dd:a0:b4:6c:bc:34:5f:78:a1:33:71:1b:d6:d9:a2:32:
73:34:54:2b:73:94:6d:e9:92:39:09:b8:b8:90:8f:ed:a7:a4:
13:99:f1:0d:72:10:55:c2:29:2b:3a:f6:3d:8d:b7:d9:29:43:
01:03:a1:6c:ec:e9:be:49:91:7f:1a:a1:7b:6c:a8:b0:fb:a3:
78:11:67:47:e0:37:52:1a:5e:58:e8:5a:b8:38:36:61:14:35:
6a:8c:44:de:fb:06:28:9e:72:7e:98:08:77:96:1d:64:e5:41:
3f:80:ea:49:b9:ae:9a:48:2d:b7:63:8a:6f:65:30:5e:8b:4b:
f4:dd:e8:d0:20:d4:62:03:74:b6:7b:a9:59:73:a9:36:a5:6d:
9c:a9:5f:d0:8a:46:bc:25:01:99:eb:7b:41:9b:aa:eb:e0:ce:
f1:ea:29:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:58 2024 by rpki-client on console-ams.rpki-client.org