Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/xhkFgOQG97sQ1nWl4XQWqEWy3Ug.roa
File: xhkFgOQG97sQ1nWl4XQWqEWy3Ug.roa (raw, json)
Hash identifier: fsZJq9UB8L5t9v1XkWRmt7xs7U05q82yxVuQJ7UkrjI=
Subject key identifier: C6:19:05:80:E4:06:F7:BB:10:D6:75:A5:E1:74:16:A8:45:B2:DD:48
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 018CE7190E81EFFAD07943927715A541817F
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/xhkFgOQG97sQ1nWl4XQWqEWy3Ug.roa
Signing time: Mon 08 Jan 2024 03:23:48 +0000
ROA not before: Mon 08 Jan 2024 03:23:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149457
IP address blocks: 185.202.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 02:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e7:19:0e:81:ef:fa:d0:79:43:92:77:15:a5:41:81:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Jan 8 03:23:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6190580e406f7bb10d675a5e17416a845b2dd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:c6:f7:c7:a9:dc:e4:0d:f4:8c:98:46:fa:
2c:5f:86:fd:73:f7:f9:e2:a3:64:26:1e:5c:20:be:
d1:ee:dc:30:46:1a:a0:8e:3c:52:df:11:07:3b:b9:
fb:1f:cf:f2:7c:4b:5d:45:da:5b:1a:7d:34:06:29:
3f:46:a7:c4:31:3b:ac:4d:b5:c9:82:95:1b:0e:d3:
98:20:2b:68:8e:33:92:f4:5b:8b:24:72:e9:04:78:
49:e3:e5:e2:58:a9:3f:2d:a2:94:9a:2e:fa:c7:a6:
c0:1e:9f:f6:0b:aa:4e:bb:10:1b:6a:4c:d2:c1:1c:
b5:51:17:71:c0:7d:56:60:a6:61:b1:c5:2c:e1:7f:
65:d3:5d:a7:ef:e8:40:a0:1f:3e:ae:02:7b:4d:72:
3e:f3:d2:61:83:35:19:f6:94:7e:ae:79:c2:a1:c3:
7c:67:69:6a:66:eb:56:e0:32:f0:93:7e:80:4b:ce:
7e:b7:07:04:14:17:07:b6:4a:74:80:55:ec:cc:0d:
51:bd:2d:91:53:2f:22:ed:c3:c1:34:c0:77:60:a2:
e5:5e:e1:78:8a:27:97:54:16:d4:f1:f5:41:e2:9f:
db:ba:ae:be:de:42:97:7c:50:77:27:b0:c2:6a:29:
76:39:56:0d:ec:d1:20:55:ce:f8:39:aa:e1:a1:c7:
6d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:19:05:80:E4:06:F7:BB:10:D6:75:A5:E1:74:16:A8:45:B2:DD:48
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/xhkFgOQG97sQ1nWl4XQWqEWy3Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.102.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:f5:c1:7e:3d:ad:13:4d:1e:99:fa:87:16:1a:a0:6f:c7:5f:
5e:f7:10:17:91:24:38:e5:e8:d5:fe:3b:da:91:03:56:19:a7:
d7:5a:99:3f:84:ac:7b:13:87:6a:c4:18:43:7c:7c:49:b2:f0:
cc:22:30:d3:6a:5d:0a:87:bc:90:2f:27:74:aa:0d:ab:ff:72:
5f:40:a7:37:9c:fd:b7:2f:e1:c5:d8:e5:2e:15:50:89:51:55:
54:47:94:25:24:73:c3:53:be:2f:d6:27:2d:5e:7a:a8:b9:a3:
9b:c8:15:3a:73:05:f2:20:b9:9f:f7:bc:6d:3d:62:30:08:1b:
f9:4b:2a:0d:71:b9:ae:db:8c:e9:4b:dd:b9:2f:61:32:7f:4f:
09:39:41:23:48:5f:6d:f8:05:ce:5c:83:f7:ec:de:81:53:02:
90:83:da:07:c1:f5:7d:16:54:91:43:d9:e3:1a:c3:5b:7c:c6:
78:47:f4:c6:de:7e:e0:64:f8:08:7f:8d:d8:ef:df:69:3a:bf:
ee:c5:89:13:71:ba:f8:83:2c:68:d2:ee:8c:90:26:a6:d5:94:
20:e4:db:9c:ca:67:6d:f8:38:62:10:fb:9a:77:6d:ce:d1:f7:
e9:bc:a7:8d:b8:37:c0:b0:ce:82:e3:de:b1:80:9d:fa:dd:e0:
8b:f8:78:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYznGQ6B7/rQeUOSdxWlQYF/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx
NjM2Y2QwHhcNMjQwMTA4MDMyMzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjE5MDU4MGU0MDZmN2JiMTBkNjc1YTVlMTc0MTZhODQ1YjJkZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGLG98ep3OQN9IyYRvosX4b9c/f5
4qNkJh5cIL7R7twwRhqgjjxS3xEHO7n7H8/yfEtdRdpbGn00Bik/RqfEMTusTbXJ
gpUbDtOYICtojjOS9FuLJHLpBHhJ4+XiWKk/LaKUmi76x6bAHp/2C6pOuxAbakzS
wRy1URdxwH1WYKZhscUs4X9l012n7+hAoB8+rgJ7TXI+89JhgzUZ9pR+rnnCocN8
Z2lqZutW4DLwk36AS85+twcEFBcHtkp0gFXszA1RvS2RUy8i7cPBNMB3YKLlXuF4
iieXVBbU8fVB4p/buq6+3kKXfFB3J7DCail2OVYN7NEgVc74Oarhocdt8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMYZBYDkBve7ENZ1peF0FqhFst1IMB8GA1UdIwQY
MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt
YWU1MDI3MzY4MWE3LzEveGhrRmdPUUc5N3NRMW5XbDRYUVdxRVd5M1VnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3
LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucpmMA0G
CSqGSIb3DQEBCwUAA4IBAQBd9cF+Pa0TTR6Z+ocWGqBvx19e9xAXkSQ45ejV/jva
kQNWGafXWpk/hKx7E4dqxBhDfHxJsvDMIjDTal0Kh7yQLyd0qg2r/3JfQKc3nP23
L+HF2OUuFVCJUVVUR5QlJHPDU74v1ictXnqouaObyBU6cwXyILmf97xtPWIwCBv5
SyoNcbmu24zpS925L2Eyf08JOUEjSF9t+AXOXIP37N6BUwKQg9oHwfV9FlSRQ9nj
GsNbfMZ4R/TG3n7gZPgIf43Y799pOr/uxYkTcbr4gyxo0u6MkCam1ZQg5Nucymdt
+DhiEPuad23O0ffpvKeNuDfAsM6C496xgJ363eCL+Hj3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:56 2024 by rpki-client on console-fra.rpki-client.org