Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/3jbCZqtqF8UtWELf6UYtBsqc6oM.roa
File: 3jbCZqtqF8UtWELf6UYtBsqc6oM.roa (raw, json)
Hash identifier: tMAhKcxYyolATcaGuIFmD3ro+z9lOUlwB6fUxUVRL2g=
Subject key identifier: DE:36:C2:66:AB:6A:17:C5:2D:58:42:DF:E9:46:2D:06:CA:9C:EA:83
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018E08D48628BCB2EECD551569E448D270A7
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/3jbCZqtqF8UtWELf6UYtBsqc6oM.roa
Signing time: Mon 04 Mar 2024 09:38:49 +0000
ROA not before: Mon 04 Mar 2024 09:38:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64494
IP address blocks: 185.161.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 15:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:08:d4:86:28:bc:b2:ee:cd:55:15:69:e4:48:d2:70:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 4 09:38:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de36c266ab6a17c52d5842dfe9462d06ca9cea83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:be:43:47:f5:12:05:54:98:bb:07:74:f9:aa:
76:0e:45:45:04:69:e9:e7:18:79:ef:d0:8b:8c:fd:
9c:b3:c4:20:66:ab:7a:c2:10:03:69:2b:9c:0f:47:
da:54:51:f8:73:14:93:ff:44:9c:57:db:61:94:a4:
42:03:20:39:65:16:f2:f5:73:ed:3e:8f:71:3c:f9:
2f:0c:a6:5e:9f:f5:8c:cb:69:a3:34:df:e9:aa:03:
58:1d:fa:dd:b3:0e:80:81:fb:f7:65:9b:a8:8a:44:
19:a4:16:6f:53:6a:7c:e6:3a:f3:84:d4:1e:a5:78:
6c:11:fe:a0:06:30:51:45:7b:ae:98:98:6f:98:76:
4c:86:e8:3a:6c:ca:55:9d:fc:b4:f3:e7:68:d0:7c:
cf:f5:55:82:11:c9:21:a2:d3:7f:5e:e2:a3:11:4b:
04:eb:88:9e:09:1c:4c:d0:40:92:ce:7d:8c:ad:93:
06:4b:07:6f:71:5d:78:8f:ce:83:9e:c5:e1:02:16:
93:75:a9:4c:ee:37:fc:dc:cd:e1:a1:60:08:78:7f:
2d:01:b0:b3:e2:10:02:cb:21:85:70:70:a8:1d:f9:
45:72:55:7c:a9:ef:18:83:7f:26:dc:e9:4d:ce:00:
55:48:94:4b:6a:1b:17:2c:92:ce:18:8e:ca:af:4e:
9d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:36:C2:66:AB:6A:17:C5:2D:58:42:DF:E9:46:2D:06:CA:9C:EA:83
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/3jbCZqtqF8UtWELf6UYtBsqc6oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.79.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:6f:5e:55:de:3a:29:4f:cd:12:39:f1:1f:8a:aa:58:75:a3:
6a:b0:b8:ce:0d:d7:9c:1d:8d:93:87:22:37:88:57:ad:05:e8:
ae:21:0f:fc:da:6a:49:56:89:32:be:94:70:c0:80:5e:ef:13:
cf:d2:0c:bb:51:5d:4b:90:0c:a4:55:4f:66:14:72:94:e0:24:
5e:39:ff:cc:d4:d7:b1:92:5d:3f:24:90:63:0a:72:d5:f5:2a:
08:58:42:d1:c7:fe:5a:c4:df:bc:e6:67:9a:fe:cc:25:b2:7c:
b8:4f:73:71:ef:33:7b:fc:75:eb:47:40:28:24:db:c0:90:1d:
0c:4f:f3:43:ef:d2:0d:be:a5:f2:bb:84:1f:ee:66:dc:2b:0f:
a3:53:40:88:4c:39:5a:e5:b6:41:60:ab:65:eb:ee:db:7c:f1:
e0:c4:b2:43:ac:9b:60:ef:58:08:8c:cc:88:ba:90:9f:08:ea:
fe:8b:f5:b6:71:b2:25:b4:44:90:86:14:07:1e:77:bc:92:27:
13:1a:10:ef:52:0d:7a:86:d7:5e:de:0e:8f:39:a1:d4:70:f0:
a7:51:bb:d8:fe:f2:37:c1:5b:f3:c2:50:28:c3:21:c2:a1:44:
e9:2d:47:97:3d:41:3c:4a:db:da:3d:8f:da:c2:c0:f0:ea:05:
33:63:bf:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:22 2024 by rpki-client on console-fra.rpki-client.org