Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/4hK99OBdSg05TEap9LvQ5q-wK9M.roa
File: 4hK99OBdSg05TEap9LvQ5q-wK9M.roa (raw, json)
Hash identifier: m+d5ZV6OZ9MXrBEQ35hcfZ33juW4fFOOXvb9vyUTJfE=
Subject key identifier: E2:12:BD:F4:E0:5D:4A:0D:39:4C:46:A9:F4:BB:D0:E6:AF:B0:2B:D3
Certificate issuer: /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial: 018572D5CF813E8227E9B464488E86D8D2E6
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/4hK99OBdSg05TEap9LvQ5q-wK9M.roa
Signing time: Mon 02 Jan 2023 14:14:52 +0000
ROA not before: Mon 02 Jan 2023 14:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34370
IP address blocks: 185.164.78.0/24 maxlen: 24
185.164.76.0/24 maxlen: 24
185.164.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Jun 2023 06:10:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:cf:81:3e:82:27:e9:b4:64:48:8e:86:d8:d2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Validity
Not Before: Jan 2 14:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e212bdf4e05d4a0d394c46a9f4bbd0e6afb02bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:df:00:73:96:e6:a8:7a:4b:57:ab:cb:13:
f2:81:f0:d4:c3:a4:2b:90:fe:dd:d6:16:e0:16:93:
cc:a1:60:ff:0e:ef:3f:bd:d6:cf:da:40:75:6d:d3:
5a:b6:bd:3d:02:00:10:f9:1b:42:62:90:97:14:2c:
23:12:d7:f1:17:31:da:59:7d:08:87:25:1f:95:28:
bb:41:e1:98:c5:43:98:c6:d7:45:1c:74:62:d8:04:
ef:bd:4b:37:2b:41:d7:9a:35:20:7b:84:c3:9b:62:
e9:92:41:23:21:f9:98:c0:6f:5b:a4:1a:eb:45:ed:
41:c5:8f:4b:02:45:6d:f7:4d:f3:5b:d5:5a:da:32:
3c:48:4a:ac:d9:9e:01:fc:2b:b0:06:40:57:40:67:
1f:29:ce:ed:ab:ab:cc:a0:da:81:b2:f9:76:c0:3e:
de:39:a0:33:e8:ae:36:18:0e:64:aa:2c:2e:d5:b0:
47:b4:99:2f:d9:24:33:eb:c8:6b:ef:9f:e4:9e:24:
aa:2d:ac:99:70:55:82:98:17:1f:2f:54:37:d9:b1:
56:c2:79:cf:1b:99:1f:66:85:89:c1:5b:db:43:03:
e3:2f:6b:49:56:b1:94:07:5f:ff:33:85:25:39:bd:
05:0d:c6:dd:8e:7e:be:c7:f0:47:2c:d7:09:44:e0:
1f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:12:BD:F4:E0:5D:4A:0D:39:4C:46:A9:F4:BB:D0:E6:AF:B0:2B:D3
X509v3 Authority Key Identifier:
keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/4hK99OBdSg05TEap9LvQ5q-wK9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.76.0-185.164.78.255
Signature Algorithm: sha256WithRSAEncryption
3d:43:74:80:66:61:d3:4c:d9:92:4a:da:1b:36:fc:18:6f:eb:
a3:d9:c2:6b:b8:3f:6c:7d:71:24:48:b8:9d:2b:43:1a:6d:a6:
4d:d8:fb:94:36:70:b4:76:6e:00:b3:80:e6:c7:b9:2c:ab:50:
c7:7b:50:9a:34:8e:d9:a3:73:89:cc:39:53:10:27:b5:e9:d0:
91:54:bc:58:25:d2:0f:1c:f6:a2:36:de:a2:9a:34:78:ec:b7:
47:b3:b0:ae:fa:05:71:2b:11:a4:9c:0f:ed:5c:63:ed:69:6e:
f7:72:04:c3:e6:c8:f6:1d:ea:b2:7f:b2:7a:ab:0b:20:0b:c9:
38:85:5b:b9:58:a8:8a:60:28:e9:c2:69:f3:7c:bf:f4:27:44:
35:bb:e2:71:b0:47:8e:e8:00:25:38:b6:eb:63:3e:8e:5e:c1:
40:3d:f4:45:f3:b6:68:00:ba:27:88:ca:ad:9a:95:60:72:8e:
10:41:15:1c:bf:63:4d:db:bb:d2:ed:79:00:24:80:09:8b:f0:
81:3b:fc:87:27:02:ee:ee:6f:9e:af:5e:ac:2c:6d:92:c3:95:
62:3c:98:9c:a5:37:47:82:22:9c:a4:bd:e8:b7:40:28:39:3d:
5a:a8:24:5d:54:bd:9b:b0:bc:bf:b0:85:62:8a:af:af:53:57:
1e:35:b7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:28 2024 by rpki-client on console-ams.rpki-client.org