Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/d3m-8VJo1etsr8WtD9V46B3BxCM.roa
File: d3m-8VJo1etsr8WtD9V46B3BxCM.roa (raw, json)
Hash identifier: 5uA8sNMmeyzOuzrGYweDccZTG3JqG79Bq/rUhpvllRk=
Subject key identifier: 77:79:BE:F1:52:68:D5:EB:6C:AF:C5:AD:0F:D5:78:E8:1D:C1:C4:23
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 018712549A656D018A92740AF2229E06806E
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/d3m-8VJo1etsr8WtD9V46B3BxCM.roa
Signing time: Fri 24 Mar 2023 06:35:47 +0000
ROA not before: Fri 24 Mar 2023 06:35:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204770
IP address blocks: 185.8.106.0/23 maxlen: 32
2a02:ae02::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 11 Oct 2023 09:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:12:54:9a:65:6d:01:8a:92:74:0a:f2:22:9e:06:80:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Mar 24 06:35:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7779bef15268d5eb6cafc5ad0fd578e81dc1c423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:38:5e:9c:6a:4d:ed:06:53:bd:d9:43:9e:
94:d3:bf:8b:63:8b:e2:f3:4b:70:3f:51:3f:88:4b:
af:e2:39:7d:39:28:f0:31:1f:fc:ac:70:a0:67:f9:
bd:f2:9d:a6:3d:12:30:b2:12:0c:d8:5f:e9:d0:40:
1f:ed:70:ff:b1:33:87:78:95:55:fb:27:55:f2:37:
44:47:27:ab:ce:8d:dc:d2:c0:f1:71:2a:b2:22:94:
62:92:c8:19:6c:94:9c:15:93:37:7c:ea:04:16:16:
3d:54:26:2c:40:ea:38:c5:fb:11:1d:b2:85:49:d7:
08:bf:ed:fd:fb:38:94:de:b1:ad:3f:ab:8e:19:d0:
7e:2c:7c:0f:98:f1:42:51:01:c8:ab:6a:1e:c8:2e:
ec:a5:62:ef:92:4d:1f:ca:1f:fc:d8:ea:32:c3:cb:
9c:5c:09:b1:77:29:42:1f:d3:9d:28:0a:25:98:43:
e6:fb:a9:dc:e2:7a:ef:86:6a:3f:ce:f1:7c:60:a6:
4e:95:b1:59:36:09:31:7a:46:1c:9d:90:6a:31:7b:
d1:2a:c9:fc:75:f3:5c:1f:b6:e2:20:c0:35:de:bb:
0b:80:ad:49:15:3c:59:51:f5:c0:50:bc:8d:ab:8b:
2c:50:a0:d0:2f:6d:e6:a5:05:40:b9:06:41:96:52:
dc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:79:BE:F1:52:68:D5:EB:6C:AF:C5:AD:0F:D5:78:E8:1D:C1:C4:23
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/d3m-8VJo1etsr8WtD9V46B3BxCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.106.0/23
IPv6:
2a02:ae02::/32
Signature Algorithm: sha256WithRSAEncryption
c1:3d:c5:72:d2:3d:fc:24:da:b7:ae:64:56:0c:d7:40:8e:c6:
5c:8c:fc:49:a3:3b:40:01:6a:1d:37:c1:49:99:25:f7:ac:4d:
f3:5c:a1:57:fe:5b:0a:d0:dc:3e:e4:5c:68:e8:c8:dd:55:7e:
f6:62:7a:a7:86:55:a8:4e:7c:3e:04:62:f2:b7:38:94:80:c0:
f2:5b:ab:94:a3:fc:ad:c1:2b:48:a7:bb:e3:3d:80:ba:d1:c6:
77:ba:35:82:4e:ff:2a:91:8f:e5:7a:d6:5c:01:e3:14:e4:75:
ee:fb:97:f6:6d:73:d9:80:27:46:82:21:fc:34:81:9c:77:dc:
4c:9c:1f:86:df:07:48:88:ad:ae:fc:8a:cc:9f:83:c7:30:e6:
35:f8:b6:96:c6:5b:0f:5e:ba:0f:ec:dc:19:f9:ed:ea:72:7a:
ff:44:9f:86:31:a8:7f:b5:e6:4a:0a:1d:5c:a8:a5:0a:30:bc:
46:4f:5d:6d:b5:e6:ab:99:37:f2:ab:c4:b6:45:b8:be:69:1e:
83:90:56:10:e2:a7:06:83:ef:26:83:d3:af:fb:d4:dc:7b:a8:
56:15:2d:51:7f:a8:61:7f:db:1f:80:6e:09:c1:2a:c3:50:b8:
d8:13:e1:f6:d6:a5:59:6b:83:db:43:5c:27:b8:a7:e4:14:b7:
09:22:7e:10
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYcSVJplbQGKknQK8iKeBoBuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MzNhZTFjNjA2NzJjNzU5MWE4Zjk3ZDY4Zjc5ZmIyYTVl
ZThkYTcwHhcNMjMwMzI0MDYzNTQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Nzc5YmVmMTUyNjhkNWViNmNhZmM1YWQwZmQ1NzhlODFkYzFjNDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWw4XpxqTe0GU73ZQ56U07+LY4vi
80twP1E/iEuv4jl9OSjwMR/8rHCgZ/m98p2mPRIwshIM2F/p0EAf7XD/sTOHeJVV
+ydV8jdERyerzo3c0sDxcSqyIpRiksgZbJScFZM3fOoEFhY9VCYsQOo4xfsRHbKF
SdcIv+39+ziU3rGtP6uOGdB+LHwPmPFCUQHIq2oeyC7spWLvkk0fyh/82Ooyw8uc
XAmxdylCH9OdKAolmEPm+6nc4nrvhmo/zvF8YKZOlbFZNgkxekYcnZBqMXvRKsn8
dfNcH7biIMA13rsLgK1JFTxZUfXAULyNq4ssUKDQL23mpQVAuQZBllLcZwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHd5vvFSaNXrbK/FrQ/VeOgdwcQjMB8GA1UdIwQY
MBaAFDQzrhxgZyx1kaj5fWj3n7Kl7o2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYt
MzBjZTgzNzAxYjM5LzEvZDNtLThWSm8xZXRzcjhXdEQ5VjQ2QjNCeENNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYtMzBjZTgzNzAxYjM5
LzEvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuQhqMA0E
AgACMAcDBQAqAq4CMA0GCSqGSIb3DQEBCwUAA4IBAQDBPcVy0j38JNq3rmRWDNdA
jsZcjPxJoztAAWodN8FJmSX3rE3zXKFX/lsK0Nw+5Fxo6MjdVX72YnqnhlWoTnw+
BGLytziUgMDyW6uUo/ytwStIp7vjPYC60cZ3ujWCTv8qkY/letZcAeMU5HXu+5f2
bXPZgCdGgiH8NIGcd9xMnB+G3wdIiK2u/IrMn4PHMOY1+LaWxlsPXroP7NwZ+e3q
cnr/RJ+GMah/teZKCh1cqKUKMLxGT11ttearmTfyq8S2Rbi+aR6DkFYQ4qcGg+8m
g9Ov+9Tce6hWFS1Rf6hhf9sfgG4JwSrDULjYE+H21qVZa4PbQ1wnuKfkFLcJIn4Q
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:13 2024 by rpki-client on console-fra.rpki-client.org