Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/3uQKemjL18tmkJ-BI-gAqiQ7kIE.roa
File: 3uQKemjL18tmkJ-BI-gAqiQ7kIE.roa (raw, json)
Hash identifier: Hid/fsjqZHWFc6aGxV+9ZuDV1f3MdG7jEq6vdN5T88E=
Subject key identifier: DE:E4:0A:7A:68:CB:D7:CB:66:90:9F:81:23:E8:00:AA:24:3B:90:81
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 018CC424FBDE47552C6FBE389545A1F3CC91
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/3uQKemjL18tmkJ-BI-gAqiQ7kIE.roa
Signing time: Mon 01 Jan 2024 08:30:07 +0000
ROA not before: Mon 01 Jan 2024 08:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213107
IP address blocks: 185.88.175.0/24 maxlen: 24
185.98.63.0/24 maxlen: 24
185.86.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Sep 2024 15:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:fb:de:47:55:2c:6f:be:38:95:45:a1:f3:cc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 08:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dee40a7a68cbd7cb66909f8123e800aa243b9081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6d:bc:b2:ef:00:cb:03:72:3e:de:79:ab:86:
ca:14:61:32:de:d9:db:e0:00:bd:bc:57:38:19:79:
45:30:c7:76:75:49:47:94:0c:99:67:4e:f0:67:ce:
f7:e0:13:37:19:55:3a:72:e3:d0:d7:72:24:51:76:
ba:47:88:4a:74:36:5f:48:86:72:95:cb:12:46:36:
c5:e9:28:65:19:c7:8a:56:9f:04:b9:0c:16:d7:ba:
db:7a:cf:54:ab:45:32:56:2d:52:4e:b7:a0:e7:1b:
b7:80:51:f2:67:f1:83:29:a8:15:29:75:91:ff:5e:
7b:ab:fa:cf:a3:6a:04:59:be:d2:b3:b7:17:ea:e5:
e0:3a:50:7d:87:14:9a:57:82:42:2c:e9:b0:2c:fe:
fb:d6:78:ee:2f:ef:88:c4:f1:c6:b6:c7:15:4f:97:
2f:01:ae:6a:5d:09:a1:29:d6:44:46:6c:fb:26:6d:
9a:78:9f:ec:b3:f0:cc:18:18:5e:c7:c3:bd:69:ae:
69:76:5d:fa:e8:b9:cc:a6:07:bb:76:fd:ce:e5:16:
5d:8d:d7:79:49:89:36:8a:56:14:59:92:8e:67:42:
5f:8b:6e:b8:93:b4:50:8d:98:cf:bc:db:a3:e4:66:
d5:75:b4:54:88:d7:a6:6a:ed:e5:68:66:95:42:35:
56:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E4:0A:7A:68:CB:D7:CB:66:90:9F:81:23:E8:00:AA:24:3B:90:81
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/3uQKemjL18tmkJ-BI-gAqiQ7kIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.14.0/24
185.88.175.0/24
185.98.63.0/24
Signature Algorithm: sha256WithRSAEncryption
70:be:4f:ac:81:04:6b:ea:a8:62:96:33:57:19:10:32:c7:65:
f3:11:c5:80:22:f5:d3:dc:13:49:29:44:7a:8d:c9:7f:66:6e:
0b:4b:44:11:9e:74:07:d9:0c:d7:a8:75:2d:a1:50:5a:24:12:
eb:aa:54:8d:18:a8:60:48:1c:6f:d8:5b:83:e8:51:42:48:69:
d0:cb:74:68:43:19:8e:a7:87:9e:0e:be:ce:63:d2:60:df:2d:
85:c2:e7:1e:9c:20:aa:d1:df:06:c5:c5:1d:66:f1:28:9b:d9:
0f:35:68:0e:60:b3:4e:fc:07:0c:e9:51:ef:51:1c:b6:86:53:
c3:b0:e0:6c:aa:06:20:e4:f4:45:1d:9c:06:41:fb:98:48:74:
9d:84:7b:38:7e:7b:2f:0e:cb:75:ae:7a:4a:28:2e:45:94:38:
0b:bd:f4:45:47:4e:b3:30:47:35:79:de:24:a2:42:2c:f0:62:
53:dd:b6:ac:6c:4c:b7:e0:1a:2b:e2:60:8a:3b:69:fc:50:2b:
b5:f4:5c:01:ea:32:45:38:bb:c5:86:e0:09:37:cc:89:8d:f2:
bf:2d:f9:63:5a:8d:89:0f:a8:ae:5e:e5:d1:38:af:49:20:6c:
f0:d0:c2:31:5c:7b:56:99:b6:fe:aa:78:bd:ff:eb:0e:89:6f:
fa:75:d8:e4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzEJPveR1Usb744lUWh88yRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjQwMTAxMDgzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWU0MGE3YTY4Y2JkN2NiNjY5MDlmODEyM2U4MDBhYTI0M2I5MDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG28su8AywNyPt55q4bKFGEy3tnb
4AC9vFc4GXlFMMd2dUlHlAyZZ07wZ8734BM3GVU6cuPQ13IkUXa6R4hKdDZfSIZy
lcsSRjbF6ShlGceKVp8EuQwW17rbes9Uq0UyVi1STreg5xu3gFHyZ/GDKagVKXWR
/157q/rPo2oEWb7Ss7cX6uXgOlB9hxSaV4JCLOmwLP771njuL++IxPHGtscVT5cv
Aa5qXQmhKdZERmz7Jm2aeJ/ss/DMGBhex8O9aa5pdl366LnMpge7dv3O5RZdjdd5
SYk2ilYUWZKOZ0Jfi264k7RQjZjPvNuj5GbVdbRUiNemau3laGaVQjVWrwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFN7kCnpoy9fLZpCfgSPoAKokO5CBMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvM3VRS2VtakwxOHRta0otQkktZ0FxaVE3a0lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuVYOAwQA
uVivAwQAuWI/MA0GCSqGSIb3DQEBCwUAA4IBAQBwvk+sgQRr6qhiljNXGRAyx2Xz
EcWAIvXT3BNJKUR6jcl/Zm4LS0QRnnQH2QzXqHUtoVBaJBLrqlSNGKhgSBxv2FuD
6FFCSGnQy3RoQxmOp4eeDr7OY9Jg3y2FwucenCCq0d8GxcUdZvEom9kPNWgOYLNO
/AcM6VHvURy2hlPDsOBsqgYg5PRFHZwGQfuYSHSdhHs4fnsvDst1rnpKKC5FlDgL
vfRFR06zMEc1ed4kokIs8GJT3basbEy34Bor4mCKO2n8UCu19FwB6jJFOLvFhuAJ
N8yJjfK/LfljWo2JD6iuXuXROK9JIGzw0MIxXHtWmbb+qni9/+sOiW/6ddjk
-----END CERTIFICATE-----
Generated at Sun Sep 1 16:40:29 2024 by rpki-client on console-fra.rpki-client.org