Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/Kq_vd5YHIwjUKkjbDDV4V6x1XN4.roa
File: Kq_vd5YHIwjUKkjbDDV4V6x1XN4.roa (raw, json)
Hash identifier: sT1VDTLT0Kw7RWt3m9uRVheMm0TZsfSPVXKNrONnAdU=
Subject key identifier: 2A:AF:EF:77:96:07:23:08:D4:2A:48:DB:0C:35:78:57:AC:75:5C:DE
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 018CC5DC335128A60E77C029CC51ED7030FB
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/Kq_vd5YHIwjUKkjbDDV4V6x1XN4.roa
Signing time: Mon 01 Jan 2024 16:29:51 +0000
ROA not before: Mon 01 Jan 2024 16:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216054
IP address blocks: 185.239.3.0/24 maxlen: 24
185.3.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 07:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:33:51:28:a6:0e:77:c0:29:cc:51:ed:70:30:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 1 16:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2aafef7796072308d42a48db0c357857ac755cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:fd:3f:29:a9:71:ab:93:a9:c8:86:b4:1d:
3b:38:f5:0e:c3:8c:f7:65:db:f0:df:6f:b2:fe:9b:
9b:21:40:17:2c:7f:b5:66:a5:da:18:21:f6:cf:79:
c2:1d:4c:b7:8f:5f:1e:11:09:1f:f1:70:24:16:4b:
3e:14:88:c7:98:8f:5d:f9:8a:d0:f7:d4:45:da:8b:
73:3f:ff:83:d5:aa:c2:c5:94:9a:03:b6:fc:e1:74:
ae:50:4c:d5:3d:81:e3:1a:e0:a0:71:0a:4b:f6:98:
cc:c1:54:9b:24:13:e6:94:92:45:97:dc:9c:e3:11:
4a:ee:74:19:f9:79:f9:49:ac:3b:8c:b1:ea:be:86:
fa:58:5e:37:d7:e3:ff:9b:d5:5f:bb:be:22:94:1b:
0c:89:50:82:f3:3c:72:ac:ea:94:0f:31:70:bf:61:
62:33:52:d6:14:8b:f9:67:ea:91:d5:30:b8:67:10:
06:ab:6b:9a:13:56:c4:27:28:b1:a8:63:5a:7b:e7:
11:23:b9:d7:91:e0:7e:d9:80:49:71:81:4a:6b:78:
10:d8:70:f0:e1:57:e3:df:d6:f0:e8:10:5c:ea:6b:
1b:13:04:e4:3d:50:40:de:16:3b:11:cd:10:e6:5d:
56:70:8c:0c:df:01:6a:b2:f8:97:ac:80:0e:b0:ae:
1b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AF:EF:77:96:07:23:08:D4:2A:48:DB:0C:35:78:57:AC:75:5C:DE
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/Kq_vd5YHIwjUKkjbDDV4V6x1XN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.200.0/24
185.239.3.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:13:9b:26:c1:3b:df:7e:3f:09:d6:79:04:00:2a:ff:fb:4d:
cf:43:42:cf:da:f3:86:06:75:d2:a8:61:e4:38:7a:f4:1d:53:
63:05:2f:12:94:4f:8e:1d:b3:b5:d3:dc:95:e4:b8:b5:e5:57:
9c:2c:87:c2:c2:5e:44:83:e2:4c:87:20:a4:f3:56:9d:aa:d9:
0a:42:b8:6b:04:67:50:2b:43:04:e4:5f:0d:e8:59:98:a3:a7:
ad:08:ca:50:e9:54:05:ca:45:30:13:f8:09:6a:b4:1b:8e:11:
a9:6d:ea:9e:07:2e:38:4e:83:91:23:c9:a4:14:1a:03:4c:ea:
17:90:93:fe:f7:16:e2:98:8f:c3:79:c9:08:7f:3d:e3:86:22:
26:ac:96:d8:5c:a6:50:b3:f3:50:77:b4:d3:70:45:d4:21:58:
bd:aa:82:31:48:85:2a:40:5d:34:50:d2:86:5f:ec:c3:c9:6c:
c1:95:68:8b:e7:78:ce:99:89:cb:f1:a3:36:c5:6d:1b:85:fb:
c8:02:6c:b7:6d:27:a0:fd:84:bf:96:90:36:c5:f2:0f:b0:08:
f2:92:8e:2c:ab:8e:23:77:8e:07:c5:bf:21:9b:9b:4e:18:51:
73:1b:8d:8d:62:be:5b:a5:3b:32:b9:58:12:16:40:1c:d2:a3:
e7:4d:1b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 12:41:16 2024 by rpki-client on console-fra.rpki-client.org