Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/_DC1QVtlM6j5UTNKgiN9yN4GZNA.roa
File: _DC1QVtlM6j5UTNKgiN9yN4GZNA.roa (raw, json)
Hash identifier: Keur9O4DNaWNM9e6sCaQiLidt392ktog8l9aRWQ4QFU=
Subject key identifier: FC:30:B5:41:5B:65:33:A8:F9:51:33:4A:82:23:7D:C8:DE:06:64:D0
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 018C0A4DD36C7E8CBBC8395AF5AC76AA076E
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/_DC1QVtlM6j5UTNKgiN9yN4GZNA.roa
Signing time: Sun 26 Nov 2023 06:25:21 +0000
ROA not before: Sun 26 Nov 2023 06:25:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216054
IP address blocks: 185.239.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Nov 2023 06:44:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0a:4d:d3:6c:7e:8c:bb:c8:39:5a:f5:ac:76:aa:07:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Nov 26 06:25:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc30b5415b6533a8f951334a82237dc8de0664d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0d:b0:61:b0:bf:99:08:6e:2b:e3:af:0c:38:
53:fe:e3:75:0e:59:e8:4a:b6:3d:9a:e3:d3:d5:ef:
05:14:61:20:29:7d:0f:42:30:48:cd:6e:fc:44:19:
ec:e2:c5:71:bd:b0:58:b1:16:25:d7:9d:e9:32:40:
19:10:d9:67:dc:3f:22:2e:da:1a:66:4b:64:cc:39:
ee:36:b5:0a:5b:1c:e8:9e:23:63:14:70:83:f9:ad:
6b:d2:43:c7:13:1b:a2:d8:18:5e:9f:c4:43:e1:ea:
01:a8:9d:00:86:3c:79:df:73:86:f4:f5:2c:c5:21:
7e:c6:29:6b:d9:36:59:a1:0d:bf:f9:7c:fd:05:55:
a4:61:81:59:ec:a9:ab:69:38:a2:a1:7f:07:43:58:
bc:87:09:4e:3d:1b:d2:26:cd:c4:98:64:13:f3:cb:
3a:bf:f7:43:97:90:f5:16:1b:47:46:de:5c:d6:81:
f7:98:a3:41:63:50:3d:88:99:26:24:26:b9:ee:38:
a8:e0:45:39:27:cb:e4:81:26:4c:63:e5:b3:4c:60:
50:f6:ad:1d:ac:df:a0:59:88:d4:79:5b:10:f4:35:
6c:df:c8:01:51:6b:f0:55:0a:37:63:7e:47:0f:e7:
e0:18:14:d5:4b:a9:d6:17:36:ae:86:59:c3:af:22:
8d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:30:B5:41:5B:65:33:A8:F9:51:33:4A:82:23:7D:C8:DE:06:64:D0
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/_DC1QVtlM6j5UTNKgiN9yN4GZNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.3.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c0:4b:4c:e6:2f:c7:5e:58:3a:23:20:4a:f4:c9:1e:15:37:
d6:8b:6c:62:3e:b2:78:4a:1b:9e:0c:65:88:7c:b4:82:48:ef:
72:0b:ad:40:e2:82:2b:ec:e7:9c:23:2e:c9:21:62:df:51:71:
bc:a5:99:ef:d4:8d:02:51:f1:84:62:a8:f5:b6:b7:8d:0a:09:
62:85:2d:24:d0:2b:ee:15:00:81:ff:b5:be:28:9a:16:c3:39:
c6:b5:55:9f:96:97:9c:5b:dd:30:58:af:03:e6:5b:57:de:ff:
a9:85:b2:0c:3b:36:02:61:8e:18:13:41:10:54:66:f3:b1:6b:
21:28:c9:e0:e7:ae:ce:82:22:e6:76:c1:16:b1:56:ce:e9:69:
58:d1:91:49:40:bf:5b:9c:a3:76:29:42:c1:b1:11:12:71:e2:
ca:13:9e:88:65:5e:92:44:12:8f:1f:6c:e4:37:c8:57:2a:36:
5c:6c:24:ef:ea:01:a9:16:b8:54:07:54:a0:49:fb:51:6f:08:
05:36:64:2e:09:03:10:17:a9:c5:9e:ac:ce:1b:2c:ae:a0:06:
66:b7:08:40:9b:70:af:26:ae:f2:1b:3d:1d:aa:07:ed:72:17:
e6:b5:f2:98:27:64:c3:82:e2:60:9f:55:45:45:41:51:91:03:
f0:8f:53:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:49 2024 by rpki-client on console-ams.rpki-client.org