Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/esSdu8z4ybkPFVloOIhkaxqjyx8.roa
File: esSdu8z4ybkPFVloOIhkaxqjyx8.roa (raw, json)
Hash identifier: uOT7JRKcAwvjhMEigEsei4MUWzKKXUU/aPTv5PvWlX0=
Subject key identifier: 7A:C4:9D:BB:CC:F8:C9:B9:0F:15:59:68:38:88:64:6B:1A:A3:CB:1F
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 018FF9768E8A86B3F51F5067ECD066E3D8A8
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/esSdu8z4ybkPFVloOIhkaxqjyx8.roa
Signing time: Sat 08 Jun 2024 20:07:27 +0000
ROA not before: Sat 08 Jun 2024 20:07:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215292
IP address blocks: 185.224.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Nov 2024 06:43:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f9:76:8e:8a:86:b3:f5:1f:50:67:ec:d0:66:e3:d8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Jun 8 20:07:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ac49dbbccf8c9b90f1559683888646b1aa3cb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0d:30:dd:ba:15:8b:ba:9c:4c:58:d6:1b:7c:
3b:a8:9f:75:98:b0:e9:55:d1:29:d8:b0:f3:82:fe:
53:22:de:35:47:21:43:68:7b:f9:60:63:23:82:b0:
82:83:b3:15:9f:59:e5:8f:f7:24:9c:45:9c:d6:4e:
64:3c:e3:f4:5d:9e:46:a2:ae:ea:fe:1b:2b:c9:37:
d5:21:c7:39:f6:5a:a9:ae:cf:0e:79:f4:40:de:47:
79:3d:34:d3:21:ed:b9:9e:fb:d1:7a:16:12:64:1d:
23:2d:87:dc:01:c4:56:34:90:30:5a:12:32:dd:6e:
91:ac:27:1f:83:16:d5:d6:fc:f2:f1:e7:cb:54:9f:
9e:87:15:8b:ee:84:9c:57:6a:f3:dd:1a:8f:f2:d8:
96:b5:3f:0b:e0:8b:d7:59:a6:a1:a8:31:10:2c:76:
23:71:8a:62:64:73:77:e0:1f:10:42:7a:c4:5c:18:
b4:30:6c:28:64:e0:ab:c8:39:d7:e5:b7:4d:7e:d2:
7b:f4:e0:fa:ab:48:e5:12:b1:0e:d4:d3:c9:85:f5:
c0:8f:9f:83:f5:6c:26:66:97:e9:0f:00:2f:f0:7c:
01:82:03:12:38:ee:55:ea:32:01:7e:6d:ae:bd:a6:
b2:6f:28:7d:09:c2:c6:15:00:26:e6:d6:63:3f:77:
d4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C4:9D:BB:CC:F8:C9:B9:0F:15:59:68:38:88:64:6B:1A:A3:CB:1F
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/esSdu8z4ybkPFVloOIhkaxqjyx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.3.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:fc:e0:dc:28:65:bc:2f:94:9b:7c:8f:fc:18:8d:bc:ad:4c:
ab:6a:02:5d:a8:ab:d7:78:4c:99:bd:99:6a:09:7b:8a:b2:74:
57:a4:6b:dd:e1:23:a5:8a:bb:53:a5:e8:49:ba:0e:73:3c:1a:
e5:e3:06:3a:80:eb:cd:54:6b:e0:d5:d6:50:ef:5e:2a:6a:de:
49:2e:14:9b:1f:00:2e:2f:08:f2:7a:e9:73:76:8e:bb:51:b6:
48:cf:2e:4e:d2:9b:06:00:e6:01:f6:42:53:f0:1b:c6:6e:90:
57:40:99:cd:b1:20:31:fb:53:88:a2:70:3b:b1:ee:3e:1a:a1:
6e:b3:f5:62:3d:6d:00:43:32:d2:e1:ef:83:0a:30:4c:b3:a3:
48:28:c4:a8:d5:cd:87:39:27:3b:e8:ca:b9:be:d2:fa:38:f4:
f9:32:a1:70:95:71:81:a6:67:e9:56:b7:c2:78:f0:b4:b8:23:
ea:71:c5:5f:1c:47:ce:36:15:81:cb:7b:07:b2:53:ca:01:84:
9f:0e:75:89:88:c0:5e:f5:28:5b:5c:9b:32:e6:06:10:29:f2:
b7:a2:fa:80:05:75:1c:c1:08:87:a2:79:18:b4:e9:4d:67:91:
e2:bf:f5:d7:02:f5:1e:4f:72:9f:a0:16:de:d6:3b:9f:7c:77:
f4:3b:8f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 08:39:23 2024 by rpki-client on console-fra.rpki-client.org