Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/J6UV3yesj-EsMLy0hGeJD8GUxEA.roa
File: J6UV3yesj-EsMLy0hGeJD8GUxEA.roa (raw, json)
Hash identifier: 3zj8CkcraSlGmlpX2uZf1UmGTHwXC2AoCBbHfOT7hf8=
Subject key identifier: 27:A5:15:DF:27:AC:8F:E1:2C:30:BC:B4:84:67:89:0F:C1:94:C4:40
Certificate issuer: /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Certificate serial: 01856F14B1329F38F2C76631017F1F463E18
Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/J6UV3yesj-EsMLy0hGeJD8GUxEA.roa
Signing time: Sun 01 Jan 2023 20:45:05 +0000
ROA not before: Sun 01 Jan 2023 20:45:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 185.161.150.0/24 maxlen: 24
185.161.151.0/24 maxlen: 24
185.238.177.0/24 maxlen: 24
185.238.179.0/24 maxlen: 24
185.180.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Nov 2023 13:54:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:b1:32:9f:38:f2:c7:66:31:01:7f:1f:46:3e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Validity
Not Before: Jan 1 20:45:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27a515df27ac8fe12c30bcb48467890fc194c440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:03:09:ee:39:e3:53:6d:e2:1a:fb:05:83:c0:
db:23:e1:bd:42:36:10:f5:ec:f0:c8:09:73:de:00:
78:53:03:66:80:09:2f:20:fa:ac:56:63:06:c0:cd:
cc:31:7e:fd:82:a5:8c:5a:84:d4:ee:f2:72:da:14:
a7:db:da:bd:db:35:3d:38:8d:bd:25:aa:9c:1b:f5:
0e:13:fd:1a:9d:da:92:84:18:c5:ec:8a:d1:42:86:
d9:14:6c:c5:a3:27:8e:79:a6:e0:66:ee:1c:a9:64:
44:cb:8d:ab:c8:e2:17:16:95:a5:82:9e:ea:0b:86:
0f:9e:81:de:53:44:4f:bd:fc:3d:38:2d:69:33:84:
5e:5e:8c:e1:0a:21:60:bd:59:3a:94:b5:68:86:82:
a5:93:e1:64:2d:ae:db:42:33:9e:c1:04:7f:98:7e:
94:ca:98:6c:b1:8f:8c:97:e6:10:73:10:83:17:34:
c8:32:4d:29:4f:b5:15:1c:41:83:95:54:10:39:43:
47:b8:ea:75:00:66:0f:92:11:23:b6:d5:75:97:92:
26:45:12:16:6a:b3:8e:e8:44:ba:68:c2:c2:f6:7e:
5c:e2:d4:9e:19:dd:1e:8c:3a:cf:c2:24:89:85:68:
43:57:24:b5:01:a5:49:68:b6:db:28:98:8e:0f:06:
8d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A5:15:DF:27:AC:8F:E1:2C:30:BC:B4:84:67:89:0F:C1:94:C4:40
X509v3 Authority Key Identifier:
keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/J6UV3yesj-EsMLy0hGeJD8GUxEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.150.0/23
185.180.193.0/24
185.238.177.0/24
185.238.179.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:33:86:35:c5:08:5e:8f:0f:52:b1:19:69:c2:68:74:7b:d3:
f1:7a:c9:ea:78:d2:ff:a0:d9:0b:88:7b:a9:83:bd:03:e0:b4:
ff:00:59:c5:2f:e9:03:21:75:de:68:63:a0:24:38:63:da:54:
1e:62:98:ed:82:95:b3:f3:2c:32:09:03:47:92:21:cb:b9:c4:
0e:2d:7f:61:6f:52:7c:96:84:4c:e2:2b:9f:d7:a9:6a:b0:d5:
c4:dd:e7:f7:aa:d7:63:e2:87:6f:3d:39:14:88:9c:89:5e:24:
aa:80:e8:3b:bf:0c:b8:c6:62:64:55:b4:e0:5e:c7:76:81:24:
fb:9b:b6:d1:73:b0:3a:6f:60:cc:9c:78:77:e3:cc:7b:b3:ca:
c3:64:f0:d7:76:36:8f:e6:6f:85:a0:58:18:de:0c:28:8c:3e:
4a:8d:28:4d:c5:c6:ee:6f:b6:55:4c:ae:ea:23:0d:80:24:4a:
23:8a:a5:45:40:ff:0d:53:9f:6c:72:85:7e:70:70:7f:f4:ac:
1f:09:76:6e:d9:d0:d5:4b:e4:39:d2:89:67:51:39:55:10:c3:
b8:34:41:9c:cd:81:cc:68:32:e7:cf:4a:33:ca:09:33:ac:9b:
f8:b3:70:b1:10:92:da:c0:57:ce:a7:12:a0:03:db:fa:eb:e1:
ed:6a:08:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:48 2024 by rpki-client on console-fra.rpki-client.org