Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/QORjix6vvn9t-PE9p8u0Agcdgho.roa
File: QORjix6vvn9t-PE9p8u0Agcdgho.roa (raw, json)
Hash identifier: sDVPZ5LbeyYbXq9hn2BUxrucgOZyEtWbCTlv65z7iYA=
Subject key identifier: 40:E4:63:8B:1E:AF:BE:7F:6D:F8:F1:3D:A7:CB:B4:02:07:1D:82:1A
Certificate issuer: /CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c
Certificate serial: 0189BA6F842D2ADC81F64D896B5033AF47FA
Authority key identifier: D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/QORjix6vvn9t-PE9p8u0Agcdgho.roa
Signing time: Thu 03 Aug 2023 08:06:57 +0000
ROA not before: Thu 03 Aug 2023 08:06:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212881
IP address blocks: 185.40.107.0/24 maxlen: 24
2a0c:ef00::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:6f:84:2d:2a:dc:81:f6:4d:89:6b:50:33:af:47:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c
Validity
Not Before: Aug 3 08:06:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40e4638b1eafbe7f6df8f13da7cbb402071d821a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:59:7c:77:99:d6:61:80:47:2d:8b:4b:2b:
3f:ce:4b:b7:45:bc:84:ba:f9:bd:73:4a:57:f5:8c:
89:dd:50:f0:c6:25:e3:0c:25:10:c3:ad:26:36:61:
31:87:d4:90:e2:cf:47:8e:fe:b6:53:f8:fb:b7:8a:
e3:40:cb:20:4a:cb:9f:38:84:27:ee:37:5f:86:1e:
49:71:fc:93:d9:8c:56:00:53:11:51:75:02:b4:bc:
3e:96:3a:46:1b:e8:50:a8:21:4d:77:69:f4:26:27:
32:d5:c5:8f:d8:d1:8b:91:17:55:b1:0b:04:a4:23:
c8:d5:b1:56:f8:be:85:76:7d:64:ea:89:a3:14:de:
2f:00:9c:fc:79:1d:35:83:e0:57:c9:6e:cd:29:51:
39:2d:a4:92:41:6a:87:58:65:ad:6e:1d:42:be:ae:
1d:0d:fb:92:bf:c5:f7:3f:51:d6:ac:f4:84:cf:d8:
22:c5:28:86:b3:4a:2a:a6:b3:9a:75:9c:33:cf:04:
dc:70:e4:dc:27:95:2f:19:05:bc:84:cd:6f:37:0d:
73:6c:cd:e4:09:81:66:11:c1:42:4e:e2:db:02:d6:
7f:9d:84:c2:1d:66:34:cb:2d:72:b8:03:0a:b7:44:
f4:91:bd:88:ae:44:be:37:5a:4e:dc:97:3d:67:cb:
d7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E4:63:8B:1E:AF:BE:7F:6D:F8:F1:3D:A7:CB:B4:02:07:1D:82:1A
X509v3 Authority Key Identifier:
keyid:D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/QORjix6vvn9t-PE9p8u0Agcdgho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.107.0/24
IPv6:
2a0c:ef00::/32
Signature Algorithm: sha256WithRSAEncryption
76:86:ec:34:97:30:26:64:d6:4c:2a:39:98:1d:82:a7:4a:6b:
4c:f9:c5:ef:3b:7e:a8:ae:f4:9c:70:d0:51:5d:6f:7e:b3:30:
11:4b:0c:e3:83:1a:2d:83:91:56:8c:c8:f5:9e:2c:a0:94:1e:
ae:92:57:76:45:67:cf:83:76:58:ed:5f:f3:46:e8:83:af:5c:
06:10:2c:89:a9:45:a1:12:0a:7d:d3:60:4b:ad:d5:67:88:e1:
b6:f4:3d:ed:f5:8a:e7:09:20:55:a5:14:15:18:b8:55:ce:fc:
c4:2f:e9:f1:29:94:f1:ef:3b:a6:63:9a:ab:11:3d:ed:7c:3d:
45:96:4d:74:21:97:7d:9b:4e:c8:17:c9:06:92:6e:da:a6:a1:
10:26:ef:ee:49:86:ef:85:81:60:64:03:a9:8c:01:29:44:97:
70:4d:0b:b3:bb:44:e4:e0:32:1a:65:18:d9:ce:85:0f:74:be:
68:6a:2f:89:43:55:58:91:a0:3d:f8:e1:11:97:ab:63:41:6f:
a6:1d:8d:f1:9c:a3:a3:fc:ec:26:57:05:ab:fc:43:11:f4:e9:
b2:30:f5:1d:ce:94:7b:44:df:6f:6e:ad:51:04:46:80:9f:75:
c0:86:e5:10:65:14:4e:3d:5d:00:e6:d3:a4:38:da:0a:9e:13:
3c:e0:24:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:16 2024 by rpki-client on console-fra.rpki-client.org