Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/DQ6Coj6vA0ZiIJqxHcYtOHtem7Y.roa
File: DQ6Coj6vA0ZiIJqxHcYtOHtem7Y.roa (raw, json)
Hash identifier: RKMl3IthTITvJwivNcRhPemiC6ibYbOdoo2L3qTmZlw=
Subject key identifier: 0D:0E:82:A2:3E:AF:03:46:62:20:9A:B1:1D:C6:2D:38:7B:5E:9B:B6
Certificate issuer: /CN=f9629775283733a45c454b8d7be5a66df0db1a17
Certificate serial: 01856C41126C95872A69133C69FF666A7DD7
Authority key identifier: F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/DQ6Coj6vA0ZiIJqxHcYtOHtem7Y.roa
Signing time: Sun 01 Jan 2023 07:34:41 +0000
ROA not before: Sun 01 Jan 2023 07:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41956
IP address blocks: 185.254.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:12:6c:95:87:2a:69:13:3c:69:ff:66:6a:7d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9629775283733a45c454b8d7be5a66df0db1a17
Validity
Not Before: Jan 1 07:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d0e82a23eaf034662209ab11dc62d387b5e9bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:63:9c:62:7b:31:3e:20:75:11:4c:bf:7f:f8:
b4:86:50:4f:88:fb:9b:c6:94:99:37:8a:68:ed:4c:
a9:c1:79:81:27:03:4e:9d:a4:c3:99:70:d6:60:05:
a4:54:9c:e3:ce:a3:73:ff:2b:90:ac:57:d7:0f:ee:
22:d0:e5:12:44:61:6b:6f:f3:04:7b:5c:84:c0:dc:
41:3a:7c:65:2a:27:52:52:2d:25:e9:23:e0:6c:18:
d2:0f:c4:b3:0c:19:3f:71:19:07:6d:e0:4f:75:d9:
8b:35:0d:69:83:bc:e4:15:87:17:64:74:45:91:34:
3e:66:ee:05:73:3e:5f:0c:bc:ac:48:9f:97:68:cc:
d7:72:92:00:93:52:85:46:35:95:99:c0:eb:af:25:
17:9f:de:f7:88:0c:dc:1a:9a:bd:c0:d5:ed:13:e0:
eb:28:56:7b:3a:0d:fc:26:94:c3:22:9e:e5:ce:f2:
0e:b9:ce:ee:a5:dd:10:d1:b8:ca:b2:1a:32:e7:db:
9e:4b:31:8a:02:65:0a:43:50:2e:2e:75:e7:e7:75:
33:e4:de:63:91:9c:dd:9d:61:04:f9:f9:b1:5e:0e:
d1:8f:4f:d7:0c:fe:9c:80:12:dc:9e:a3:0e:71:9f:
a0:53:9f:aa:bd:27:3b:71:52:31:01:d7:07:87:d4:
b0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0E:82:A2:3E:AF:03:46:62:20:9A:B1:1D:C6:2D:38:7B:5E:9B:B6
X509v3 Authority Key Identifier:
keyid:F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/DQ6Coj6vA0ZiIJqxHcYtOHtem7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.35.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:4d:56:61:33:c9:5f:6f:3f:4a:db:33:7e:5a:af:f5:4e:62:
a6:db:5a:5e:d8:6e:ed:f5:ed:74:3d:e6:f9:06:af:4a:a5:3b:
28:eb:2c:6c:47:3f:ad:07:31:ca:4a:21:dd:ea:c5:ae:df:87:
35:bc:98:2f:f6:71:21:ad:8d:2f:00:15:e3:f9:ad:5e:d8:71:
5c:43:15:6b:32:10:29:06:b6:68:8e:c2:72:15:36:1b:17:1b:
68:f6:1b:49:b4:eb:21:2c:7d:94:df:73:36:8e:65:69:ee:b7:
d5:32:a6:49:1a:ba:f0:9c:4e:cf:44:1c:52:c4:f8:dc:bc:b4:
6f:82:29:64:cc:c1:9f:3a:39:7a:c1:80:21:3a:f7:10:70:76:
71:96:ea:f5:77:8c:2f:3a:e1:07:c0:63:e2:1d:fc:c2:a2:69:
97:72:4a:bd:9d:79:bf:46:89:f8:ed:ea:fe:e4:38:aa:a8:ef:
4e:9a:dc:82:6f:91:2d:99:b2:a7:9f:a9:ea:db:18:a9:6c:9e:
0f:a4:75:7d:2d:7c:0c:0d:f3:43:61:12:84:b3:44:cf:36:e2:
cd:fb:23:a5:ab:7a:1e:35:a1:09:80:31:6f:77:9d:e8:af:2a:
4f:85:58:2f:40:ba:c4:56:68:de:b7:1f:79:e1:c1:f8:83:55:
bf:13:de:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:26 2024 by rpki-client on console-fra.rpki-client.org