Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/yHKJ2QVj_n6uOyXnzL7nrSs5DIc.roa
File: yHKJ2QVj_n6uOyXnzL7nrSs5DIc.roa (raw, json)
Hash identifier: 7Ajxr4svCJSl129h9L6wYyEutFPnVLCkDrziRd5jwsg=
Subject key identifier: C8:72:89:D9:05:63:FE:7E:AE:3B:25:E7:CC:BE:E7:AD:2B:39:0C:87
Certificate issuer: /CN=c49aa3226eafac1e77d23e8fcef18900384003c7
Certificate serial: 01856D2F56ADD5B64394DA809FA2E7945548
Authority key identifier: C4:9A:A3:22:6E:AF:AC:1E:77:D2:3E:8F:CE:F1:89:00:38:40:03:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJqjIm6vrB530j6PzvGJADhAA8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/yHKJ2QVj_n6uOyXnzL7nrSs5DIc.roa
Signing time: Sun 01 Jan 2023 11:54:57 +0000
ROA not before: Sun 01 Jan 2023 11:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59441
IP address blocks: 185.40.16.0/24 maxlen: 24
2a0d:7780::/29 maxlen: 128
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:56:ad:d5:b6:43:94:da:80:9f:a2:e7:94:55:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49aa3226eafac1e77d23e8fcef18900384003c7
Validity
Not Before: Jan 1 11:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c87289d90563fe7eae3b25e7ccbee7ad2b390c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:47:b3:27:7e:11:a0:be:30:10:18:a8:75:a4:
66:98:82:ac:06:ad:0c:4b:aa:e8:43:5c:5c:c8:98:
83:2c:39:65:f1:66:7e:5b:99:71:22:f6:19:a7:16:
aa:75:d6:01:c9:36:e4:a2:24:fa:af:64:20:41:99:
df:a2:8d:33:92:c6:b4:d2:63:c3:26:a7:ec:2a:6c:
a9:00:35:cf:cd:d5:21:bd:7f:b2:74:5a:0a:05:25:
b8:80:78:3c:41:79:ab:ee:93:2f:c3:08:df:ef:18:
48:29:5b:57:e3:d1:70:57:6f:07:68:0a:2c:6a:15:
f9:cc:18:d7:d7:72:86:c3:a4:6d:c8:3e:92:37:aa:
e3:d5:09:a1:86:1d:7c:89:ce:73:db:76:25:d8:03:
fa:89:45:0e:2f:09:4a:8c:cc:d8:b1:ea:3a:d2:f1:
1f:34:66:f7:d8:bf:05:23:9e:d0:43:b1:f0:c6:37:
93:31:ad:e0:08:43:9f:00:33:56:e7:95:d8:03:5f:
d2:c5:33:d7:0e:bb:1b:33:3d:25:50:2b:b6:fc:f8:
88:44:9b:f5:4e:5f:1a:95:77:4c:b9:87:6f:6d:a5:
a7:bd:28:8a:6c:2f:bd:3a:62:5b:de:3d:39:b1:89:
d8:f6:3b:7b:42:cc:5f:f1:4c:ce:52:b8:78:3f:96:
09:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:72:89:D9:05:63:FE:7E:AE:3B:25:E7:CC:BE:E7:AD:2B:39:0C:87
X509v3 Authority Key Identifier:
keyid:C4:9A:A3:22:6E:AF:AC:1E:77:D2:3E:8F:CE:F1:89:00:38:40:03:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJqjIm6vrB530j6PzvGJADhAA8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/yHKJ2QVj_n6uOyXnzL7nrSs5DIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.16.0/24
IPv6:
2a0d:7780::/29
Signature Algorithm: sha256WithRSAEncryption
d5:ab:26:e7:88:a9:07:ad:b1:ab:bf:2e:ad:24:49:70:40:3a:
85:f8:e6:ac:b0:46:48:6b:9a:02:c1:0a:e7:5f:b9:6e:62:7a:
4c:d4:d7:4c:58:bc:bc:8b:f7:db:ba:ec:2f:4a:43:94:9a:55:
76:e0:d7:29:17:b0:3f:a0:35:87:01:d3:5f:fd:72:02:06:92:
82:3a:d0:1b:0f:1c:31:02:c9:7e:38:f6:10:dc:8e:7b:a4:49:
80:98:24:72:56:2e:aa:9e:6c:f0:4e:2f:0b:c7:78:b7:af:8e:
a8:36:8a:a0:31:29:74:ba:4f:12:2f:31:1c:e6:02:21:2f:0c:
0b:22:dd:79:cf:1c:2e:86:b2:d1:13:49:32:eb:0b:08:bd:f3:
70:81:60:37:8a:70:dc:79:70:18:e4:a8:13:72:4a:36:98:7d:
fe:18:2a:85:0f:86:c3:bc:eb:d3:7e:86:a5:c5:78:d1:b5:06:
8d:f6:d7:d2:3a:d2:e1:0b:5c:69:e7:6b:4d:f3:1e:4f:d7:76:
76:41:f2:73:ea:4e:2b:b7:8f:58:41:2f:ff:97:7a:77:8d:5d:
4f:81:7a:18:6a:c1:dd:b0:9d:75:b3:92:0d:e7:45:c3:b9:0c:
37:44:9e:af:4b:03:01:5f:1d:57:7e:aa:83:e2:69:74:15:e2:
2f:83:64:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-fra.rpki-client.org