Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/40iMfMFth_m5nt6s21rEmazy4rM.roa
File: 40iMfMFth_m5nt6s21rEmazy4rM.roa (raw, json)
Hash identifier: 5v5lObTVilWdeIv/2OWk4mYdKIk3D3DWhUQgXgIcptQ=
Subject key identifier: E3:48:8C:7C:C1:6D:87:F9:B9:9E:DE:AC:DB:5A:C4:99:AC:F2:E2:B3
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0186B17A7F63E5648801A8BD1C371091FFE1
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/40iMfMFth_m5nt6s21rEmazy4rM.roa
Signing time: Sun 05 Mar 2023 11:14:00 +0000
ROA not before: Sun 05 Mar 2023 11:14:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34636
IP address blocks: 185.124.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b1:7a:7f:63:e5:64:88:01:a8:bd:1c:37:10:91:ff:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Mar 5 11:14:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3488c7cc16d87f9b99edeacdb5ac499acf2e2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:81:07:eb:a4:66:87:a8:7f:28:1a:e9:de:98:
72:0b:68:48:4e:53:a8:1c:c7:c7:be:dc:47:1d:27:
c1:a1:2c:b6:58:31:b5:03:b3:ad:c1:57:f6:55:94:
13:1c:26:51:45:fd:29:2a:a8:b7:ee:fa:36:a8:71:
22:55:9a:6b:f9:22:0c:c0:70:d9:fa:98:ad:3a:5e:
8e:7c:ba:4f:12:62:88:52:cf:1d:55:6b:cf:e5:eb:
44:70:5a:d2:f4:d4:c7:f0:d4:cb:bb:15:a5:ac:8f:
77:62:3a:28:bb:cb:61:8a:89:5a:e0:ef:e8:ea:fb:
3b:a4:c8:23:7e:be:fc:0f:4b:e7:67:65:f5:df:cd:
f1:8f:fa:36:89:29:88:32:78:a6:80:b9:cb:61:a4:
0e:3c:81:99:88:c2:f2:9c:60:d8:a7:71:8f:2d:93:
e9:9f:a5:fb:4f:19:dd:dd:48:7a:71:f4:8e:88:a0:
cf:be:00:1a:94:43:6a:f9:df:11:38:af:8a:29:2c:
54:3d:ab:65:53:1b:8a:14:b7:f1:5b:1f:01:0d:b4:
55:d1:1e:8a:d3:70:76:af:96:c0:e6:05:49:cd:6f:
ee:81:bd:57:63:0c:21:9e:1b:a8:ea:4c:29:da:d8:
22:16:fc:2e:5e:36:99:d4:4e:db:1e:6c:3f:80:16:
8f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:48:8C:7C:C1:6D:87:F9:B9:9E:DE:AC:DB:5A:C4:99:AC:F2:E2:B3
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/40iMfMFth_m5nt6s21rEmazy4rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.174.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:3c:74:75:37:ac:aa:19:ed:9a:e5:3d:b5:58:5e:a1:28:8c:
2a:05:91:f8:9e:9b:88:a1:8d:c4:9c:8e:21:07:6c:0a:75:d7:
9a:07:53:b5:07:0a:a8:d0:08:4e:ca:4a:aa:11:35:b5:8e:86:
84:52:e2:fd:64:14:ca:48:87:24:0b:eb:2f:a4:1e:c7:6b:99:
a7:7c:00:af:1d:61:3f:5e:b6:47:29:c0:44:63:5b:56:24:81:
e2:df:fc:89:5b:d6:e7:22:4a:fe:15:21:c7:f6:8d:66:55:90:
8d:40:f5:d7:ab:70:36:e9:d5:a2:9d:92:15:71:b8:e8:54:f1:
d7:e6:56:39:ae:9b:53:bc:d0:e7:75:27:f9:f2:e5:b7:36:86:
4a:86:75:4e:16:30:14:41:c2:d3:18:43:b5:ff:f6:0e:c9:42:
e4:e9:f6:b9:4d:df:e2:47:33:6c:a8:32:71:17:79:d6:4b:08:
6b:97:13:79:0c:fd:45:e4:f0:a9:72:bd:3e:a2:de:6d:17:5e:
fc:de:f9:ff:f6:7f:4a:70:f9:29:23:c8:07:75:82:51:0d:27:
04:fe:9b:a0:16:1c:76:ea:84:ef:10:fc:d5:ef:78:64:e9:fb:
6a:c8:8d:66:ab:1e:87:3a:59:a3:44:27:ba:93:38:a5:b3:75:
31:05:7f:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaxen9j5WSIAai9HDcQkf/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjMwMzA1MTExNDAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzQ4OGM3Y2MxNmQ4N2Y5Yjk5ZWRlYWNkYjVhYzQ5OWFjZjJlMmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioEH66Rmh6h/KBrp3phyC2hITlOo
HMfHvtxHHSfBoSy2WDG1A7OtwVf2VZQTHCZRRf0pKqi37vo2qHEiVZpr+SIMwHDZ
+pitOl6OfLpPEmKIUs8dVWvP5etEcFrS9NTH8NTLuxWlrI93Yjoou8thiola4O/o
6vs7pMgjfr78D0vnZ2X1383xj/o2iSmIMnimgLnLYaQOPIGZiMLynGDYp3GPLZPp
n6X7Txnd3Uh6cfSOiKDPvgAalENq+d8ROK+KKSxUPatlUxuKFLfxWx8BDbRV0R6K
03B2r5bA5gVJzW/ugb1XYwwhnhuo6kwp2tgiFvwuXjaZ1E7bHmw/gBaPMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFONIjHzBbYf5uZ7erNtaxJms8uKzMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvNDBpTWZNRnRoX201bnQ2czIxckVtYXp5NHJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXyuMA0G
CSqGSIb3DQEBCwUAA4IBAQDTPHR1N6yqGe2a5T21WF6hKIwqBZH4npuIoY3EnI4h
B2wKddeaB1O1Bwqo0AhOykqqETW1joaEUuL9ZBTKSIckC+svpB7Ha5mnfACvHWE/
XrZHKcBEY1tWJIHi3/yJW9bnIkr+FSHH9o1mVZCNQPXXq3A26dWinZIVcbjoVPHX
5lY5rptTvNDndSf58uW3NoZKhnVOFjAUQcLTGEO1//YOyULk6fa5Td/iRzNsqDJx
F3nWSwhrlxN5DP1F5PCpcr0+ot5tF1783vn/9n9KcPkpI8gHdYJRDScE/pugFhx2
6oTvEPzV73hk6ftqyI1mqx6HOlmjRCe6kzils3UxBX9X
-----END CERTIFICATE-----
Generated at Sat Dec 9 13:01:34 2023 by rpki-client on console-fra.rpki-client.org