Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/3ANgAW9uLK0g0J-AugdT2-JZBmw.roa
File: 3ANgAW9uLK0g0J-AugdT2-JZBmw.roa (raw, json)
Hash identifier: H3OonzVRzXzAziiVfHgLM0U45g3OdeX8cN+J859V0Dg=
Subject key identifier: DC:03:60:01:6F:6E:2C:AD:20:D0:9F:80:BA:07:53:DB:E2:59:06:6C
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 019096FA2671DF2AA81D7706C373053F9D56
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/3ANgAW9uLK0g0J-AugdT2-JZBmw.roa
Signing time: Tue 09 Jul 2024 10:11:34 +0000
ROA not before: Tue 09 Jul 2024 10:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 185.197.74.0/24 maxlen: 24
185.230.143.0/24 maxlen: 24
193.188.20.0/24 maxlen: 24
193.188.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 12:32:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:96:fa:26:71:df:2a:a8:1d:77:06:c3:73:05:3f:9d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jul 9 10:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc0360016f6e2cad20d09f80ba0753dbe259066c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:22:0e:a7:2f:39:56:e0:fa:20:2d:c2:63:d9:
d3:af:a7:50:18:94:bb:a9:2d:b3:b2:b3:77:b5:bd:
83:4f:98:24:b9:24:70:cb:71:48:65:f0:50:75:ae:
e1:fa:00:5a:7a:79:6e:d6:a5:ce:d2:ed:d2:d3:51:
87:b9:18:77:08:45:86:58:32:6b:6f:00:84:c5:54:
64:57:df:c5:37:b4:2f:6c:86:63:a2:9e:9d:96:fe:
27:67:7e:df:d9:80:d9:b7:a3:ce:a7:2f:5b:6b:04:
05:9d:9a:b9:59:2e:a6:00:17:40:74:aa:9a:e7:43:
ba:00:70:2c:95:c7:9a:c8:da:6a:e3:50:54:e5:ab:
7e:e3:a7:8b:3d:14:55:66:2a:3c:7d:c9:08:cf:f9:
58:7b:38:aa:59:96:56:42:3d:ff:f1:4d:9a:f1:ba:
c1:56:f7:cd:29:c8:8d:46:05:65:a3:63:52:b7:9c:
6c:75:96:9e:c1:05:68:05:42:3a:1e:4a:67:21:ac:
43:53:ea:31:04:da:6f:d6:e1:9f:68:a8:d2:ec:d4:
21:b4:9a:00:88:a6:c3:db:58:01:f5:43:10:6d:68:
d8:94:8e:ea:21:4f:c8:b9:1a:f1:01:98:ab:96:ea:
2f:45:b0:cb:f4:51:af:8c:d3:4a:78:ea:71:ff:1a:
8e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:03:60:01:6F:6E:2C:AD:20:D0:9F:80:BA:07:53:DB:E2:59:06:6C
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/3ANgAW9uLK0g0J-AugdT2-JZBmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.74.0/24
185.230.143.0/24
193.188.20.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:ab:a0:77:6d:d7:da:51:5c:93:81:1d:39:98:de:a0:62:77:
b0:37:2f:5c:89:27:c3:65:8c:df:84:20:36:20:59:36:f0:de:
b3:71:31:5a:d0:b9:7c:1f:aa:cb:fa:3c:f9:87:5e:e2:26:0f:
41:4c:da:6e:11:e0:7f:eb:97:26:55:8a:e5:d2:5c:aa:a9:81:
0d:e3:ae:76:bf:49:8a:fe:37:85:82:1e:64:7e:99:bc:bc:da:
69:74:68:87:eb:7a:72:81:47:46:69:a2:5b:b9:40:67:f3:a7:
be:ae:ff:c9:08:95:21:bb:cb:74:3a:ed:c7:fc:3f:48:4f:4a:
76:16:b8:88:f0:ff:70:c3:ff:4b:bc:94:6c:a6:16:70:a1:7a:
ba:4c:52:14:5b:a6:aa:cd:50:59:33:82:ed:80:40:a3:df:a8:
67:25:ea:7b:92:27:06:9c:54:3d:5f:0e:b6:48:e6:ce:c0:25:
44:a8:f1:5d:40:a1:79:07:c1:95:67:73:1f:e2:cb:f2:40:8e:
e1:e4:f2:1e:77:96:55:b5:28:e1:6c:c1:c8:b0:dd:f4:7d:57:
16:b4:72:59:e0:63:ed:43:45:83:2d:e8:d1:e2:4d:e7:a9:1e:
02:20:ef:05:09:d0:57:3e:ea:7c:06:30:97:83:62:db:a0:da:
62:37:5d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 14:18:39 2024 by rpki-client on console-ams.rpki-client.org