Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/3xWJ5cHP6bKl3QTiAlmiCGNRZnI.roa
File: 3xWJ5cHP6bKl3QTiAlmiCGNRZnI.roa (raw, json)
Hash identifier: 3d0bL43rQDK7B5UVtccnZZdaNuoE8IGYMcB5TUqWxys=
Subject key identifier: DF:15:89:E5:C1:CF:E9:B2:A5:DD:04:E2:02:59:A2:08:63:51:66:72
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 018C3770490EA31D48D9AB7F346A9F261F65
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/3xWJ5cHP6bKl3QTiAlmiCGNRZnI.roa
Signing time: Tue 05 Dec 2023 00:45:54 +0000
ROA not before: Tue 05 Dec 2023 00:45:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199614
IP address blocks: 185.138.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:37:70:49:0e:a3:1d:48:d9:ab:7f:34:6a:9f:26:1f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Dec 5 00:45:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df1589e5c1cfe9b2a5dd04e20259a20863516672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:10:8b:e0:44:13:fd:3a:36:f2:9a:02:38:
95:74:2c:cc:9c:35:b8:9e:dc:ca:5c:e5:e7:33:ee:
4a:6e:16:d7:34:14:ef:20:67:07:e8:e3:02:59:41:
e6:ac:ee:05:f1:70:63:b2:8c:68:ff:34:1e:7f:ad:
d2:d1:7b:84:a1:dd:ea:85:fb:52:72:77:53:ec:fd:
1e:94:40:f7:50:9f:51:7b:72:f2:c0:de:27:dc:d7:
73:7b:55:54:51:9b:d2:60:b5:67:bb:c4:f7:b7:81:
21:8e:0c:8a:7e:b0:af:99:6e:d9:dd:fe:19:8a:24:
05:ba:bc:a3:5b:de:bd:9e:46:e3:8c:7a:23:e0:1f:
86:d6:32:b6:03:81:cb:c6:4d:b6:59:ab:71:72:2e:
e4:b2:5c:36:ee:55:91:ce:2e:6e:1f:e8:91:16:83:
61:0b:83:47:8f:6a:36:2c:9b:bc:7e:88:40:5e:d1:
c9:75:a6:b0:ef:a6:55:7a:b3:d0:6d:52:53:70:a3:
f7:37:1b:15:87:ae:ec:c8:f8:0f:bb:be:d9:42:7d:
17:37:63:de:53:ce:cf:60:6a:72:c1:c9:26:8f:3f:
9b:6d:c6:83:6a:68:e6:ad:f3:e7:41:90:9a:e5:53:
42:cb:db:1d:5f:e7:a8:50:91:c2:5a:d3:1a:58:15:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:15:89:E5:C1:CF:E9:B2:A5:DD:04:E2:02:59:A2:08:63:51:66:72
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/3xWJ5cHP6bKl3QTiAlmiCGNRZnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.234.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:75:97:f1:6c:c2:c5:83:cc:3a:b5:96:ee:29:78:19:12:6e:
6a:de:07:52:e5:72:d4:04:23:37:87:9b:5f:ea:28:2b:f5:01:
c9:1c:81:79:9e:67:c2:99:04:99:c2:4a:ab:73:d4:c3:2d:0a:
11:b3:b2:4e:01:94:cb:4e:b3:17:f7:6c:d6:c3:b5:aa:2a:61:
68:9b:c0:57:da:a2:fb:03:7f:f4:d3:15:9f:88:b4:d0:64:31:
7c:6d:c6:57:db:00:a9:97:57:ab:32:f2:ca:29:44:61:75:5b:
d4:4e:9b:1e:1d:96:06:47:af:83:dc:02:b0:48:28:0f:32:be:
1c:79:d1:a9:32:19:63:f9:75:b5:9f:97:36:5c:37:fb:f9:fa:
14:63:47:d9:11:09:6b:d8:db:25:60:66:47:4a:57:41:f6:49:
0f:2d:8e:2a:a6:42:9d:7a:28:b9:bc:23:f7:f3:ba:cc:d8:bb:
b5:4a:10:68:bf:9d:58:7d:c6:3f:02:11:13:2c:4e:5d:29:3d:
d9:67:3e:f1:65:97:23:7f:c8:0b:4b:14:37:6b:0a:93:41:e1:
81:38:30:26:db:25:3c:79:36:c4:a4:6b:5b:72:83:c0:25:7c:
20:73:f1:5a:46:83:58:24:e4:17:e6:86:fc:93:48:a3:2f:70:
04:6f:bf:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYw3cEkOox1I2at/NGqfJh9lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDZhODJiYjExNWQ3MzkzZTM5ZmQ1OGI3M2JiZjIwZjZj
ZDBiMWYwHhcNMjMxMjA1MDA0NTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjE1ODllNWMxY2ZlOWIyYTVkZDA0ZTIwMjU5YTIwODYzNTE2NjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQEQi+BEE/06NvKaAjiVdCzMnDW4
ntzKXOXnM+5KbhbXNBTvIGcH6OMCWUHmrO4F8XBjsoxo/zQef63S0XuEod3qhftS
cndT7P0elED3UJ9Re3LywN4n3Ndze1VUUZvSYLVnu8T3t4EhjgyKfrCvmW7Z3f4Z
iiQFuryjW969nkbjjHoj4B+G1jK2A4HLxk22Watxci7kslw27lWRzi5uH+iRFoNh
C4NHj2o2LJu8fohAXtHJdaaw76ZVerPQbVJTcKP3NxsVh67syPgPu77ZQn0XN2Pe
U87PYGpywckmjz+bbcaDamjmrfPnQZCa5VNCy9sdX+eoUJHCWtMaWBXWIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN8VieXBz+mypd0E4gJZoghjUWZyMB8GA1UdIwQY
MBaAFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt
NzI2MDU3YTFmMmE0LzEvM3hXSjVjSFA2YktsM1FUaUFsbWlDR05SWm5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0
LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYrqMA0G
CSqGSIb3DQEBCwUAA4IBAQBfdZfxbMLFg8w6tZbuKXgZEm5q3gdS5XLUBCM3h5tf
6igr9QHJHIF5nmfCmQSZwkqrc9TDLQoRs7JOAZTLTrMX92zWw7WqKmFom8BX2qL7
A3/00xWfiLTQZDF8bcZX2wCpl1erMvLKKURhdVvUTpseHZYGR6+D3AKwSCgPMr4c
edGpMhlj+XW1n5c2XDf7+foUY0fZEQlr2NslYGZHSldB9kkPLY4qpkKdeii5vCP3
87rM2Lu1ShBov51YfcY/AhETLE5dKT3ZZz7xZZcjf8gLSxQ3awqTQeGBODAm2yU8
eTbEpGtbcoPAJXwgc/FaRoNYJOQX5ob8k0ijL3AEb7/T
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:01 2024 by rpki-client on console-ams.rpki-client.org