Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/3HopKbakg_SaWSrvvTo86gs_TYU.roa
File: 3HopKbakg_SaWSrvvTo86gs_TYU.roa (raw, json)
Hash identifier: 7S9NsMdLRHGdfClbzooed6dWSgnChiXLMRZqCokOcgQ=
Subject key identifier: DC:7A:29:29:B6:A4:83:F4:9A:59:2A:EF:BD:3A:3C:EA:0B:3F:4D:85
Certificate issuer: /CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Certificate serial: 018CC94E4CE7748FE9087E30E04A98BD6042
Authority key identifier: 52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/3HopKbakg_SaWSrvvTo86gs_TYU.roa
Signing time: Tue 02 Jan 2024 08:33:21 +0000
ROA not before: Tue 02 Jan 2024 08:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200432
IP address blocks: 185.107.60.0/22 maxlen: 22
185.107.60.0/24 maxlen: 24
185.107.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 13:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:4c:e7:74:8f:e9:08:7e:30:e0:4a:98:bd:60:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Validity
Not Before: Jan 2 08:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc7a2929b6a483f49a592aefbd3a3cea0b3f4d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:90:60:22:14:05:f5:e5:5c:d2:5a:63:2e:2e:
7d:ba:7e:ab:a8:2d:40:8b:6a:d4:26:a3:4e:8c:76:
69:3e:e1:c0:b3:83:e8:cb:84:22:05:c0:da:91:b4:
c2:bf:53:41:be:bd:5c:de:a6:06:ec:4e:a1:0e:eb:
af:40:29:bf:60:dd:45:a6:9b:7c:08:dc:25:66:1e:
d5:e0:a1:e7:78:a1:c0:50:b6:20:f8:8f:fc:5f:9d:
c6:87:75:c8:93:e3:ec:9e:73:1d:5d:eb:22:1c:00:
ed:f6:a5:76:60:d2:8e:85:0a:ec:c0:ef:a9:02:e9:
96:56:b0:12:d3:ab:8a:7b:a9:c0:24:c7:69:f3:bf:
14:83:39:b3:2c:31:43:d4:72:40:0a:bc:27:9e:ca:
94:af:b9:4e:08:78:79:70:ab:4b:53:d4:5b:02:38:
90:67:2b:a3:64:4b:8a:57:32:c3:6a:cd:d7:74:5e:
d1:e7:bc:1b:8b:81:ea:d3:cd:e3:2c:f1:89:ec:5a:
a0:10:76:5f:f9:a3:6c:ee:f1:ff:43:07:09:09:40:
ce:1b:00:e7:3a:7a:a0:b8:68:a7:47:23:c3:b8:43:
01:a0:4f:65:d6:0c:42:87:81:f5:54:15:fd:05:11:
2c:ab:50:3b:82:1d:c5:10:e5:8a:a3:8a:2d:99:81:
29:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7A:29:29:B6:A4:83:F4:9A:59:2A:EF:BD:3A:3C:EA:0B:3F:4D:85
X509v3 Authority Key Identifier:
keyid:52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/3HopKbakg_SaWSrvvTo86gs_TYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.60.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:d8:47:e9:ad:fb:96:d8:ad:da:00:0b:56:bc:ae:58:b9:ad:
29:ba:ca:e6:3b:a2:62:84:8c:49:db:6e:93:ff:52:47:17:86:
a5:7d:be:6e:73:ba:49:bb:52:16:c0:9e:2f:ab:0c:f6:b0:2c:
a5:9d:a6:fa:5d:58:1a:c8:ab:8d:9f:aa:fc:b4:9d:69:4a:68:
35:b3:68:21:8a:0f:27:d8:f8:3c:e7:0d:17:c8:c4:1a:2b:8b:
07:09:db:1b:bf:6b:cb:e5:12:4a:46:b2:0d:23:86:d3:ef:62:
60:4c:ba:32:38:11:e8:6b:23:be:a8:f0:37:78:d1:d8:14:49:
30:24:96:59:98:ac:2e:cf:58:d0:ed:6b:0b:d1:08:ed:9a:73:
52:e5:d9:f5:27:f1:c3:37:10:bb:68:cd:18:70:28:bf:4b:a8:
2f:ce:e0:4c:fd:c9:18:ba:d3:84:6a:59:cd:85:dc:0a:9b:c7:
f1:93:cd:99:33:db:78:b8:ba:54:cb:a6:b0:de:99:b9:cc:39:
b0:47:ac:b4:28:67:10:2e:b6:7b:a1:79:29:1f:2e:29:36:42:
e4:de:87:88:08:a1:af:88:53:97:a2:f3:56:4e:ba:a8:7c:79:
76:87:22:51:5e:4b:ef:07:d3:0c:bd:7f:f6:85:7f:05:7f:53:
42:47:97:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-fra.rpki-client.org