Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/Fa3HJJDfdnc8faDppzRi83EqkJs.roa
File: Fa3HJJDfdnc8faDppzRi83EqkJs.roa (raw, json)
Hash identifier: 4xuoePUZ2yICv3CI1pJ8rXTFvx97OtvO/TmpjOMVX4c=
Subject key identifier: 15:AD:C7:24:90:DF:76:77:3C:7D:A0:E9:A7:34:62:F3:71:2A:90:9B
Certificate issuer: /CN=69786c178d65be79ae50d355857da13ad74abea0
Certificate serial: 018CC3B7177261F1092E49A7C4AD6705551A
Authority key identifier: 69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/Fa3HJJDfdnc8faDppzRi83EqkJs.roa
Signing time: Mon 01 Jan 2024 06:30:05 +0000
ROA not before: Mon 01 Jan 2024 06:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204080
IP address blocks: 185.115.104.0/22 maxlen: 24
185.115.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:17:72:61:f1:09:2e:49:a7:c4:ad:67:05:55:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69786c178d65be79ae50d355857da13ad74abea0
Validity
Not Before: Jan 1 06:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15adc72490df76773c7da0e9a73462f3712a909b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:b4:3f:11:74:e8:65:98:32:c5:29:69:a0:
e7:59:33:73:53:fc:5c:16:28:3d:3f:12:27:34:ea:
78:12:fe:4f:d2:43:d9:b2:e8:28:1b:df:22:dc:b8:
4c:c8:d4:cb:da:f0:22:1c:18:5a:41:b5:33:05:2f:
aa:c6:d1:5c:a8:44:5c:5d:99:0b:64:9f:3e:ae:bc:
95:50:4c:46:17:18:56:5d:84:79:0d:2b:0a:f5:92:
59:da:b8:81:48:4f:02:de:e2:80:8d:43:1f:f1:c6:
d6:0f:91:d3:09:2e:3f:d0:d8:ad:dd:55:00:7e:6e:
4d:61:30:ac:30:2a:c2:74:1b:40:19:85:fd:a7:73:
a0:1e:12:d1:7a:f3:83:9b:5e:49:69:03:cb:31:ed:
a6:58:4f:cd:53:4e:ff:3f:b8:d1:61:3a:c2:b6:dd:
d4:ea:9d:96:1d:5a:91:d4:4f:98:ad:2a:63:f2:72:
c3:cc:d8:d5:3c:9d:3d:1d:d5:00:b8:d6:49:d1:1b:
c0:67:23:a6:8f:fa:66:fb:0d:b5:2c:f4:06:0b:b2:
37:05:0c:5f:c4:9c:fd:32:ab:98:e0:2c:bd:be:11:
2a:37:76:88:a9:9d:b1:ec:01:95:40:22:2d:17:16:
10:44:d6:5c:02:5f:f5:7b:72:40:07:0f:79:eb:f1:
6a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AD:C7:24:90:DF:76:77:3C:7D:A0:E9:A7:34:62:F3:71:2A:90:9B
X509v3 Authority Key Identifier:
keyid:69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/Fa3HJJDfdnc8faDppzRi83EqkJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.104.0/22
Signature Algorithm: sha256WithRSAEncryption
22:3d:ff:ec:17:8d:5a:a8:95:e0:0d:40:a2:be:d5:ce:3c:fa:
77:03:6b:e5:13:0a:8c:1b:2c:3f:17:f7:74:21:f6:46:62:bf:
22:a3:0f:67:38:59:7c:00:d7:ec:d6:ca:40:7c:dc:e0:dd:54:
6b:7d:0c:b1:c9:de:5a:dc:da:c1:e4:72:8c:26:28:bd:98:12:
e6:50:e8:a1:fa:2a:24:1e:c0:b6:b7:7e:4b:7e:26:33:bf:05:
3e:29:6c:00:4d:2c:99:50:01:5b:ac:8a:e0:4d:0d:31:f6:4f:
62:47:d5:20:7f:df:36:54:bd:ff:30:97:84:50:64:88:f6:8c:
53:38:21:40:52:1c:f7:36:53:9f:3e:f1:c6:ae:20:a7:74:9d:
96:e2:13:a2:93:64:60:37:33:7c:b5:7e:f2:a5:59:82:94:60:
1d:5c:bf:1f:41:91:82:98:e3:b1:5e:4f:8f:cf:ab:6a:00:7f:
4f:ac:c0:cf:f3:64:a1:c2:ae:04:a2:95:35:61:51:ac:ca:b4:
04:01:f9:26:0d:0c:9f:82:d2:fc:3f:4f:27:7e:f0:27:b0:2a:
3b:a9:8a:c4:21:ec:dc:07:e0:9a:5b:e2:50:3c:cc:bd:dd:e2:
fc:d7:cc:04:82:de:ad:4d:22:82:68:32:f7:01:b3:61:b6:6c:
54:77:c3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:44 2025 by rpki-client