Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/DFhVnufZSMgwtZUwKqb1NVRJ9Cc.roa
File: DFhVnufZSMgwtZUwKqb1NVRJ9Cc.roa (raw, json)
Hash identifier: +E2FQvuYHuZFQzdBGonsXNpjCLX3gMZ869M/HtwcmXU=
Subject key identifier: 0C:58:55:9E:E7:D9:48:C8:30:B5:95:30:2A:A6:F5:35:54:49:F4:27
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 0192FCD181B9F493081CCA9C238570CDC799
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/DFhVnufZSMgwtZUwKqb1NVRJ9Cc.roa
Signing time: Tue 05 Nov 2024 14:54:01 +0000
ROA not before: Tue 05 Nov 2024 14:54:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 147.185.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 23:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fc:d1:81:b9:f4:93:08:1c:ca:9c:23:85:70:cd:c7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Nov 5 14:54:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c58559ee7d948c830b595302aa6f5355449f427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:66:8a:4b:4c:06:9e:2a:ac:fc:9d:59:83:
0c:fc:26:67:96:3d:30:c1:c9:f7:14:66:42:66:83:
29:51:e9:6c:d7:53:41:97:fa:c8:eb:5a:f7:fa:62:
db:75:fe:a6:29:8a:ed:73:df:8d:a6:8b:3b:d9:0c:
05:de:a8:d5:93:b4:f7:04:85:cd:c2:c6:46:6e:d1:
87:44:e2:dc:4d:f3:27:d6:08:c2:a7:06:e4:6e:59:
b2:a1:71:f8:ee:51:64:24:49:f4:b2:3f:81:dc:8e:
5a:2e:52:4e:5f:1d:07:f0:96:a8:68:54:a5:26:47:
56:f7:55:c3:6c:f9:27:d7:cb:86:ee:ed:2a:d5:89:
bc:4a:5e:aa:ec:ea:16:d8:40:e4:86:6e:28:cb:19:
df:47:9e:9b:f9:6e:5d:84:13:9b:e6:c8:d6:9e:86:
d7:b1:5f:ef:2f:57:f7:a6:91:f0:d1:90:81:08:04:
1f:e6:c9:89:20:62:45:40:ce:cf:4f:fa:37:37:ba:
b2:09:8f:84:53:58:c0:ac:d9:a3:e0:d4:36:32:b3:
a1:b2:8e:dc:f2:ad:87:f0:ad:b1:0c:c3:b9:66:c4:
a1:e9:f9:18:a8:5c:cd:77:2f:83:07:96:a3:8a:fa:
df:55:f2:4b:13:74:d3:50:d2:6f:3c:bc:cf:e6:34:
d9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:58:55:9E:E7:D9:48:C8:30:B5:95:30:2A:A6:F5:35:54:49:F4:27
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/DFhVnufZSMgwtZUwKqb1NVRJ9Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.107.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:5c:af:17:9e:5d:87:91:19:87:2f:9a:41:b4:69:49:f5:45:
b0:07:fa:59:6b:cd:fc:6b:45:3d:9b:86:84:dc:f7:a6:ef:24:
5d:46:40:cc:c6:3a:a4:83:be:7f:73:d6:60:a2:2d:9d:f0:19:
0d:c9:67:de:cd:04:e5:94:32:4c:ec:5d:7e:c6:82:1c:09:a5:
cc:3a:52:25:0b:a7:77:e0:d2:a3:b7:b3:02:cb:d1:64:34:fd:
cb:b1:10:da:72:4f:ec:98:d3:50:f2:78:69:42:20:25:86:51:
74:32:93:91:7e:c5:76:4f:ab:bf:fd:61:9f:8f:a5:29:8b:89:
26:4b:bd:2b:71:62:ba:3f:75:9b:1a:77:19:9f:68:d6:eb:fe:
ab:2b:26:7e:69:0d:ad:d4:5a:6f:e3:36:63:e6:0f:56:f2:f5:
cd:50:57:7d:ff:24:a8:e9:b6:60:35:6a:e6:2d:51:9f:00:36:
db:cf:ff:bf:fa:4b:49:1d:3a:a4:ff:36:4b:37:a4:ea:50:8a:
0a:93:db:3b:8e:f2:3a:8b:20:7b:fd:96:aa:be:ae:0c:82:86:
3b:4a:2d:08:02:4f:bf:02:4e:17:e8:7a:90:31:52:b9:ac:d9:
75:11:68:7a:27:ea:5e:32:0f:76:82:b5:e7:0e:11:76:d6:ae:
62:04:b7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 01:58:08 2024 by rpki-client on console-fra.rpki-client.org