Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/3H5ZT0UrkCRcs_-mgMDxRFToSeM.roa
File: 3H5ZT0UrkCRcs_-mgMDxRFToSeM.roa (raw, json)
Hash identifier: hzBD1IqNQDUaAGsHyTRt1n8VqbgnDg5RClaU7DZtvH8=
Subject key identifier: DC:7E:59:4F:45:2B:90:24:5C:B3:FF:A6:80:C0:F1:44:54:E8:49:E3
Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial: 018E2CBE90D7C4C8FAEB228D6F2A6DC3B178
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/3H5ZT0UrkCRcs_-mgMDxRFToSeM.roa
Signing time: Mon 11 Mar 2024 09:01:10 +0000
ROA not before: Mon 11 Mar 2024 09:01:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200780
IP address blocks: 185.40.102.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 May 2024 06:28:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2c:be:90:d7:c4:c8:fa:eb:22:8d:6f:2a:6d:c3:b1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Validity
Not Before: Mar 11 09:01:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc7e594f452b90245cb3ffa680c0f14454e849e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bd:13:94:00:e5:c4:4c:f4:82:a5:16:f3:fd:
7f:dc:80:65:4d:15:e6:0a:d5:c7:f0:ba:72:1b:af:
49:df:48:39:42:f0:34:e0:5b:31:46:15:87:a3:29:
9b:6e:3c:2a:e9:78:e8:1b:1a:a1:8a:25:b9:99:63:
16:eb:f9:df:cc:91:cd:59:5b:3a:74:3d:c2:4a:79:
3e:e9:d2:4f:eb:fd:c5:45:5d:79:78:35:f4:89:20:
d2:62:99:39:fe:4d:ea:5b:58:da:c7:6d:b3:25:f9:
ac:4e:24:3e:33:cc:76:fa:f7:81:ce:2e:91:18:ee:
33:cf:a6:36:08:c3:ce:51:5a:a4:96:33:da:90:65:
b8:9c:26:cd:cf:91:96:59:5e:63:69:2e:18:bd:f4:
e9:85:2a:dc:cf:32:64:d9:97:a4:8e:e5:35:bc:b4:
44:78:66:04:70:6f:e6:c0:95:42:c8:98:df:2a:1c:
03:03:41:1a:00:62:00:34:ce:97:a1:6c:c7:63:33:
0d:21:67:4f:d9:ba:e6:fa:ff:76:cd:c7:71:eb:74:
c9:a9:2c:ea:fb:0c:69:e2:c5:6e:03:34:07:28:9c:
ce:ba:e0:87:f2:d2:1b:e7:d1:0a:0b:dd:ec:27:44:
b7:65:9b:26:e3:d9:e7:d0:07:cd:65:3b:51:df:04:
a4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7E:59:4F:45:2B:90:24:5C:B3:FF:A6:80:C0:F1:44:54:E8:49:E3
X509v3 Authority Key Identifier:
keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/3H5ZT0UrkCRcs_-mgMDxRFToSeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.102.0/23
Signature Algorithm: sha256WithRSAEncryption
32:6c:45:14:05:83:bc:29:4d:f3:3f:f7:75:38:d0:5a:d1:fd:
f7:4c:ed:39:0c:c4:a1:1d:28:36:07:0c:36:6d:2f:e3:2f:45:
94:b8:17:c7:00:ea:c2:f6:cd:88:ee:39:9b:0e:70:b7:e4:bc:
4e:b4:da:6d:4b:b2:8e:be:fd:7d:6f:b3:89:3e:40:d0:33:6c:
ad:02:3a:f7:d8:b3:cb:f6:8c:62:3e:34:aa:ed:ec:aa:2f:26:
82:8d:62:96:c6:98:92:6d:af:cd:1d:d2:dc:d7:33:0a:16:16:
41:67:a8:c3:f5:90:76:80:a8:3c:65:42:5c:5d:ae:f2:94:74:
25:7d:3f:af:98:e4:9b:51:c1:de:d3:d6:f6:86:ef:7b:9e:ef:
ea:1d:f6:22:fd:b3:d9:cd:db:3a:60:9b:f8:94:96:8a:d9:23:
fc:0e:4d:e3:ba:37:ae:b5:1d:25:e9:b8:51:c2:bd:94:6f:a0:
3d:31:b8:15:b3:60:41:04:94:3b:9c:ce:8f:3c:a4:b7:46:88:
98:28:5a:5a:87:71:b9:3e:73:2f:8e:76:21:77:e3:7d:5b:db:
8b:bf:12:9b:35:15:af:23:85:5c:76:1e:96:21:3c:be:d0:82:
6b:45:37:0f:47:2a:26:6a:04:a6:c7:34:71:9b:b1:1a:41:94:
3a:27:74:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:53:11 2024 by rpki-client on console-fra.rpki-client.org