Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/dac1Yo-VRt3YngJz6tv9SU8edJU.roa
File: dac1Yo-VRt3YngJz6tv9SU8edJU.roa (raw, json)
Hash identifier: oohNNXyMUHw6GzPTJ1JLDlP2hiTRxbvf5cT4fzvzxHE=
Subject key identifier: 75:A7:35:62:8F:95:46:DD:D8:9E:02:73:EA:DB:FD:49:4F:1E:74:95
Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Certificate serial: 018CC72692CA2179292B80F2E3ADF84D5F2E
Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/dac1Yo-VRt3YngJz6tv9SU8edJU.roa
Signing time: Mon 01 Jan 2024 22:30:43 +0000
ROA not before: Mon 01 Jan 2024 22:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205800
IP address blocks: 185.239.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 11:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:92:ca:21:79:29:2b:80:f2:e3:ad:f8:4d:5f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Validity
Not Before: Jan 1 22:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75a735628f9546ddd89e0273eadbfd494f1e7495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:37:bb:23:35:d4:88:3c:17:b0:6f:26:12:60:
8d:b4:b5:1c:d8:7b:a2:1c:af:9b:90:f3:28:61:69:
55:fc:40:78:7c:d0:1e:5a:e9:78:98:fe:2d:66:ec:
1c:b9:eb:f4:d1:4f:67:ac:c1:ef:4f:04:93:83:3d:
f4:b5:b7:a1:95:6c:72:1c:17:e4:e4:a8:17:7d:bd:
1c:64:f3:23:10:36:17:6a:57:85:88:f5:e5:c0:64:
9e:12:44:d8:f3:7a:57:c7:4c:b8:ba:23:0c:32:01:
51:bd:f5:35:0d:f8:e3:5b:67:98:a3:91:85:c4:4c:
05:d5:ee:8f:34:91:2c:24:f4:7a:80:2d:15:4a:d1:
6a:0a:fd:76:68:f3:d0:8b:c6:16:78:2f:08:03:9e:
60:0a:f0:b1:59:fb:fd:79:10:53:8e:ab:a0:eb:00:
5a:41:b4:05:18:30:37:df:a7:d7:23:3c:e8:4e:95:
74:71:2b:11:19:93:13:03:1e:0c:6a:c0:03:77:7e:
78:fa:4c:dd:64:b5:5f:a4:45:a6:dd:2b:80:10:fd:
59:f6:07:3d:f5:e3:99:c2:12:79:2a:c6:e3:ce:02:
61:84:e2:34:9b:44:f5:05:06:c1:ef:06:24:74:d9:
20:f2:4d:a9:c4:46:71:b4:3a:44:b4:89:49:18:a5:
fe:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A7:35:62:8F:95:46:DD:D8:9E:02:73:EA:DB:FD:49:4F:1E:74:95
X509v3 Authority Key Identifier:
keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/dac1Yo-VRt3YngJz6tv9SU8edJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.177.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:8b:d5:1d:fb:e0:b9:2c:31:74:18:83:c0:77:74:62:48:50:
86:f3:ad:b7:37:d4:58:cb:16:78:63:da:67:6b:30:4a:27:41:
25:a9:da:25:5a:08:1e:54:d4:3f:36:83:62:e9:cc:a1:a4:f0:
a4:ff:57:47:0e:a1:09:4a:a1:b2:41:0b:9b:f3:7c:db:9e:33:
12:4d:32:59:49:5f:5c:fd:5c:7e:ec:2c:84:29:f8:33:e6:10:
4c:4f:7a:bc:8a:37:9e:20:3c:58:3d:c5:3e:c2:32:3a:e9:8e:
6c:d6:25:47:ad:54:86:f6:d6:3c:ed:16:ef:5c:01:a3:0b:88:
1e:b0:2d:e1:02:d9:64:c2:95:4a:ba:aa:5e:b8:5e:f0:95:8c:
a5:ed:34:9f:46:8c:bd:3a:4f:6a:4c:90:05:f3:ed:ff:98:ea:
ef:54:bf:67:01:0b:82:a7:5e:31:42:1c:ef:cc:11:48:51:24:
a8:0b:91:15:2d:39:8d:cd:ed:b7:b4:30:56:7d:24:e0:55:c2:
77:4e:62:6d:3e:54:ee:c4:2e:36:bb:4e:ba:24:89:04:f0:63:
4d:03:5d:3b:0e:98:bc:62:6b:4c:a8:df:93:d4:ab:37:8b:da:
db:ff:09:28:25:0f:22:9e:13:1b:34:ac:e3:aa:a9:3f:ed:58:
f4:11:f5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:36 2024 by rpki-client on console-fra.rpki-client.org