Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/87j7cVI14OSkZ91ihSlOHyEGKcY.roa
File: 87j7cVI14OSkZ91ihSlOHyEGKcY.roa (raw, json)
Hash identifier: zQGN9ckOY+XYci3jJdF17Jz3Tie1rLc1ciSADHJrh3E=
Subject key identifier: F3:B8:FB:71:52:35:E0:E4:A4:67:DD:62:85:29:4E:1F:21:06:29:C6
Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial: 018CC9BB0ADFCDD9D5488AC96215A0288103
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/87j7cVI14OSkZ91ihSlOHyEGKcY.roa
Signing time: Tue 02 Jan 2024 10:32:07 +0000
ROA not before: Tue 02 Jan 2024 10:32:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201255
IP address blocks: 185.179.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:0a:df:cd:d9:d5:48:8a:c9:62:15:a0:28:81:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
Validity
Not Before: Jan 2 10:32:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3b8fb715235e0e4a467dd6285294e1f210629c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e1:e7:bd:2d:4d:e1:80:30:a7:86:a5:35:92:
6c:30:7e:1b:37:a5:99:c8:73:ac:f6:33:21:24:d9:
7f:10:10:2b:35:29:5c:d1:67:10:30:2b:0e:aa:29:
a2:68:a0:75:bc:a3:5b:b9:27:ad:5f:2c:1c:2e:d6:
30:71:bd:1e:c8:07:0f:0e:81:e2:1f:fd:c8:a3:c1:
59:7e:48:59:41:70:e8:1f:66:5b:9b:9b:46:a6:bd:
de:44:7d:54:ba:42:f7:5a:2f:b5:ca:a7:a6:97:33:
b2:60:29:8a:3e:a0:cc:2e:b6:ce:b1:61:19:1b:15:
42:77:0b:0d:b0:dc:c0:52:01:d1:5c:b3:1f:d2:1f:
09:dc:44:a7:16:c9:46:96:ce:04:8e:6f:63:6e:da:
1a:fc:9f:3d:33:ce:40:4d:c7:5c:31:2d:e1:b1:69:
b9:72:6d:07:21:2b:2e:e7:86:0b:69:08:75:f6:b8:
32:a0:80:c5:9f:c0:73:f1:67:9d:ea:44:b5:8c:8b:
89:9b:59:81:45:df:b2:b6:39:3c:70:00:e2:d1:6b:
01:0e:ca:32:de:ea:3e:9d:e2:e0:70:de:80:00:f2:
b0:2a:18:96:c0:5e:b2:57:9d:da:f0:de:07:cd:7f:
01:af:db:ed:05:ca:ec:63:82:47:6b:8d:c8:9a:ed:
3e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B8:FB:71:52:35:E0:E4:A4:67:DD:62:85:29:4E:1F:21:06:29:C6
X509v3 Authority Key Identifier:
keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/87j7cVI14OSkZ91ihSlOHyEGKcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.42.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:09:03:75:1c:c4:04:e4:32:6b:c7:7a:77:d5:04:5e:aa:ed:
18:76:63:cb:5d:28:c0:b2:e3:2d:71:7e:28:e8:72:cb:59:ef:
9f:ca:a6:f9:5a:7e:68:c6:a4:c2:bb:2d:48:45:81:0e:02:d5:
b1:c3:de:71:c2:a3:53:62:dc:a6:af:21:d3:53:15:96:50:e7:
f8:a1:f7:a2:2b:12:7e:71:e0:9b:73:13:d0:02:c9:9a:7f:32:
ea:29:55:b1:e5:56:f2:6f:32:4f:1c:d7:d6:47:8b:d3:07:a1:
28:05:52:9a:bb:37:0e:06:19:e0:aa:58:76:03:bc:f8:f2:6b:
fb:29:91:2b:a8:14:7d:bd:7b:ac:2b:28:ae:10:a3:b3:e9:50:
f8:48:35:60:3d:ac:52:03:91:00:ee:45:55:53:85:05:61:49:
f3:0c:99:fb:aa:c6:6c:ae:a3:31:68:2d:aa:b9:bc:09:58:53:
7a:6f:4d:8d:af:ce:7a:e0:8f:6f:7a:c8:f7:8c:23:a8:81:3a:
5b:db:0b:39:32:cd:36:6b:39:05:9b:42:73:d2:ff:e7:3a:ec:
ef:0a:fb:3b:03:be:90:fe:03:22:5f:9c:cc:fa:3c:0a:45:47:
1c:9a:ed:45:b3:5a:a4:cb:be:df:00:2a:05:ab:2d:5e:60:08:
61:56:a8:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJuwrfzdnVSIrJYhWgKIEDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNGU0NTNhZmZlODk1YjY0NTJiODQwMjc0MzdjNWMwMGZk
MzcwNjcwHhcNMjQwMTAyMTAzMjA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2I4ZmI3MTUyMzVlMGU0YTQ2N2RkNjI4NTI5NGUxZjIxMDYyOWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuHnvS1N4YAwp4alNZJsMH4bN6WZ
yHOs9jMhJNl/EBArNSlc0WcQMCsOqimiaKB1vKNbuSetXywcLtYwcb0eyAcPDoHi
H/3Io8FZfkhZQXDoH2Zbm5tGpr3eRH1UukL3Wi+1yqemlzOyYCmKPqDMLrbOsWEZ
GxVCdwsNsNzAUgHRXLMf0h8J3ESnFslGls4Ejm9jbtoa/J89M85ATcdcMS3hsWm5
cm0HISsu54YLaQh19rgyoIDFn8Bz8Wed6kS1jIuJm1mBRd+ytjk8cADi0WsBDsoy
3uo+neLgcN6AAPKwKhiWwF6yV53a8N4HzX8Br9vtBcrsY4JHa43Imu0+owIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPO4+3FSNeDkpGfdYoUpTh8hBinGMB8GA1UdIwQY
MBaAFNxORTr/6JW2RSuEAnQ3xcAP03BnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEt
MTgyMjg2N2UxNTk2LzEvODdqN2NWSTE0T1NrWjkxaWhTbE9IeUVHS2NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEtMTgyMjg2N2UxNTk2
LzEvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubMqMA0G
CSqGSIb3DQEBCwUAA4IBAQALCQN1HMQE5DJrx3p31QRequ0YdmPLXSjAsuMtcX4o
6HLLWe+fyqb5Wn5oxqTCuy1IRYEOAtWxw95xwqNTYtymryHTUxWWUOf4ofeiKxJ+
ceCbcxPQAsmafzLqKVWx5VbybzJPHNfWR4vTB6EoBVKauzcOBhngqlh2A7z48mv7
KZErqBR9vXusKyiuEKOz6VD4SDVgPaxSA5EA7kVVU4UFYUnzDJn7qsZsrqMxaC2q
ubwJWFN6b02Nr8564I9vesj3jCOogTpb2ws5Ms02azkFm0Jz0v/nOuzvCvs7A76Q
/gMiX5zM+jwKRUccmu1Fs1qky77fACoFqy1eYAhhVqhH
-----END CERTIFICATE-----
Generated at Fri Feb 23 13:38:37 2024 by rpki-client on console-ams.rpki-client.org