Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/CENkwxELsX6n8BvQYA8h6xdycQk.roa
File: CENkwxELsX6n8BvQYA8h6xdycQk.roa (raw, json)
Hash identifier: qGJuMeNpo3j8myxOVsXuH367x2Ep7ToukkPe8P7k+qU=
Subject key identifier: 08:43:64:C3:11:0B:B1:7E:A7:F0:1B:D0:60:0F:21:EB:17:72:71:09
Certificate issuer: /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial: 0193346F002BE16A6FE25C8E9686E2E7A9A5
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/CENkwxELsX6n8BvQYA8h6xdycQk.roa
Signing time: Sat 16 Nov 2024 10:05:09 +0000
ROA not before: Sat 16 Nov 2024 10:05:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215853
IP address blocks: 185.240.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Nov 2024 15:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:34:6f:00:2b:e1:6a:6f:e2:5c:8e:96:86:e2:e7:a9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Validity
Not Before: Nov 16 10:05:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=084364c3110bb17ea7f01bd0600f21eb17727109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e7:55:6a:9d:1b:4b:fc:b4:f3:32:ed:92:31:
7c:88:4b:e4:36:24:62:b2:da:0c:4b:cf:66:04:d1:
36:1b:ab:85:68:b2:bd:2f:1f:d0:66:b6:d0:31:d9:
95:58:68:de:96:7d:89:7a:32:1d:cb:73:a5:65:6c:
24:8e:a1:d1:d1:e1:5b:67:d2:2f:78:d3:ed:d7:53:
a9:e1:7c:40:11:02:e4:e3:2f:09:93:d6:5b:f5:0a:
46:16:f0:ab:a0:15:28:73:a7:35:c1:cd:a5:99:27:
ef:ab:3b:1a:5f:89:30:13:ed:2c:39:45:3d:14:57:
c1:d3:b4:dc:8c:57:a9:77:1f:07:60:88:cb:1c:7d:
62:a9:f7:37:e3:c9:a7:48:26:20:7c:6e:f4:42:d2:
1a:57:d3:5c:cc:6e:78:24:29:af:62:69:05:ac:f9:
bd:c8:0e:48:3a:e9:9d:5d:a5:67:7d:fa:7a:69:38:
bc:67:02:b5:b9:17:ec:df:b8:15:29:1b:cd:50:f0:
63:74:4c:11:af:38:46:17:83:d4:c4:e3:a9:87:47:
e4:d5:71:d5:73:28:aa:46:2a:c8:d2:10:16:0d:ac:
60:e7:2b:13:90:ba:8c:64:2c:60:0e:30:b1:0f:a3:
54:c3:19:0d:a1:08:b1:4d:10:ba:56:2a:10:6b:9d:
cc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:43:64:C3:11:0B:B1:7E:A7:F0:1B:D0:60:0F:21:EB:17:72:71:09
X509v3 Authority Key Identifier:
keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/CENkwxELsX6n8BvQYA8h6xdycQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.180.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:72:ea:9c:a9:f5:a7:46:21:2d:eb:d8:75:62:c9:f4:2c:8f:
7d:b2:42:21:85:0f:7b:28:3c:58:4d:d5:a9:52:59:b1:04:8d:
3f:1c:6b:1e:91:c0:59:8f:d5:fb:52:a8:9c:78:5c:5d:f4:c8:
8b:eb:20:bb:b7:f0:61:c7:ce:3d:d9:6e:3a:a7:6d:a6:c6:2b:
bd:e9:90:e2:9c:c7:b2:26:94:e8:ad:fa:c6:c0:9a:34:a7:0e:
05:18:05:9c:81:d6:18:41:55:29:34:8a:b2:0f:90:ea:bd:0f:
44:4e:52:69:c7:37:50:b8:29:ca:74:c2:1b:01:27:b4:58:47:
e2:ce:70:e3:ad:d2:a6:b1:e0:79:fb:76:ec:39:3c:00:1f:f2:
fa:e3:ad:48:b3:fa:dd:45:9e:4a:87:cc:ec:0b:1b:6f:0c:48:
ed:10:6e:70:01:c1:b0:04:c3:da:db:f1:e3:d1:fb:be:14:77:
c7:30:22:14:3a:58:77:fc:e1:98:6e:64:38:1e:d4:75:c9:56:
ad:2f:7b:b0:05:ce:af:3c:3c:ae:e6:e9:59:8d:6b:6e:73:11:
85:55:bf:08:cf:84:80:bf:3b:9d:c6:72:3d:32:26:7e:a0:ad:
68:c3:de:ac:f7:d8:bb:e7:c3:2b:ee:9d:c3:62:49:07:71:95:
a1:f3:cd:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZM0bwAr4Wpv4lyOlobi56mlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZGMzY2IxZTA3ZDcxNGI3MjVmNTFhNjZkMWRjZmQ4N2Fl
MWM1MWEwHhcNMjQxMTE2MTAwNTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODQzNjRjMzExMGJiMTdlYTdmMDFiZDA2MDBmMjFlYjE3NzI3MTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+dVap0bS/y08zLtkjF8iEvkNiRi
stoMS89mBNE2G6uFaLK9Lx/QZrbQMdmVWGjeln2JejIdy3OlZWwkjqHR0eFbZ9Iv
eNPt11Op4XxAEQLk4y8Jk9Zb9QpGFvCroBUoc6c1wc2lmSfvqzsaX4kwE+0sOUU9
FFfB07TcjFepdx8HYIjLHH1iqfc348mnSCYgfG70QtIaV9NczG54JCmvYmkFrPm9
yA5IOumdXaVnffp6aTi8ZwK1uRfs37gVKRvNUPBjdEwRrzhGF4PUxOOph0fk1XHV
cyiqRirI0hAWDaxg5ysTkLqMZCxgDjCxD6NUwxkNoQixTRC6VioQa53MBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAhDZMMRC7F+p/Ab0GAPIesXcnEJMB8GA1UdIwQY
MBaAFBXcPLHgfXFLcl9Rpm0dz9h64cUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmR3OHNlQjljVXR5WDFHbWJSM1AySHJoeFJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9hOWNjNWQtNjllMC00NTk3LWFkNjQt
ZmUyY2I0MzFjZjJmLzEvQ0VOa3d4RUxzWDZuOEJ2UVlBOGg2eGR5Y1FrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9hOWNjNWQtNjllMC00NTk3LWFkNjQtZmUyY2I0MzFjZjJm
LzEvRmR3OHNlQjljVXR5WDFHbWJSM1AySHJoeFJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufC0MA0G
CSqGSIb3DQEBCwUAA4IBAQA8cuqcqfWnRiEt69h1Ysn0LI99skIhhQ97KDxYTdWp
UlmxBI0/HGsekcBZj9X7UqiceFxd9MiL6yC7t/Bhx8492W46p22mxiu96ZDinMey
JpTorfrGwJo0pw4FGAWcgdYYQVUpNIqyD5DqvQ9ETlJpxzdQuCnKdMIbASe0WEfi
znDjrdKmseB5+3bsOTwAH/L6461Is/rdRZ5Kh8zsCxtvDEjtEG5wAcGwBMPa2/Hj
0fu+FHfHMCIUOlh3/OGYbmQ4HtR1yVatL3uwBc6vPDyu5ulZjWtucxGFVb8Iz4SA
vzudxnI9MiZ+oK1ow96s99i758Mr7p3DYkkHcZWh880M
-----END CERTIFICATE-----
Generated at Sun Nov 17 17:45:25 2024 by rpki-client on console-fra.rpki-client.org