Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/c8X0uqa2jVA8_IYfQu9hkXdtWuQ.roa
File: c8X0uqa2jVA8_IYfQu9hkXdtWuQ.roa (raw, json)
Hash identifier: ZFmArbMQPKS+sx9oSLZ24QCLQcU6ujkoyYIIhkVpWko=
Subject key identifier: 73:C5:F4:BA:A6:B6:8D:50:3C:FC:86:1F:42:EF:61:91:77:6D:5A:E4
Certificate issuer: /CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Certificate serial: 018CC7950647EAF9CBC9B086EC2E8B4B1C06
Authority key identifier: 7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/c8X0uqa2jVA8_IYfQu9hkXdtWuQ.roa
Signing time: Tue 02 Jan 2024 00:31:21 +0000
ROA not before: Tue 02 Jan 2024 00:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3175
IP address blocks: 185.45.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 12:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:06:47:ea:f9:cb:c9:b0:86:ec:2e:8b:4b:1c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Validity
Not Before: Jan 2 00:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73c5f4baa6b68d503cfc861f42ef6191776d5ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:c9:99:c5:96:cc:93:22:ca:db:71:a1:5a:
e9:c4:8a:29:09:c7:81:48:de:15:c2:86:99:2a:c1:
7e:bd:d5:8b:62:46:34:f8:85:0b:a3:6f:3d:24:0f:
38:b6:b9:70:bd:07:fa:5c:e7:d9:2f:b3:26:92:dc:
a4:30:ee:d8:9f:62:57:cd:03:c8:5e:b1:6d:dc:38:
ec:4a:18:f6:60:9c:71:97:f8:4b:68:a6:d5:7e:c8:
7a:d9:6d:ea:a1:fc:e3:17:2d:cb:f7:f5:06:df:a6:
85:17:c9:4c:4c:93:aa:7a:50:12:5a:f0:cd:df:78:
56:ee:28:ea:e1:db:c0:c6:30:48:44:d2:59:26:2f:
6a:4b:06:58:f3:1c:61:34:8c:51:d7:13:3a:bb:eb:
a0:0d:0e:66:5a:92:18:8d:be:8f:bb:03:6b:0a:62:
e3:50:bb:86:a4:1d:0c:bd:24:5e:d9:20:08:a6:15:
9d:78:fd:54:10:f5:76:0f:83:51:0f:e7:a3:80:0b:
9b:e8:34:07:c6:2e:a9:1c:58:66:20:7b:ca:bd:fd:
c0:3c:e6:a4:6f:50:70:d2:30:90:73:87:5a:f8:70:
05:48:54:aa:83:ca:9e:c8:31:a0:fb:75:08:98:f2:
6d:04:7d:ef:28:7c:3d:8e:13:9c:f0:cb:f0:3c:e2:
b5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C5:F4:BA:A6:B6:8D:50:3C:FC:86:1F:42:EF:61:91:77:6D:5A:E4
X509v3 Authority Key Identifier:
keyid:7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/c8X0uqa2jVA8_IYfQu9hkXdtWuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.81.0/24
Signature Algorithm: sha256WithRSAEncryption
47:9d:ad:ee:b5:36:4b:97:10:66:21:e4:77:2d:c8:0a:43:c4:
29:eb:b5:01:8e:84:83:43:cb:ba:e0:e7:27:c0:3c:bd:e6:59:
f6:22:d5:ae:05:7c:03:27:93:d2:07:69:1b:dd:9f:c9:91:36:
7d:ab:fb:a0:ac:7d:80:40:cc:c9:1d:a4:b7:7e:a8:ed:a8:15:
00:20:b3:15:2c:45:00:2c:e4:57:f4:d4:ca:d3:19:46:90:4d:
b8:2d:97:7c:fe:a1:a7:4b:62:75:12:11:4e:b1:db:d2:15:94:
c3:b8:97:b7:7d:cf:78:7f:f6:1f:9d:b2:b4:80:2c:24:ca:f4:
de:28:e2:70:98:9e:ee:de:76:6e:a6:19:2a:9d:32:79:c8:6e:
8b:80:cd:c0:19:5e:e5:5e:7c:8e:fb:93:da:e7:5b:ac:5b:87:
1e:29:c0:fd:14:96:1d:42:8c:1e:d7:d5:f6:ec:43:8e:e1:b9:
3a:2a:a4:a0:e2:87:94:7b:8a:b1:de:7d:7c:4c:f2:60:b6:9c:
da:14:8e:67:ac:7c:30:25:f5:bc:fb:eb:67:32:46:31:c4:13:
bc:d3:7b:ed:21:a3:bb:52:ee:c7:1b:27:72:59:59:ef:7d:13:
74:c3:50:47:c4:f7:92:27:1a:95:8c:a4:0b:1d:d4:6a:13:b5:
70:08:91:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlQZH6vnLybCG7C6LSxwGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNDNiMGVjNzk5NTFkNWQ1NTgwMTMzZTUzMjlhOTBmMmZl
ZTFjNWIwHhcNMjQwMTAyMDAzMTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2M1ZjRiYWE2YjY4ZDUwM2NmYzg2MWY0MmVmNjE5MTc3NmQ1YWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSPJmcWWzJMiyttxoVrpxIopCceB
SN4VwoaZKsF+vdWLYkY0+IULo289JA84trlwvQf6XOfZL7MmktykMO7Yn2JXzQPI
XrFt3DjsShj2YJxxl/hLaKbVfsh62W3qofzjFy3L9/UG36aFF8lMTJOqelASWvDN
33hW7ijq4dvAxjBIRNJZJi9qSwZY8xxhNIxR1xM6u+ugDQ5mWpIYjb6PuwNrCmLj
ULuGpB0MvSRe2SAIphWdeP1UEPV2D4NRD+ejgAub6DQHxi6pHFhmIHvKvf3APOak
b1Bw0jCQc4da+HAFSFSqg8qeyDGg+3UImPJtBH3vKHw9jhOc8MvwPOK1aQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHPF9Lqmto1QPPyGH0LvYZF3bVrkMB8GA1UdIwQY
MBaAFH1DsOx5lR1dVYATPlMpqQ8v7hxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlVPdzdIbVZIVjFWZ0JNLVV5bXBEeV91SEZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNjA0ZTAtOTFmYS00ZmU5LWJiMjgt
OTNhNjE5MmIxNzg1LzEvYzhYMHVxYTJqVkE4X0lZZlF1OWhrWGR0V3VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yNjA0ZTAtOTFmYS00ZmU5LWJiMjgtOTNhNjE5MmIxNzg1
LzEvZlVPdzdIbVZIVjFWZ0JNLVV5bXBEeV91SEZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS1RMA0G
CSqGSIb3DQEBCwUAA4IBAQBHna3utTZLlxBmIeR3LcgKQ8Qp67UBjoSDQ8u64Ocn
wDy95ln2ItWuBXwDJ5PSB2kb3Z/JkTZ9q/ugrH2AQMzJHaS3fqjtqBUAILMVLEUA
LORX9NTK0xlGkE24LZd8/qGnS2J1EhFOsdvSFZTDuJe3fc94f/YfnbK0gCwkyvTe
KOJwmJ7u3nZuphkqnTJ5yG6LgM3AGV7lXnyO+5Pa51usW4ceKcD9FJYdQowe19X2
7EOO4bk6KqSg4oeUe4qx3n18TPJgtpzaFI5nrHwwJfW8++tnMkYxxBO803vtIaO7
Uu7HGydyWVnvfRN0w1BHxPeSJxqVjKQLHdRqE7VwCJFb
-----END CERTIFICATE-----
Generated at Wed Mar 6 16:58:51 2024 by rpki-client on console-fra.rpki-client.org