Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/9qMdT7U2AHiSw38qXUw1_Nhf-hs.roa
File: 9qMdT7U2AHiSw38qXUw1_Nhf-hs.roa (raw, json)
Hash identifier: yoVIXnaugbCSju+ZItJT1EjPU0+2ZsJiQKd96oRECQg=
Subject key identifier: F6:A3:1D:4F:B5:36:00:78:92:C3:7F:2A:5D:4C:35:FC:D8:5F:FA:1B
Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Certificate serial: 018AADCA4984E4B65AE6312D3631B6B2245E
Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/9qMdT7U2AHiSw38qXUw1_Nhf-hs.roa
Signing time: Tue 19 Sep 2023 14:13:50 +0000
ROA not before: Tue 19 Sep 2023 14:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31673
IP address blocks: 185.87.152.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:ca:49:84:e4:b6:5a:e6:31:2d:36:31:b6:b2:24:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Validity
Not Before: Sep 19 14:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6a31d4fb536007892c37f2a5d4c35fcd85ffa1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:48:1c:8b:91:b2:3e:4f:37:53:f7:01:a1:d4:
29:e6:fd:7e:46:17:a3:83:3c:11:54:b5:c1:82:9e:
e7:36:6a:d5:4d:9d:aa:c3:7f:29:02:6c:05:22:50:
13:7a:fa:86:c4:de:9c:80:4c:60:dd:ec:a9:e6:05:
c6:08:d0:7f:8b:bd:fa:0c:5b:1f:94:fd:27:bb:51:
b7:1c:c2:28:20:94:2a:6b:82:3e:28:79:05:47:c6:
b0:c9:dc:6a:1b:aa:56:4c:1f:8c:96:d2:c7:e2:6d:
20:79:72:19:57:e8:ef:5d:c9:a0:64:bb:18:ad:bf:
66:6d:73:a4:be:0d:c6:30:dd:ba:9a:20:5a:14:77:
21:8d:1e:f6:a5:b7:d4:34:3b:11:79:e9:fc:98:b6:
8b:7c:7c:1a:9a:47:08:81:70:aa:4c:4f:fd:2a:e7:
aa:03:ec:aa:a9:7d:ee:34:a2:2d:c1:c9:b1:32:ba:
a9:82:3c:1a:ec:1f:2f:0a:61:e4:53:b0:b1:07:69:
e5:85:b4:9b:e6:a0:22:76:bb:10:4a:3b:6b:d2:ab:
df:19:98:51:0d:df:89:75:af:cc:0c:2a:44:ba:16:
ed:b2:53:02:be:3c:4f:78:9a:48:33:75:10:a6:5b:
30:d9:cc:53:8f:25:70:cc:db:13:31:b5:0b:74:63:
e0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A3:1D:4F:B5:36:00:78:92:C3:7F:2A:5D:4C:35:FC:D8:5F:FA:1B
X509v3 Authority Key Identifier:
keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/9qMdT7U2AHiSw38qXUw1_Nhf-hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.152.0/22
Signature Algorithm: sha256WithRSAEncryption
01:88:17:02:6e:4f:a2:9d:aa:7f:c8:4a:6a:2f:08:f1:9f:06:
83:60:81:81:81:eb:ec:b6:48:41:0a:4b:e5:15:09:a2:a1:1e:
94:e5:1b:36:68:47:3c:c0:3e:8b:6c:01:c3:9f:82:fd:65:89:
1f:c4:0f:2f:6f:7a:71:0d:a8:c5:d8:62:eb:17:40:42:41:b2:
2e:3c:2b:8e:d6:0e:4a:7b:99:c7:40:18:88:e1:5d:1b:86:0f:
51:ee:3c:5e:1b:da:e1:e4:84:0b:0b:79:46:55:28:91:0e:c0:
27:76:e9:e8:e8:cb:d4:f4:40:53:85:c8:5e:cc:a9:a0:80:db:
31:cb:97:19:5b:73:66:9e:8d:ec:a3:02:b9:33:86:2c:87:00:
17:f8:9e:71:7b:fc:e7:a9:18:0f:d1:4c:03:12:8d:96:05:05:
a7:e9:16:ea:ca:23:fa:83:07:74:38:73:49:1d:0a:08:99:bd:
50:a5:22:06:1c:e2:a4:60:4e:57:bd:83:3a:98:c1:c1:6a:ea:
a0:6c:01:06:32:3f:de:c3:2f:cd:7e:01:f0:1f:50:1f:55:32:
41:9e:22:18:8d:cc:a9:6c:54:01:5b:86:a7:ed:44:bf:22:19:
69:ae:84:dc:34:7b:03:24:45:11:5f:ef:fc:e9:6f:a5:cb:dc:
b4:d2:31:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:17 2024 by rpki-client on console-fra.rpki-client.org