Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/MNdNqif8Y6NKjdeEZ9_ATap-AcM.roa
File: MNdNqif8Y6NKjdeEZ9_ATap-AcM.roa (raw, json)
Hash identifier: RZ6bVT+ViTP2T+9olIux5BNgTkKrsBNp3/BbBJvxdfM=
Subject key identifier: 30:D7:4D:AA:27:FC:63:A3:4A:8D:D7:84:67:DF:C0:4D:AA:7E:01:C3
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 01856D662D8C18F78542F69D8E8574639F5C
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/MNdNqif8Y6NKjdeEZ9_ATap-AcM.roa
Signing time: Sun 01 Jan 2023 12:54:50 +0000
ROA not before: Sun 01 Jan 2023 12:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61113
IP address blocks: 185.3.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:2d:8c:18:f7:85:42:f6:9d:8e:85:74:63:9f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Jan 1 12:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30d74daa27fc63a34a8dd78467dfc04daa7e01c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4d:07:4f:c0:c7:ca:22:66:85:b2:c6:41:96:
ea:39:3e:a6:b3:bc:8c:00:cf:04:fd:0d:13:c1:27:
d2:5f:b3:a9:04:b8:83:43:74:32:06:9f:ad:ad:66:
fb:4e:50:c1:60:d6:b2:5a:d5:bf:9b:d5:ba:78:13:
ce:69:cc:08:7c:02:0a:10:44:45:5d:cc:ad:9d:0e:
bb:5e:94:3e:0e:b4:09:6a:8d:9f:bf:47:b4:ec:68:
6a:80:cb:f3:54:5a:ea:48:6e:1e:3b:fb:40:4a:d2:
0d:fc:61:bf:82:88:31:e0:ba:52:23:58:3e:80:87:
a9:17:28:78:bb:71:bb:25:9a:dd:36:a4:99:00:40:
1f:63:5b:40:49:c6:7b:5d:f7:fe:48:8c:30:19:4e:
34:9e:07:57:b4:93:ac:ce:b0:5d:f7:b8:d4:87:36:
6c:6e:7a:e5:bb:5e:4c:86:2d:78:ff:fa:88:12:a4:
9d:f0:09:a8:e0:81:f2:6d:0e:0c:e4:ee:f3:d0:65:
9a:2e:02:2e:62:ef:af:a4:52:ef:64:0c:42:40:17:
b6:05:ae:30:0d:f2:bf:0b:5b:4d:ec:f9:f5:1a:52:
a3:11:11:37:af:be:a1:59:52:e6:67:d5:5a:50:8a:
5a:58:90:4b:75:d3:d7:94:cd:24:2b:8b:2e:03:dd:
ca:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D7:4D:AA:27:FC:63:A3:4A:8D:D7:84:67:DF:C0:4D:AA:7E:01:C3
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/MNdNqif8Y6NKjdeEZ9_ATap-AcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.22.0/24
Signature Algorithm: sha256WithRSAEncryption
69:03:89:e8:52:3d:c7:1d:9d:08:ae:45:e5:67:12:34:31:8b:
3d:45:92:9c:5a:5f:98:32:32:11:ab:10:74:f4:82:48:b4:18:
7a:86:e3:ff:d9:72:16:7d:8a:e5:ad:c4:c4:48:f7:8d:4e:11:
03:f9:cf:22:78:99:4e:bc:15:db:ae:5c:07:77:37:59:b7:5e:
68:83:83:43:0a:5b:5d:35:cb:3c:ce:d9:43:ca:c8:09:76:2e:
90:13:c9:8f:f8:81:07:71:9a:69:8c:1b:cb:20:33:83:96:1c:
fd:df:3c:94:83:20:22:75:c6:43:bc:91:79:3c:2e:a3:6d:2b:
ce:b3:1a:2b:7c:97:53:95:20:6d:86:8e:c6:71:fa:04:33:96:
7d:d3:ff:fc:da:5a:0f:73:ea:93:a4:3a:80:0d:ad:b0:21:da:
66:95:8d:91:97:c7:57:39:da:ba:d4:db:1e:6f:e0:9f:2d:80:
10:bd:cd:ed:d0:e3:7f:72:fc:7f:ca:e3:58:1e:8e:f5:29:c9:
87:ac:63:f4:fc:af:e5:f2:b2:f5:ad:7f:b2:f6:ba:93:9b:64:
b6:db:0c:a4:e8:fc:56:fa:0f:fb:29:e5:85:e1:31:d4:da:75:
f6:65:5a:66:1d:2f:d9:38:07:b1:1c:97:74:aa:37:4c:fa:d8:
61:51:a3:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtZi2MGPeFQvadjoV0Y59cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMTYyMDg5MGY3MDBmMDEyYjBiYTYwMTcyMzE0ZTNjODU5
MTk1MTMwHhcNMjMwMTAxMTI1NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGQ3NGRhYTI3ZmM2M2EzNGE4ZGQ3ODQ2N2RmYzA0ZGFhN2UwMWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi00HT8DHyiJmhbLGQZbqOT6ms7yM
AM8E/Q0TwSfSX7OpBLiDQ3QyBp+trWb7TlDBYNayWtW/m9W6eBPOacwIfAIKEERF
XcytnQ67XpQ+DrQJao2fv0e07GhqgMvzVFrqSG4eO/tAStIN/GG/gogx4LpSI1g+
gIepFyh4u3G7JZrdNqSZAEAfY1tAScZ7Xff+SIwwGU40ngdXtJOszrBd97jUhzZs
bnrlu15Mhi14//qIEqSd8Amo4IHybQ4M5O7z0GWaLgIuYu+vpFLvZAxCQBe2Ba4w
DfK/C1tN7Pn1GlKjERE3r76hWVLmZ9VaUIpaWJBLddPXlM0kK4suA93K2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDDXTaon/GOjSo3XhGffwE2qfgHDMB8GA1UdIwQY
MBaAFC4WIIkPcA8BKwumAXIxTjyFkZUTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy84MjExNTItOWYxMy00YzA5LTlkY2Qt
NDViYmIyM2ExNWQ4LzEvTU5kTnFpZjhZNk5LamRlRVo5X0FUYXAtQWNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy84MjExNTItOWYxMy00YzA5LTlkY2QtNDViYmIyM2ExNWQ4
LzEvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQMWMA0G
CSqGSIb3DQEBCwUAA4IBAQBpA4noUj3HHZ0IrkXlZxI0MYs9RZKcWl+YMjIRqxB0
9IJItBh6huP/2XIWfYrlrcTESPeNThED+c8ieJlOvBXbrlwHdzdZt15og4NDCltd
Ncs8ztlDysgJdi6QE8mP+IEHcZppjBvLIDODlhz93zyUgyAidcZDvJF5PC6jbSvO
sxorfJdTlSBtho7GcfoEM5Z90//82loPc+qTpDqADa2wIdpmlY2Rl8dXOdq61Nse
b+CfLYAQvc3t0ON/cvx/yuNYHo71KcmHrGP0/K/l8rL1rX+y9rqTm2S22wyk6PxW
+g/7KeWF4THU2nX2ZVpmHS/ZOAexHJd0qjdM+thhUaO5
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:30 2024 by rpki-client on console-ams.rpki-client.org