Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/mM9EcpXNbB-OfNDPXENQEHggMEs.roa
File: mM9EcpXNbB-OfNDPXENQEHggMEs.roa (raw, json)
Hash identifier: uKr35Md8t94wzZ6fuWpCDkn4FYTJwj1DYksc3Vbcnrg=
Subject key identifier: 98:CF:44:72:95:CD:6C:1F:8E:7C:D0:CF:5C:43:50:10:78:20:30:4B
Certificate issuer: /CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Certificate serial: 0185712796A2E213F0107B70AD01DBDDE859
Authority key identifier: A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/mM9EcpXNbB-OfNDPXENQEHggMEs.roa
Signing time: Mon 02 Jan 2023 06:24:57 +0000
ROA not before: Mon 02 Jan 2023 06:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212945
IP address blocks: 195.85.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:96:a2:e2:13:f0:10:7b:70:ad:01:db:dd:e8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Validity
Not Before: Jan 2 06:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98cf447295cd6c1f8e7cd0cf5c4350107820304b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:88:26:c2:66:5c:6b:d1:21:4d:1a:7d:23:ff:
ea:2e:3f:0d:59:0b:53:31:59:74:6f:31:10:1b:48:
6a:b4:95:4a:d7:e7:82:1a:a7:7d:67:3d:f8:a0:1b:
c5:1c:86:b7:74:31:bf:db:cb:da:78:c2:9e:ad:72:
c0:4c:e0:79:fc:6f:f7:a4:69:26:0e:35:68:51:f7:
71:2c:5a:6b:43:94:b9:99:d1:d7:d5:6d:4a:6b:63:
67:14:7d:92:70:3b:26:69:88:2b:2a:42:50:ee:52:
2f:21:c3:49:16:1e:91:a6:62:47:b5:1e:2e:50:63:
9e:c6:27:2a:95:00:b5:d2:dc:dd:57:36:2a:d0:1b:
a1:aa:18:f2:c1:8a:e2:84:a1:54:d2:88:d0:3d:32:
27:f6:22:05:21:9b:97:10:ab:0b:c1:72:47:58:0d:
22:b9:e2:47:2c:57:e5:5a:0a:67:a1:da:28:71:26:
68:36:0a:1f:47:94:c6:94:df:53:0e:1e:16:4f:7d:
e7:86:04:34:75:0f:a8:a5:e4:e1:9f:6f:39:c8:a4:
74:2a:59:55:a8:11:13:66:12:9e:5f:2f:da:b8:29:
80:ff:89:60:b6:6d:97:1f:cd:b1:2b:70:69:6d:7f:
10:c5:93:0d:b7:e1:e3:46:43:ce:25:6f:fd:78:aa:
98:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CF:44:72:95:CD:6C:1F:8E:7C:D0:CF:5C:43:50:10:78:20:30:4B
X509v3 Authority Key Identifier:
keyid:A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/mM9EcpXNbB-OfNDPXENQEHggMEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.212.0/24
Signature Algorithm: sha256WithRSAEncryption
54:e7:8f:fe:8c:04:c9:95:74:b1:57:59:7c:14:5e:1f:6e:da:
6b:da:30:2f:b5:47:70:89:46:3c:81:26:03:8b:c4:17:b3:c9:
1b:58:94:8d:bd:0c:48:2b:9e:6d:5a:f6:41:ea:58:b5:6d:d2:
d5:16:1a:80:1f:92:cd:7e:36:10:6a:30:b8:7f:8e:88:09:65:
1a:9d:5b:8f:ee:3a:22:52:7e:ce:73:40:39:9b:20:a6:a2:5e:
af:c8:a2:43:09:d5:f0:ae:73:ee:9f:ba:b5:ec:21:02:b1:00:
d0:1a:e2:59:d5:04:c7:53:77:0d:4b:98:e3:7b:65:9c:40:4a:
e9:13:23:77:a2:35:3f:7c:d9:16:bb:6b:57:0a:d1:05:c8:41:
5c:c8:e8:a8:86:bf:8c:59:a5:7e:96:78:2d:ab:20:4c:f1:78:
58:3d:15:ca:68:35:79:93:0d:65:08:24:d9:7c:55:57:61:24:
d2:ee:2d:ea:b1:ca:f1:8a:d9:99:95:62:bd:c9:64:d7:17:6d:
4b:08:e7:87:37:fe:60:09:1a:bb:ac:4d:db:1c:c2:3b:32:28:
a2:9d:89:a8:65:9f:02:3d:6f:00:0b:15:4c:52:f8:84:55:4c:
3f:51:e6:c9:1c:90:14:70:bd:e9:7c:f0:90:f1:c7:ec:1b:21:
6b:35:5a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:18 2024 by rpki-client on console-ams.rpki-client.org