Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/mKQYgkdj-Cl9EqNNoTiPL5_SkTk.roa
File: mKQYgkdj-Cl9EqNNoTiPL5_SkTk.roa (raw, json)
Hash identifier: 5hdzLv3ZSdhTK9vCe8L29Ax17Ap0zTdP+Gedk4NEkno=
Subject key identifier: 98:A4:18:82:47:63:F8:29:7D:12:A3:4D:A1:38:8F:2F:9F:D2:91:39
Certificate issuer: /CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Certificate serial: 01857095089DF8C8CBDCC59492B5E6C5F45B
Authority key identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/mKQYgkdj-Cl9EqNNoTiPL5_SkTk.roa
Signing time: Mon 02 Jan 2023 03:44:53 +0000
ROA not before: Mon 02 Jan 2023 03:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42853
IP address blocks: 185.25.245.0/24 maxlen: 24
185.25.244.0/24 maxlen: 24
185.25.244.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:08:9d:f8:c8:cb:dc:c5:94:92:b5:e6:c5:f4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Validity
Not Before: Jan 2 03:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98a418824763f8297d12a34da1388f2f9fd29139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:10:9d:18:84:e7:e4:c7:27:07:87:1e:6a:bc:
8f:1f:01:6e:40:cb:d1:72:27:82:d7:ac:bc:c2:28:
b7:06:a8:79:22:9e:98:7c:04:c9:e7:6a:2b:0a:60:
a8:d7:a0:71:29:00:41:f0:f2:cc:a2:38:e5:44:7b:
16:cb:58:98:0a:bb:7e:55:03:4c:d2:44:60:1b:e6:
6a:11:6c:5b:ac:52:1e:ae:ff:8f:1f:c8:22:71:69:
64:15:66:50:5d:6f:60:8e:c0:fa:31:d2:80:9b:f5:
36:03:62:49:22:d2:aa:7c:aa:2e:5a:11:82:08:a1:
b3:3d:a3:69:2f:b1:c2:41:96:06:ba:20:23:d2:f5:
71:83:c1:eb:71:c9:32:ba:af:e8:61:91:eb:05:62:
ff:d5:d4:0d:00:93:e6:02:3b:87:bb:b0:b3:08:9d:
d5:d3:8d:91:ec:42:ac:df:40:6d:fb:01:2c:a5:3b:
56:91:24:3a:c5:c7:32:57:2a:d4:7f:c7:15:31:12:
3e:c2:2c:f6:e5:88:95:54:dc:e5:38:f0:5e:db:e7:
b0:e3:e5:04:78:d8:68:86:5d:ea:82:31:63:3a:a5:
d4:27:29:10:f8:e2:46:68:1f:58:61:4f:10:fa:e5:
fd:69:aa:19:6e:6f:1f:c1:5b:52:0f:ae:e7:cf:8e:
bc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A4:18:82:47:63:F8:29:7D:12:A3:4D:A1:38:8F:2F:9F:D2:91:39
X509v3 Authority Key Identifier:
keyid:DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/mKQYgkdj-Cl9EqNNoTiPL5_SkTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.244.0/23
Signature Algorithm: sha256WithRSAEncryption
70:54:b6:26:d9:56:85:0b:ac:a8:c5:1b:f9:7d:61:4b:3c:5e:
e0:f2:89:c2:e3:36:92:a5:85:ea:ec:08:88:3a:45:96:e8:8f:
9b:ee:ca:20:d4:e2:ca:67:c5:c6:ec:e5:5a:14:34:2d:8c:06:
8f:a6:17:a4:19:9c:b1:47:19:17:28:26:00:73:2d:91:a3:a3:
f2:15:51:37:27:26:80:45:0a:2b:a9:44:64:7f:f5:bc:43:b2:
89:82:25:87:e1:10:54:b2:00:6a:e4:44:f0:1d:ab:63:54:65:
a6:7f:c7:bd:0b:2b:54:cb:0d:81:7b:c5:25:37:8c:f2:7e:44:
81:d7:79:a1:10:b6:16:6d:95:c7:bb:a4:a9:3a:df:0e:b7:18:
ba:f4:c6:48:11:c1:18:90:bc:18:79:20:b4:49:15:58:8e:56:
03:8a:8b:37:ba:05:c1:db:2b:b2:c7:61:56:2e:b5:f7:57:7c:
a5:f5:68:88:be:0b:4a:bf:4b:27:e9:c2:e6:05:4f:ba:0f:24:
45:5a:b9:c6:06:38:ee:cc:52:ba:c8:ca:67:29:c8:6c:93:38:
af:01:43:03:a7:c1:0d:e2:cf:5f:00:c7:cf:05:30:42:bb:5c:
8c:c2:14:21:65:80:98:fc:ac:11:55:c8:63:ed:80:01:f0:00:
4d:65:86:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:13 2024 by rpki-client on console-ams.rpki-client.org