Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/1-MOn-wBRrFkaA4HUPr-qgNZuZtM.roa
File: 1-MOn-wBRrFkaA4HUPr-qgNZuZtM.roa (raw, json)
Hash identifier: ZOQu1EjEt5wCeOx7Kfu6Yu+bbsxfOJ0ZbfPt/BSxW1I=
Subject key identifier: F8:C3:A7:FB:00:51:AC:59:1A:03:81:D4:3E:BF:AA:80:D6:6E:66:D3
Certificate issuer: /CN=4fcf77105f95075ce585d427e97754e8f007a8b9
Certificate serial: 018693BC7220510EA9C6D3BBFE99737E1809
Authority key identifier: 4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/1-MOn-wBRrFkaA4HUPr-qgNZuZtM.roa
Signing time: Mon 27 Feb 2023 16:37:25 +0000
ROA not before: Mon 27 Feb 2023 16:37:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199805
IP address blocks: 185.45.144.0/23 maxlen: 23
185.45.146.0/24 maxlen: 24
185.45.147.0/24 maxlen: 24
2a01:7e27::/32 maxlen: 32
2a01:7e21::/32 maxlen: 32
2a01:7e20::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:93:bc:72:20:51:0e:a9:c6:d3:bb:fe:99:73:7e:18:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fcf77105f95075ce585d427e97754e8f007a8b9
Validity
Not Before: Feb 27 16:37:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8c3a7fb0051ac591a0381d43ebfaa80d66e66d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:51:15:d3:33:ab:42:d7:36:a7:f7:d2:33:
68:61:dd:64:a9:89:83:03:3e:7d:2c:5e:bd:08:2f:
fb:0b:da:e5:c2:63:93:16:e7:f2:7b:f2:3e:53:be:
59:11:4a:55:c6:08:a7:f5:f8:45:39:05:98:84:d3:
fd:fd:53:3e:ae:18:cf:d4:9c:b0:d7:5d:8a:c2:c9:
8f:db:3f:7c:18:59:dc:f6:06:d9:83:7d:60:45:48:
72:92:ef:65:9f:de:8c:0e:ab:67:0d:54:d6:ab:04:
c5:8e:7b:e1:4a:0c:36:8a:2f:98:30:30:39:1d:5a:
89:20:8c:28:56:37:d8:e3:b7:62:3a:bb:a8:d9:df:
4c:de:d0:1b:3a:1c:9c:75:17:92:62:8f:e6:8e:54:
f6:2d:f9:19:bf:d2:4c:5a:4c:d5:dc:57:0f:a0:70:
cd:5e:67:9f:7d:ba:51:ac:b5:17:51:06:22:92:c7:
6e:1b:f2:aa:6d:b0:3f:89:bc:f3:58:6b:82:e8:41:
6b:6e:34:72:c1:9b:d6:aa:37:e0:7d:67:ea:43:bc:
0f:95:63:d9:6c:99:18:24:6f:c4:3d:82:76:c8:d1:
4c:63:65:22:10:de:d2:54:10:34:07:65:5a:d7:69:
e9:cd:33:37:0d:2c:4c:8a:ee:09:81:cd:99:ac:ad:
e0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C3:A7:FB:00:51:AC:59:1A:03:81:D4:3E:BF:AA:80:D6:6E:66:D3
X509v3 Authority Key Identifier:
keyid:4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/1-MOn-wBRrFkaA4HUPr-qgNZuZtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.144.0/22
IPv6:
2a01:7e20::/31
2a01:7e27::/32
Signature Algorithm: sha256WithRSAEncryption
0d:01:c2:27:9f:0b:3f:72:9a:b8:f1:9c:45:5c:7f:d3:f8:0c:
43:ba:8e:65:ef:1b:e8:81:2f:df:61:ba:c4:e4:a4:a5:7c:8f:
15:5e:d7:7f:df:fd:40:5a:52:00:81:73:15:93:e8:1f:8e:2a:
64:b0:6b:8d:e4:ab:c8:20:14:77:89:f5:28:52:6a:12:6d:4a:
01:0f:12:28:1c:65:54:43:93:17:e7:28:e8:c6:95:3a:b8:8c:
e0:b1:f9:b1:65:5e:32:b0:2b:f6:d3:e8:64:8c:d4:da:c1:9f:
8e:a3:be:58:c7:07:e9:07:6f:d1:21:bd:c4:0c:0b:b7:4a:56:
68:be:9a:c9:48:42:56:c8:47:39:6f:f5:c1:2e:2d:b4:43:b2:
4d:e0:1a:a3:e8:ee:02:b2:a0:8f:48:4b:e2:73:96:a6:7d:55:
b5:0f:af:ad:0d:50:fb:dd:c6:2d:8e:9e:ed:4a:b7:3c:dc:08:
64:4a:88:68:d1:4d:36:96:8a:38:9f:3a:87:01:7e:0c:a3:4b:
e5:60:ac:58:2f:d8:b5:30:2b:0a:2a:2d:17:5d:fe:ca:48:06:
33:60:2e:ef:a8:be:99:4b:ca:3d:6f:46:13:4f:e9:be:46:d7:
ee:6b:a5:bf:72:f1:2a:e3:79:a6:49:6e:33:70:17:96:68:1a:
18:f7:56:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:49 2024 by rpki-client on console-ams.rpki-client.org