Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/MFA2ejiNTgZ9PDJznyCTymOjnRE.roa
File: MFA2ejiNTgZ9PDJznyCTymOjnRE.roa (raw, json)
Hash identifier: iFGSQplkJoji0V5j1rBKR8Oae6Hws/mlG5q8j0PIfZY=
Subject key identifier: 30:50:36:7A:38:8D:4E:06:7D:3C:32:73:9F:20:93:CA:63:A3:9D:11
Certificate issuer: /CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Certificate serial: 01856CE62B7D97A1325144F024F91F2A5E1F
Authority key identifier: A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/MFA2ejiNTgZ9PDJznyCTymOjnRE.roa
Signing time: Sun 01 Jan 2023 10:35:01 +0000
ROA not before: Sun 01 Jan 2023 10:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206455
IP address blocks: 45.85.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:2b:7d:97:a1:32:51:44:f0:24:f9:1f:2a:5e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Validity
Not Before: Jan 1 10:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3050367a388d4e067d3c32739f2093ca63a39d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:39:50:b0:c7:b0:2d:08:32:21:46:a2:60:12:
f7:a4:86:3e:15:58:01:ad:f2:b7:b7:a5:18:5f:98:
5f:3e:37:b0:5e:9f:48:8c:cb:aa:a8:3c:e8:e4:21:
cc:18:0b:0b:da:94:64:9a:42:22:a4:c7:8b:0e:01:
7b:85:43:76:ce:8e:87:af:ae:f4:50:94:94:a3:d1:
5f:ba:aa:30:21:21:1e:7c:59:48:5b:52:0b:0f:e2:
93:be:ee:aa:6f:cf:ce:b1:5c:1b:c7:fc:f6:64:0a:
7a:db:33:77:66:8b:4a:e0:33:f7:5e:a2:5a:b7:60:
41:b3:66:16:ec:2c:7f:1f:ed:56:dd:a9:8e:81:87:
7b:31:e5:a9:3e:54:af:d6:ad:4b:66:81:96:6d:12:
60:01:96:5e:d0:19:69:b8:d3:d6:f3:e1:6c:c4:77:
85:cf:74:f0:0e:d4:6a:e8:fb:37:d5:4f:0a:44:10:
be:a0:ec:71:b7:ae:0f:6c:88:92:e1:5e:81:32:20:
ae:96:75:fc:91:8d:f1:51:79:cd:d6:6c:c8:0f:0e:
55:fd:0a:e1:d1:9c:1b:b5:96:fc:bb:f2:ba:54:f7:
3a:cd:ee:cb:01:06:4a:4f:1d:b9:16:88:42:40:58:
79:89:1d:70:f1:8e:16:da:06:13:fc:c6:a6:9b:03:
6a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:50:36:7A:38:8D:4E:06:7D:3C:32:73:9F:20:93:CA:63:A3:9D:11
X509v3 Authority Key Identifier:
keyid:A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/MFA2ejiNTgZ9PDJznyCTymOjnRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.185.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f5:2d:fe:77:57:f4:b3:23:cc:14:9d:82:91:50:3c:35:19:
1b:90:d0:e0:53:7a:87:5c:ac:2c:85:82:83:d1:c3:90:31:d5:
31:68:12:74:47:0b:b9:12:19:2b:6c:09:a7:51:fb:69:d3:b1:
d9:a2:6b:1f:a0:72:7a:7c:03:a4:0d:d5:52:45:0f:1c:22:9e:
69:42:d7:81:2c:ff:7e:1c:05:62:23:34:67:2a:4d:87:1c:43:
ff:18:ad:6b:80:8d:02:5e:65:1e:1a:9f:ae:f5:15:6f:e8:08:
56:b6:a3:03:51:09:0b:4e:c0:bc:3e:07:ec:a3:2a:33:87:a1:
ed:bb:30:13:19:f8:25:dc:cc:3d:e2:bf:31:90:1c:fd:43:58:
aa:bc:8b:42:61:df:0e:59:ff:ef:ae:59:d9:7c:80:7c:28:8b:
33:03:99:da:f5:8a:50:80:78:1a:82:61:e8:70:65:29:c8:2b:
90:f0:e1:03:ef:d8:a3:3c:96:70:32:16:9c:79:a8:b8:51:10:
79:e5:65:38:c3:29:5b:aa:c6:71:e5:6f:f9:a3:e9:f0:52:f2:
41:63:4d:1f:50:38:ed:d8:7e:91:db:46:51:2d:ea:b1:94:f0:
25:45:2b:6b:4c:ce:3c:2d:1f:a8:4f:97:a5:cb:c3:a9:97:1b:
93:ca:bd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:59 2024 by rpki-client on console-ams.rpki-client.org