Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/zMvIRRg2ZVrImt5AQ9DzR1gF4ec.roa
File: zMvIRRg2ZVrImt5AQ9DzR1gF4ec.roa (raw, json)
Hash identifier: ymygFDJUL8q9ZmvrICJZCeb+W8wAQz/W+sqE6XYtdMg=
Subject key identifier: CC:CB:C8:45:18:36:65:5A:C8:9A:DE:40:43:D0:F3:47:58:05:E1:E7
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 0191DB14F3D802FF34C32F88ED932B2ECDD4
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/zMvIRRg2ZVrImt5AQ9DzR1gF4ec.roa
Signing time: Tue 10 Sep 2024 08:37:48 +0000
ROA not before: Tue 10 Sep 2024 08:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.162.177.0/24 maxlen: 24
185.162.178.0/24 maxlen: 24
185.162.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Sep 2024 16:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:db:14:f3:d8:02:ff:34:c3:2f:88:ed:93:2b:2e:cd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Sep 10 08:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cccbc8451836655ac89ade4043d0f3475805e1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:7b:45:88:ce:b9:f5:44:db:45:15:cf:95:
9f:d5:4e:61:5c:53:39:ae:40:b5:57:72:59:0f:6e:
fb:0f:ae:f6:42:65:69:ec:f3:ac:3b:8c:13:cf:52:
6a:97:0b:e2:24:9b:f5:cf:e9:db:97:b6:32:0a:76:
1d:68:81:e3:08:4c:ac:6c:09:4f:e4:89:63:26:88:
28:fc:a1:41:b0:00:ef:f8:bf:a6:d2:49:39:21:f6:
ef:7f:b3:49:73:a8:06:6f:27:e3:7c:4b:e6:ff:26:
80:0d:74:34:97:2f:29:03:de:f4:6f:30:33:82:e5:
75:f0:14:d9:95:b3:d5:81:ae:95:a4:b0:3d:26:e4:
47:73:14:5c:72:0e:8c:42:07:d2:4e:4d:94:21:9d:
52:8c:42:8a:ad:6a:b3:2f:58:ed:da:79:9f:ce:ee:
09:51:4e:64:ad:2c:67:06:1b:30:64:f8:38:3c:00:
62:cd:ed:59:38:13:ee:d1:16:8b:71:13:76:3c:72:
34:51:e2:e2:a4:2f:d4:3f:a3:06:75:a1:14:51:bc:
50:fa:e7:b7:71:e9:70:72:13:25:53:b3:eb:68:a2:
4d:bc:26:0d:e0:91:ad:28:44:3f:bf:8a:fc:02:12:
e5:38:d8:ba:4d:a0:a0:a9:3a:04:36:c0:e2:24:81:
8a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CB:C8:45:18:36:65:5A:C8:9A:DE:40:43:D0:F3:47:58:05:E1:E7
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/zMvIRRg2ZVrImt5AQ9DzR1gF4ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.177.0-185.162.179.255
Signature Algorithm: sha256WithRSAEncryption
0e:cf:db:c1:e2:17:8d:83:00:6c:1a:e2:db:b5:05:21:d1:3f:
7b:b1:c8:57:7c:91:ed:ea:f1:da:bb:85:1f:1e:ca:f8:3e:68:
79:4b:98:48:d2:ed:5d:7c:02:d3:09:90:ea:cf:78:9a:89:1d:
44:9f:f8:52:d2:29:32:7f:5e:a6:17:6d:23:83:f8:e4:91:00:
76:30:61:78:a1:87:db:57:d1:9b:3a:80:f6:0d:43:64:e1:9d:
db:79:c7:4f:f6:b8:f2:1b:e8:be:e5:18:0a:1f:1a:f0:ac:ab:
34:b6:a9:53:a3:84:87:16:63:b3:62:e8:5f:b8:27:14:88:82:
99:50:ae:20:e9:3f:a5:4a:65:f8:5c:37:f7:e4:dd:d7:ed:ae:
53:f6:92:d6:09:00:ee:16:24:e3:39:c7:1f:2c:71:31:10:5c:
78:2b:a3:20:11:5b:2e:d1:98:26:52:5e:7d:05:7c:3f:66:b9:
59:a0:43:f6:14:53:e4:e3:d4:ec:ed:d3:76:76:5f:43:db:43:
10:c7:85:87:e0:08:f9:39:d2:f6:96:bf:87:0c:7a:20:43:07:
66:0f:2e:ac:b1:4c:39:be:07:2f:c7:06:a4:b1:66:d1:e8:b4:
84:ec:d1:4e:56:d0:db:9f:b8:f4:a3:8e:9c:d0:3c:29:6c:8f:
63:3f:31:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 19:10:20 2024 by rpki-client on console-fra.rpki-client.org