Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/mern4iEXm6IMGzEOchavK3Kf9UE.roa
File: mern4iEXm6IMGzEOchavK3Kf9UE.roa (raw, json)
Hash identifier: qeu2juZhbQQ3NScN6NxRcUf34+/Z2VdJWRD4PVEYu6M=
Subject key identifier: 99:EA:E7:E2:21:17:9B:A2:0C:1B:31:0E:72:16:AF:2B:72:9F:F5:41
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 0185E91E948FC9B0646D65DB5F480AC5099D
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/mern4iEXm6IMGzEOchavK3Kf9UE.roa
Signing time: Wed 25 Jan 2023 13:29:33 +0000
ROA not before: Wed 25 Jan 2023 13:29:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 185.117.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jan 2023 17:24:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e9:1e:94:8f:c9:b0:64:6d:65:db:5f:48:0a:c5:09:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Jan 25 13:29:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99eae7e221179ba20c1b310e7216af2b729ff541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e5:10:1b:99:b4:15:89:f3:e6:26:fa:19:58:
4e:ee:59:c7:e8:dd:3a:1a:e6:83:f7:a8:c0:b7:9a:
a8:f0:2c:91:89:b6:6a:09:5d:14:96:e7:7e:37:15:
96:8a:3a:4d:4a:9b:25:8f:72:69:24:3f:d1:94:97:
85:8c:79:5f:8c:39:62:99:31:ce:23:89:cb:3f:76:
1e:b4:97:74:6b:81:54:c0:8f:60:ec:fc:49:16:48:
58:2c:e9:f0:b0:2a:bc:86:96:86:98:eb:84:25:27:
a4:0e:eb:c6:aa:2a:4d:e0:20:15:32:d6:2c:00:96:
cc:34:ab:7d:31:da:4d:19:9f:c5:9e:05:84:fc:20:
3d:98:ec:d6:1e:d9:4e:1c:ae:09:46:0c:71:e8:d8:
fb:8e:19:c4:10:23:9b:44:14:02:f0:5f:23:76:69:
fb:28:83:5f:1e:0f:ee:7f:54:16:b8:62:25:50:e6:
b1:7d:9b:86:32:b4:fd:41:cc:37:38:0b:99:59:2b:
27:f6:c1:70:ea:8f:06:9a:f0:dd:ae:bb:c5:3d:4a:
9a:be:df:d8:0c:73:57:42:63:37:31:24:59:94:52:
62:b8:08:a1:1f:69:0c:9b:79:bf:63:d0:9a:95:51:
41:4b:02:af:b7:ba:6e:c6:58:32:ea:e6:fa:ee:b6:
72:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EA:E7:E2:21:17:9B:A2:0C:1B:31:0E:72:16:AF:2B:72:9F:F5:41
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/mern4iEXm6IMGzEOchavK3Kf9UE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.183.0/24
Signature Algorithm: sha256WithRSAEncryption
77:23:63:3c:4c:00:4d:05:41:75:20:f1:e8:45:f7:10:7e:6a:
7c:6d:a5:aa:21:cf:1e:44:34:45:bf:10:45:a1:0d:d7:e6:1c:
e9:d0:81:9a:ed:8e:62:97:33:c2:ba:61:bb:6a:42:8d:5d:72:
6f:55:a4:6d:0a:0e:16:9c:3f:19:49:ba:02:35:2e:09:86:87:
de:65:74:73:ce:c8:b2:b6:b6:7c:11:5d:eb:51:87:1d:04:5f:
29:9b:95:b5:55:03:63:e5:ff:9a:8d:ad:24:9b:9d:6f:27:43:
65:35:a8:c1:a2:f9:87:8d:c3:bf:92:20:32:ee:4a:26:9c:e7:
94:28:90:6c:e3:b4:c9:76:32:90:d7:4f:00:12:1a:37:eb:44:
b6:16:f4:7f:1d:01:58:f3:db:5a:bc:8b:69:7a:73:73:1e:d8:
ae:ee:42:cf:20:18:08:52:26:51:10:63:57:fb:4b:92:d9:a0:
46:bd:85:03:a0:a0:e5:7d:af:45:8c:a1:4e:4b:c1:3c:0d:ed:
79:77:db:5f:a1:3b:aa:7b:5c:26:10:5f:2c:f3:86:ec:52:ee:
f0:50:8c:10:2f:0e:b3:7a:4d:d3:25:16:f5:d0:fe:56:39:75:
bb:c3:ba:df:ea:45:e3:37:e6:f7:cb:07:ff:47:96:ee:7e:37:
fb:e1:29:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:07 2024 by rpki-client on console-ams.rpki-client.org