Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/mWh035Lh_WmDp5qsDY88VrG7Trs.roa
File: mWh035Lh_WmDp5qsDY88VrG7Trs.roa (raw, json)
Hash identifier: dN9OG/qOT8BOqO2hqbjyd41oR+B427gqXixLYVIAMHU=
Subject key identifier: 99:68:74:DF:92:E1:FD:69:83:A7:9A:AC:0D:8F:3C:56:B1:BB:4E:BB
Certificate issuer: /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Certificate serial: 018CC8713A38B65336CB6BE94BBF127F0EB0
Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/mWh035Lh_WmDp5qsDY88VrG7Trs.roa
Signing time: Tue 02 Jan 2024 04:31:52 +0000
ROA not before: Tue 02 Jan 2024 04:31:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 185.207.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:3a:38:b6:53:36:cb:6b:e9:4b:bf:12:7f:0e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Validity
Not Before: Jan 2 04:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=996874df92e1fd6983a79aac0d8f3c56b1bb4ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:05:ca:c6:1f:ae:39:76:49:f6:ad:c0:7b:
0f:10:32:58:82:70:0d:a1:b7:dd:85:26:72:5a:18:
c3:61:7a:fd:7f:3f:ad:cc:4f:30:24:72:a8:47:2e:
47:b7:63:15:99:9a:d9:a1:11:fd:d5:3c:ed:23:ff:
17:d7:cd:01:ac:b6:2b:05:cd:27:2a:04:03:a6:10:
4c:00:9b:20:62:d6:26:42:25:7c:b5:fc:35:ba:ce:
7e:09:c3:11:88:33:86:d4:9c:7c:14:f1:0f:5f:34:
c5:9b:c7:9a:c1:ac:68:8e:5c:4a:52:dc:85:0d:de:
36:4d:93:05:ce:a0:d0:9c:ea:b0:8e:64:b0:70:f0:
c9:9f:91:c8:bc:f8:62:7d:12:fe:95:97:54:61:a6:
fc:32:c4:1e:16:a9:04:6d:d6:00:9d:18:07:3a:d4:
43:b9:21:a5:a3:2e:35:01:37:0f:8a:4f:16:d8:28:
1a:87:4f:ef:ca:73:92:24:9c:cb:c3:b5:8a:57:bc:
8e:8c:a8:f4:fa:31:32:4c:e7:28:95:a0:2f:fa:ca:
89:4c:97:3b:42:ec:70:c2:d1:9c:6c:e8:8e:d4:86:
d3:9e:d9:3b:4e:40:5f:a6:a4:b0:c6:b9:ab:bc:67:
eb:f5:19:84:d5:18:d5:76:6b:a3:e9:95:4f:94:c9:
dc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:68:74:DF:92:E1:FD:69:83:A7:9A:AC:0D:8F:3C:56:B1:BB:4E:BB
X509v3 Authority Key Identifier:
keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/mWh035Lh_WmDp5qsDY88VrG7Trs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:5a:92:c0:3d:7e:2b:fa:55:0e:53:cb:12:10:73:88:3d:ba:
e7:f6:61:c7:c3:59:ae:47:48:9f:a7:ba:fc:fd:97:06:b8:4c:
b6:a7:7f:ca:44:a8:8f:6c:17:13:d4:7f:5c:11:bd:21:21:e8:
c5:eb:29:bb:93:d1:a0:13:89:4d:ed:91:bb:95:b2:ca:be:f9:
fc:46:ea:61:85:3c:99:90:f9:d4:a6:1a:e5:b0:88:55:9e:3a:
6e:d9:06:75:94:45:45:96:e5:5f:34:fb:26:01:d6:66:ee:9e:
a5:61:f1:aa:c5:fb:b9:6d:cc:a1:f7:1a:f2:c2:0d:49:b8:11:
0a:9a:8a:98:a3:fc:5e:d6:75:d8:d8:7c:0e:62:42:ae:35:22:
1e:51:56:ec:78:6a:a7:8a:7b:45:f8:58:a1:31:88:37:26:cb:
24:00:4b:41:18:32:03:50:99:52:e7:02:00:69:99:d3:f3:08:
3f:0e:be:31:6b:8d:1e:e7:36:ce:97:45:66:79:db:aa:3f:dc:
6f:65:ab:99:f9:52:7e:bd:69:0c:2b:55:18:d9:6f:5d:71:10:
cf:cd:51:65:81:1d:04:37:9c:a1:f3:68:23:14:c8:36:fc:75:
a3:24:7f:c3:5c:70:5e:b4:9f:09:f5:1f:c0:3c:13:84:4d:1a:
59:ac:ba:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:36 2025 by rpki-client