Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/MM9sj3fHiNTwhnVJ8qQXgYcZjpg.roa
File: MM9sj3fHiNTwhnVJ8qQXgYcZjpg.roa (raw, json)
Hash identifier: PbXLfesAUNSW93cVLQhvRIZ3YAN6RTATwabYcjVCC5Y=
Subject key identifier: 30:CF:6C:8F:77:C7:88:D4:F0:86:75:49:F2:A4:17:81:87:19:8E:98
Certificate issuer: /CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Certificate serial: 018570706525C19388E84E23AB5599C35DB4
Authority key identifier: C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/MM9sj3fHiNTwhnVJ8qQXgYcZjpg.roa
Signing time: Mon 02 Jan 2023 03:04:52 +0000
ROA not before: Mon 02 Jan 2023 03:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51500
IP address blocks: 185.17.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:65:25:c1:93:88:e8:4e:23:ab:55:99:c3:5d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Validity
Not Before: Jan 2 03:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30cf6c8f77c788d4f0867549f2a4178187198e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b0:02:94:63:ce:00:0d:06:bd:dd:68:66:ad:
48:66:91:49:b2:86:95:37:2e:3e:83:92:ed:9e:07:
d0:42:4a:37:0c:ab:97:c5:76:e6:14:eb:6a:8f:b8:
9e:d5:15:92:ec:59:7e:ff:ab:fa:75:21:42:77:2d:
89:84:58:5f:aa:99:78:56:08:ff:9b:0b:c1:77:b1:
36:c1:0f:d0:44:b7:55:87:15:aa:e1:dc:db:9c:37:
ab:4b:15:26:a7:f8:30:1b:83:10:4d:14:9f:ea:e9:
9d:ba:a3:ce:13:42:ca:c6:90:f6:97:7d:f1:96:9e:
5a:ab:ac:e8:d8:51:54:ee:f8:c7:a6:76:2c:0c:d7:
91:90:27:d3:8a:06:b8:e2:d9:c7:6b:8d:d3:46:38:
d4:8d:17:6a:b6:b2:d4:70:d2:56:c7:4b:5d:89:26:
4f:23:aa:32:55:44:0e:fa:61:7c:af:31:8e:c3:fb:
e8:31:ba:51:0b:e3:fe:4a:18:67:7c:c5:cd:d2:e7:
d8:12:ed:c2:94:ba:a5:0b:27:ed:d4:fb:eb:9f:56:
24:65:50:46:8e:75:71:f4:09:ab:b1:42:0e:8f:18:
d4:8d:f1:ed:40:1a:37:72:7b:2a:ae:af:44:71:91:
7c:49:75:8d:67:b6:8d:0d:42:e3:cb:41:09:c2:b3:
4d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CF:6C:8F:77:C7:88:D4:F0:86:75:49:F2:A4:17:81:87:19:8E:98
X509v3 Authority Key Identifier:
keyid:C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/MM9sj3fHiNTwhnVJ8qQXgYcZjpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.127.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ee:77:51:af:40:04:fa:2c:65:01:83:7a:9a:21:c0:d7:f6:
19:72:73:f4:c2:c4:93:53:eb:0a:80:81:b1:99:e6:1f:40:c7:
5b:01:c7:65:04:65:dc:2b:0e:2f:ca:52:a9:71:d1:40:e3:67:
80:61:56:49:a3:86:98:2e:74:99:cc:0f:b0:8f:0b:a8:65:d3:
f9:c1:ab:2c:0c:0a:3e:a3:41:44:75:22:34:79:64:ba:dc:9d:
80:4f:75:3c:3d:f6:b5:07:87:aa:e0:14:c2:3c:30:08:e2:3d:
c2:b5:d8:5c:17:7a:3f:3c:3d:46:74:29:b7:d7:df:7e:6e:09:
b5:d3:ec:f3:dd:58:c8:d6:3a:5f:bf:a8:07:8d:24:06:2c:5e:
96:83:61:54:fc:59:ab:1f:25:80:da:70:ef:e7:7c:16:0b:31:
e1:1c:2a:6c:5e:1e:85:43:11:62:6a:27:94:a8:68:fa:b9:be:
0a:f3:e1:3e:ac:50:2d:cc:45:49:e3:83:36:30:38:59:bf:93:
e7:20:a5:67:70:4e:e2:b3:f9:fb:1a:5f:72:b5:fc:cd:cf:a8:
42:24:69:6e:c3:32:03:2d:d0:67:bd:40:e1:20:4d:31:ba:26:
09:9e:2e:1a:bb:43:8b:a2:43:02:01:4b:9e:24:1f:ac:05:e9:
5b:5e:d9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:55 2024 by rpki-client on console-ams.rpki-client.org