Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/MfoIK7Pu23nXy7BxdVnwUKlpK9c.roa
File: MfoIK7Pu23nXy7BxdVnwUKlpK9c.roa (raw, json)
Hash identifier: Q7m0pw+Q/3jQOUQ/1TwSXgzB5gx2axAujJ4eeICMpIY=
Subject key identifier: 31:FA:08:2B:B3:EE:DB:79:D7:CB:B0:71:75:59:F0:50:A9:69:2B:D7
Certificate issuer: /CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Certificate serial: 018E1326E9A966BA7992CC382FE60580F41F
Authority key identifier: BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/MfoIK7Pu23nXy7BxdVnwUKlpK9c.roa
Signing time: Wed 06 Mar 2024 09:45:01 +0000
ROA not before: Wed 06 Mar 2024 09:45:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203411
IP address blocks: 185.135.144.0/24 maxlen: 24
185.135.145.0/24 maxlen: 24
185.135.146.0/24 maxlen: 24
185.135.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:13:26:e9:a9:66:ba:79:92:cc:38:2f:e6:05:80:f4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Validity
Not Before: Mar 6 09:45:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31fa082bb3eedb79d7cbb0717559f050a9692bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:e5:10:5c:4e:08:ca:29:f7:58:bc:ab:8c:
68:59:f1:1f:dc:bb:f2:f9:bb:18:7b:1c:61:c7:a0:
b3:e1:f2:0e:62:37:0f:b7:9e:2d:e9:44:e2:60:4e:
25:4a:88:63:69:77:66:d7:96:52:3f:08:44:03:86:
3c:7e:f0:39:d0:d8:86:27:00:56:e7:1a:46:a1:82:
0e:7d:77:6d:6c:ee:96:67:16:0a:8e:86:10:55:64:
85:cd:cd:03:a2:1b:fc:63:f9:61:73:c6:c7:5b:b8:
54:ac:a6:cf:7c:70:4f:cd:91:62:6d:a2:1e:77:d3:
64:13:80:7b:a9:e6:53:ae:57:5a:7f:9d:3e:21:fc:
53:79:75:b4:78:f7:63:4c:7f:e3:5c:87:8f:53:4b:
b7:48:70:89:5f:39:ed:fd:19:5b:53:8e:4d:75:59:
e6:93:4f:57:0d:3f:34:6c:3d:40:94:a7:b8:a0:d6:
18:4a:30:2f:47:50:39:05:ce:6c:ce:fd:5d:1a:a5:
af:18:ac:fc:18:8b:4b:a0:09:d7:8e:e4:af:a8:14:
e9:ca:e8:8b:ae:3d:91:c9:4b:fa:bc:ce:e1:25:60:
c7:1c:2c:ba:5d:5a:e8:83:2e:d4:2b:93:68:86:b4:
10:0b:84:5b:87:a1:31:11:46:ef:bb:a9:2e:bb:01:
05:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FA:08:2B:B3:EE:DB:79:D7:CB:B0:71:75:59:F0:50:A9:69:2B:D7
X509v3 Authority Key Identifier:
keyid:BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/MfoIK7Pu23nXy7BxdVnwUKlpK9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.144.0/22
Signature Algorithm: sha256WithRSAEncryption
08:dc:20:e0:8b:e8:16:06:cc:b1:c2:0e:12:90:8c:21:5d:0b:
c3:2d:3a:5e:d6:d2:3f:f6:63:5c:8e:eb:c0:c3:bc:6d:31:15:
99:c7:43:96:75:a2:af:e4:f1:0d:90:af:1a:4c:71:06:2c:21:
09:16:6f:28:9f:d2:a9:b8:8b:00:65:1d:6a:10:87:a0:de:87:
a9:1b:a5:a7:9c:2e:5d:f9:68:9c:45:34:d9:34:bf:85:31:58:
cf:24:90:cb:5c:8b:9d:2c:6c:15:50:ab:7a:a0:7d:54:8a:4b:
29:e5:67:08:3d:f7:52:78:fd:a2:7c:55:02:52:a5:8d:4f:d7:
89:65:08:9d:d4:08:0b:d5:5c:a3:a5:8a:59:f9:9e:55:4b:8a:
e0:3c:c9:59:c5:59:5e:a7:b1:f7:68:fa:c1:42:b2:42:d7:05:
46:1a:ad:55:36:af:f0:d8:cd:db:84:9c:9d:34:ed:1c:d8:61:
f1:e3:c4:60:51:d9:49:37:38:c6:28:9a:52:94:1d:b0:37:d4:
02:ff:07:a9:7d:72:cf:53:fe:13:55:1f:24:b6:57:5e:da:58:
55:6d:11:5c:83:91:c7:7d:65:34:0d:fb:4d:c8:bf:c1:9e:0f:
8e:43:b2:5f:76:08:0e:7e:10:87:a5:0a:b6:72:3b:ba:75:7a:
79:95:f8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:29 2025 by rpki-client