Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/Kfe6utnZapo5KH4ewjQJwds7MOM.roa
File: Kfe6utnZapo5KH4ewjQJwds7MOM.roa (raw, json)
Hash identifier: mfVjQ38IQVSSGIbz0f9IYXKZgKvaZmfvFSEnvJHrOMc=
Subject key identifier: 29:F7:BA:BA:D9:D9:6A:9A:39:28:7E:1E:C2:34:09:C1:DB:3B:30:E3
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 018583D08FAEA00620505BD48F8C87C34188
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/Kfe6utnZapo5KH4ewjQJwds7MOM.roa
Signing time: Thu 05 Jan 2023 21:22:41 +0000
ROA not before: Thu 05 Jan 2023 21:22:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 185.148.243.0/24 maxlen: 24
185.148.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Feb 2023 12:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:83:d0:8f:ae:a0:06:20:50:5b:d4:8f:8c:87:c3:41:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jan 5 21:22:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29f7babad9d96a9a39287e1ec23409c1db3b30e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c2:4a:95:ed:b3:da:ce:64:64:22:51:ab:d1:
26:06:93:85:f0:4b:45:eb:51:fa:4a:24:1b:96:e8:
45:ef:8d:25:a6:d0:cb:d6:ab:ad:9c:cc:74:d9:b8:
85:8a:39:9f:52:21:0a:a3:ad:12:36:a8:99:f0:37:
a9:27:bc:9e:e1:0b:2d:ca:19:73:04:2b:b1:c4:f7:
31:e9:a9:7f:29:79:cb:74:b7:ac:20:8a:c0:69:3b:
44:a1:37:51:37:98:f1:dd:68:70:04:f4:a0:e5:36:
07:83:79:c5:25:94:f0:ff:a3:41:d3:fc:98:f1:0a:
f0:a9:97:8b:19:9d:32:36:9b:2c:ae:e9:5a:4a:45:
5d:b2:99:9e:09:98:ab:56:99:2e:24:2d:32:50:7c:
0a:df:2f:7d:e3:0c:89:39:e8:7c:02:6b:75:b3:50:
5b:07:e0:f4:df:96:26:13:42:c4:7f:68:53:3d:2c:
b7:c0:06:f6:28:64:20:15:af:51:9a:a2:23:bc:7d:
f2:5e:5a:0c:8e:f8:f0:0d:74:dd:e0:ce:2c:47:77:
97:1e:7e:d6:90:ca:6a:e4:65:d8:f1:cd:65:d7:06:
11:f3:60:8a:2e:f7:31:2c:91:4b:b4:58:13:53:44:
b5:86:34:ba:5b:ac:e2:a6:8f:31:80:9d:f0:cd:1f:
b0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F7:BA:BA:D9:D9:6A:9A:39:28:7E:1E:C2:34:09:C1:DB:3B:30:E3
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/Kfe6utnZapo5KH4ewjQJwds7MOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.241.0/24
185.148.243.0/24
Signature Algorithm: sha256WithRSAEncryption
37:cc:69:f8:f9:e7:60:2a:b7:53:41:4f:c8:d2:73:57:81:98:
b2:6b:35:52:2d:17:d5:2a:0d:55:23:1e:8c:34:81:22:22:12:
24:0a:86:3c:ed:a1:db:10:2c:70:dd:5f:a4:4b:f7:43:2b:9f:
f4:1f:3f:a2:0b:68:f5:db:88:e9:65:bf:00:d2:b1:0f:bd:cf:
58:1c:f6:a5:67:b2:54:22:d3:74:33:86:3a:08:62:d1:2b:bf:
f1:7f:7b:ad:3d:cf:c0:7d:d7:d3:bb:05:1c:ff:8e:ee:73:2c:
50:ea:72:1c:97:ef:e3:10:ab:6a:1b:03:4f:cd:43:1e:ca:00:
50:4d:a9:07:6f:08:c1:e9:8f:78:b5:4d:68:4a:42:b8:45:9c:
04:73:50:2f:ca:01:d7:c6:2d:6d:bc:d6:01:ab:b8:3c:12:5e:
85:77:93:db:8d:1d:3f:e7:97:13:7b:c7:51:4e:3a:45:94:14:
62:5a:06:1f:e7:7c:2c:a4:36:92:04:56:5e:42:51:18:a5:6b:
43:cd:8a:b3:9c:e7:e6:de:89:bf:b2:2d:c9:2b:77:1f:25:7d:
45:45:5d:9e:4b:ad:e1:6f:3e:bd:49:70:43:da:c9:cf:f6:f3:
cf:72:ef:74:dd:00:af:82:6c:aa:39:43:c8:11:e6:a5:0f:45:
7f:05:6d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:49 2024 by rpki-client on console-fra.rpki-client.org