Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/M-QaO3m4Rqz9htEsYNoICIVuU2w.roa
File: M-QaO3m4Rqz9htEsYNoICIVuU2w.roa (raw, json)
Hash identifier: xZpW8qycE85X4ZmigF0cc5xq4WO7YNIYzY0HbPMwFtE=
Subject key identifier: 33:E4:1A:3B:79:B8:46:AC:FD:86:D1:2C:60:DA:08:08:85:6E:53:6C
Certificate issuer: /CN=2928db241541d6b6a6490004060aa71ad6ec189c
Certificate serial: 0189FFC54257B122E84753C73B5F9D611453
Authority key identifier: 29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/M-QaO3m4Rqz9htEsYNoICIVuU2w.roa
Signing time: Wed 16 Aug 2023 19:14:24 +0000
ROA not before: Wed 16 Aug 2023 19:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213075
IP address blocks: 185.243.84.0/22 maxlen: 22
185.243.84.0/23 maxlen: 23
185.243.86.0/23 maxlen: 23
185.243.86.0/24 maxlen: 24
185.243.87.0/24 maxlen: 24
193.200.250.0/24 maxlen: 24
2a0d:d81::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ff:c5:42:57:b1:22:e8:47:53:c7:3b:5f:9d:61:14:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2928db241541d6b6a6490004060aa71ad6ec189c
Validity
Not Before: Aug 16 19:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33e41a3b79b846acfd86d12c60da0808856e536c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:73:db:83:53:da:22:6e:18:8b:45:1c:38:b2:
0e:0a:f2:8e:ba:32:5d:18:40:75:8b:1b:62:70:99:
01:d9:d2:17:c9:7e:7a:ad:60:d7:dc:77:ee:2c:68:
e3:8c:c1:b2:09:cc:e1:03:f7:66:97:30:2c:31:8e:
bd:13:c1:4e:da:8c:b5:b1:90:82:ad:37:e0:f8:d0:
47:0e:8e:7f:77:0a:79:88:f9:88:9f:42:23:a9:0a:
37:47:fb:ce:98:97:79:20:65:dc:d0:50:35:57:96:
25:a6:91:fe:92:48:18:0a:ca:5e:63:56:1a:79:a4:
29:f8:60:c5:76:3d:15:cc:06:26:98:54:7d:ea:1a:
a8:e6:d1:39:b0:f9:4e:2f:8e:16:c8:bd:78:4e:f7:
63:4f:53:1f:ce:af:75:c4:c2:dc:85:e9:1e:3f:c7:
98:e0:68:96:bc:b8:28:40:c3:45:7a:d5:99:b6:cf:
a5:3b:53:bb:d7:21:37:99:8f:44:18:65:4f:fc:39:
0a:52:b8:e0:1f:c6:c7:a1:74:8a:67:93:d6:17:d9:
17:a1:90:6f:be:95:c6:35:06:49:4c:1b:de:b1:1e:
1a:4a:86:17:85:7a:fd:63:a6:bf:b4:2d:c5:a0:5b:
3c:99:17:33:08:fd:b6:34:2a:e6:8b:b6:56:ef:3f:
86:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E4:1A:3B:79:B8:46:AC:FD:86:D1:2C:60:DA:08:08:85:6E:53:6C
X509v3 Authority Key Identifier:
keyid:29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/M-QaO3m4Rqz9htEsYNoICIVuU2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.84.0/22
193.200.250.0/24
IPv6:
2a0d:d81::/32
Signature Algorithm: sha256WithRSAEncryption
51:3d:20:0d:95:71:34:ca:9e:62:1f:e2:c1:21:5f:b6:c7:b6:
c2:b0:f2:64:26:8e:5b:d2:2e:2e:7c:d6:9d:47:e2:60:ff:7e:
5a:75:98:38:0d:bc:1b:df:e2:19:87:7f:8e:8c:87:b0:b6:c5:
41:e8:7f:51:e1:14:2e:65:42:08:a1:9f:05:db:1e:d5:6a:e4:
a5:c3:e8:d2:92:a4:3a:28:41:64:91:71:13:88:d2:2a:b7:b9:
69:27:90:dc:2c:97:5f:dd:a4:75:ac:35:d6:5f:16:da:fc:17:
45:63:29:eb:6d:8d:2a:ee:22:39:35:ce:35:5f:de:65:2d:19:
2d:ff:33:3a:3b:12:48:32:3b:b9:e1:e4:5f:fb:7b:e7:62:63:
e5:83:3e:16:ad:16:76:75:0a:76:64:27:35:e5:77:40:96:2a:
16:54:40:db:33:75:51:6b:56:fa:90:15:9d:2b:55:17:d3:d5:
30:c0:15:29:5c:f5:eb:6e:10:28:55:62:aa:71:33:57:d5:65:
04:f1:8a:a6:4d:3d:38:86:5f:d4:f3:de:12:05:18:c4:a7:9b:
47:22:fc:ce:b9:54:34:d0:4c:22:ea:b1:f4:06:d0:4b:43:82:
00:b2:49:f8:99:f7:50:7e:42:ad:4d:1c:98:2f:e3:e8:59:a6:
5a:b7:e9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:06 2024 by rpki-client on console-fra.rpki-client.org