Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/mFRJ_y_mztw9P-NWOKFxChx-NaY.roa
File: mFRJ_y_mztw9P-NWOKFxChx-NaY.roa (raw, json)
Hash identifier: v/Jz92pxJmjEuRrz/LWnj39u1DGetmvvyqeP7L478Vw=
Subject key identifier: 98:54:49:FF:2F:E6:CE:DC:3D:3F:E3:56:38:A1:71:0A:1C:7E:35:A6
Certificate issuer: /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial: 01856CAF0E73169D8D2CA1BF09A873EA5C9C
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/mFRJ_y_mztw9P-NWOKFxChx-NaY.roa
Signing time: Sun 01 Jan 2023 09:34:49 +0000
ROA not before: Sun 01 Jan 2023 09:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198668
IP address blocks: 185.243.172.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 27 Oct 2023 08:29:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:0e:73:16:9d:8d:2c:a1:bf:09:a8:73:ea:5c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
Validity
Not Before: Jan 1 09:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=985449ff2fe6cedc3d3fe35638a1710a1c7e35a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:13:15:9e:30:bf:b7:fd:92:d8:86:cb:88:26:
9e:79:c3:48:f2:39:d1:d9:e2:f5:59:6e:59:0b:9a:
8a:0a:9e:04:74:aa:2c:65:73:78:3a:7b:26:46:fd:
f9:8a:a3:32:a2:70:65:f8:91:25:cd:10:38:d9:08:
87:66:21:69:ef:c8:5c:7a:0a:ff:3c:cd:49:c2:04:
d6:bf:1d:3c:c3:ff:82:e2:3f:24:11:76:e4:fc:38:
4c:41:f8:34:33:2a:91:e9:3a:92:69:a9:3a:0f:af:
40:87:9c:bd:bf:66:be:97:59:f0:d1:4a:a1:21:d0:
01:4b:da:99:2c:88:56:f1:b0:ff:4c:5d:5b:cc:45:
88:04:aa:18:5b:99:38:e0:33:b1:db:76:7b:ed:d1:
8e:54:1b:7e:16:e0:f7:b8:2a:5a:10:83:17:bf:cb:
6a:3b:9e:c0:3c:a0:b2:df:05:5b:e4:e9:14:ca:7d:
f1:21:a3:fd:d4:f9:44:3d:d1:9d:65:0e:d1:0b:26:
cb:82:d3:90:a7:00:6d:f9:a7:f7:f6:ae:d5:d8:b1:
5e:a6:41:59:f2:c4:40:cc:41:5e:57:1c:51:5d:9f:
de:9d:c0:48:31:19:46:bd:28:f4:42:06:89:20:6a:
7b:fb:a4:43:cf:47:aa:6e:03:92:58:7e:4d:dc:d5:
0e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:54:49:FF:2F:E6:CE:DC:3D:3F:E3:56:38:A1:71:0A:1C:7E:35:A6
X509v3 Authority Key Identifier:
keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/mFRJ_y_mztw9P-NWOKFxChx-NaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.172.0/22
Signature Algorithm: sha256WithRSAEncryption
31:9c:08:2b:10:59:61:c3:4a:99:f1:e0:fe:c4:cf:35:f6:02:
e9:ab:47:81:9d:ac:94:7b:6b:ce:aa:f1:b5:7e:24:1b:67:85:
63:37:94:0e:ad:e5:32:cf:ff:bd:d0:52:ff:01:96:e0:a9:48:
94:54:4c:15:c0:03:56:e3:06:c4:08:9d:1a:9d:ed:86:ea:c3:
3a:e5:c7:63:2b:57:b0:0b:ad:c5:ab:ac:17:f8:f7:e1:7a:45:
df:20:a7:e6:da:e9:dc:ed:67:f9:5b:6c:47:16:9e:05:eb:06:
89:50:aa:d9:13:43:c7:a4:19:f7:24:d1:7e:4b:c4:f1:09:67:
99:dd:d8:54:b7:46:8a:04:07:ad:35:eb:bf:c5:41:1f:c2:ce:
0f:24:b6:cc:67:31:ad:04:12:f2:bd:07:4d:fa:2c:39:60:22:
42:ad:6b:76:dd:15:7f:be:4e:55:14:8d:55:ce:7c:2a:c0:c7:
ca:02:5e:36:5c:f7:42:f5:73:64:8a:c7:ad:78:66:ca:83:6c:
17:a7:3d:87:31:32:21:ad:a3:62:30:90:32:72:b0:7a:8f:2d:
47:39:b0:cb:d4:66:6e:19:76:b0:e5:d6:39:22:10:06:ac:8f:
9a:2e:db:9e:59:66:18:84:b7:9c:7d:77:dd:10:db:73:51:29:
14:fc:fc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:06 2024 by rpki-client on console-fra.rpki-client.org