Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/m6OMUeHww2eyuIYuZ3X59LbtN_4.roa
File: m6OMUeHww2eyuIYuZ3X59LbtN_4.roa (raw, json)
Hash identifier: 0sDuQHIeDCuF3qCulB8L0Nbn5CxayeiXeyGuQa1VjPU=
Subject key identifier: 9B:A3:8C:51:E1:F0:C3:67:B2:B8:86:2E:67:75:F9:F4:B6:ED:37:FE
Certificate issuer: /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial: 018698932548B4661292300A041C5C1D3EF2
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/m6OMUeHww2eyuIYuZ3X59LbtN_4.roa
Signing time: Tue 28 Feb 2023 15:10:25 +0000
ROA not before: Tue 28 Feb 2023 15:10:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 185.240.78.0/24 maxlen: 24
185.240.77.0/24 maxlen: 24
185.240.76.0/24 maxlen: 24
185.185.209.0/24 maxlen: 24
185.185.211.0/24 maxlen: 24
185.185.208.0/24 maxlen: 24
185.185.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:98:93:25:48:b4:66:12:92:30:0a:04:1c:5c:1d:3e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
Validity
Not Before: Feb 28 15:10:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ba38c51e1f0c367b2b8862e6775f9f4b6ed37fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:77:eb:5d:c4:8d:65:07:ba:56:39:2d:d8:
48:a4:98:77:e3:f8:72:d1:ea:dd:ce:fc:c5:93:d8:
6c:74:1c:b1:d2:b8:06:fc:da:09:54:42:38:d7:ca:
7a:29:57:36:40:cb:17:2d:c2:d9:d9:7e:7f:8c:33:
42:23:4a:9c:9c:29:64:c3:06:71:d0:06:1a:c1:2f:
60:bb:63:ff:fb:00:28:ba:8b:95:5a:86:72:61:46:
a4:a6:c7:37:dd:24:ee:4f:97:1e:0d:76:b4:df:62:
ab:7c:78:51:89:80:bd:9f:71:05:a8:ac:9b:d1:40:
a4:ff:bc:a0:eb:86:df:10:00:b3:01:1d:a4:98:d5:
39:4c:cb:fd:19:93:6a:6f:32:f8:17:42:76:7c:13:
61:16:5b:02:93:8c:96:d3:d5:ad:71:59:f2:5b:df:
5a:0f:f6:ae:c0:aa:7f:ec:60:57:fe:24:88:0f:c9:
df:ae:39:9b:bc:61:80:45:cb:35:12:b4:23:d7:88:
ae:a2:02:3c:c2:e5:d2:76:5f:1a:f0:17:3f:e0:29:
d8:f1:22:8a:f2:58:27:4a:5b:20:64:42:6b:d6:d4:
85:c4:26:cb:c7:f7:4e:f6:9d:69:d8:91:b8:d7:7f:
eb:44:be:42:69:a0:c4:8f:26:ea:8b:69:5e:49:38:
ae:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A3:8C:51:E1:F0:C3:67:B2:B8:86:2E:67:75:F9:F4:B6:ED:37:FE
X509v3 Authority Key Identifier:
keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/m6OMUeHww2eyuIYuZ3X59LbtN_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.208.0/22
185.240.76.0-185.240.78.255
Signature Algorithm: sha256WithRSAEncryption
a3:3b:ce:de:51:3f:b5:89:bc:3a:d6:c8:44:49:b8:2d:d5:a6:
04:39:3c:c0:e1:8a:05:a2:78:20:0d:26:11:ef:01:09:96:e9:
4d:6b:b7:46:78:8c:3a:e8:b1:c3:2b:33:11:17:02:2d:76:6c:
26:93:00:3a:6c:b1:14:c0:72:9d:44:fb:a7:94:a7:2e:ef:e0:
23:93:b5:68:2b:c6:9c:6a:29:7f:b4:06:18:07:4b:95:6b:92:
11:8a:28:35:5c:03:e2:f1:d9:18:21:b5:73:91:a4:ac:32:7c:
7d:f3:b6:de:84:76:33:bf:22:31:bc:ae:14:30:47:c8:6c:9d:
14:f7:fc:64:0f:91:21:fe:e5:66:5d:56:5e:a8:1d:46:f4:20:
3f:88:a7:5b:4a:c4:22:5b:d0:8e:50:6a:00:de:fd:2c:f4:54:
44:fb:89:a1:14:58:ab:56:13:f3:9e:5c:59:37:0c:ed:e0:5e:
c9:7b:25:7d:4f:08:b5:84:4f:80:94:de:cc:97:03:f1:d8:f0:
dc:e0:b5:05:95:06:df:c5:e7:37:5e:71:65:3f:23:2d:77:f5:
0b:21:80:d0:f1:a6:b0:a7:c7:be:16:20:72:fc:62:99:2b:48:
00:ae:05:d3:ee:29:95:29:cd:dc:16:0d:30:68:75:11:72:f7:
4d:90:a6:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:38 2024 by rpki-client on console-ams.rpki-client.org