Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/c-MF49eU5ycgcQqCiWN7ySyQYBk.roa
File: c-MF49eU5ycgcQqCiWN7ySyQYBk.roa (raw, json)
Hash identifier: EqTT6vf0OCy/p+CwmHnmZACDLpXvfwo/Bwg88Y6cDgo=
Subject key identifier: 73:E3:05:E3:D7:94:E7:27:20:71:0A:82:89:63:7B:C9:2C:90:60:19
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 018CC42537A2929EB94B878A7954A83682E0
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/c-MF49eU5ycgcQqCiWN7ySyQYBk.roa
Signing time: Mon 01 Jan 2024 08:30:22 +0000
ROA not before: Mon 01 Jan 2024 08:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398465
IP address blocks: 185.121.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:37:a2:92:9e:b9:4b:87:8a:79:54:a8:36:82:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Jan 1 08:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73e305e3d794e72720710a8289637bc92c906019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e3:ee:0a:c6:2a:b8:29:44:6d:e3:a4:55:49:
0d:2d:b3:a1:80:10:27:1a:6b:3c:cf:08:0b:00:29:
9d:46:fc:b9:c1:ac:16:bb:a7:29:d7:9a:49:25:9a:
2a:16:89:39:eb:16:6e:37:f6:be:b4:02:37:0f:87:
92:42:aa:af:23:59:4c:bd:e2:b2:1a:19:70:a6:c7:
67:34:df:a2:1b:69:de:3f:c7:85:5b:be:c4:bb:5a:
79:be:73:9f:e7:32:e1:ca:fc:c8:10:2a:e0:9c:66:
fe:33:93:aa:1b:dc:c7:8d:95:49:88:4e:96:2e:73:
cf:01:ea:e1:1b:b4:26:c1:77:2b:a7:4d:d0:80:be:
c0:b9:8a:d8:bb:0f:a3:32:fd:a3:7a:40:4c:ce:e1:
a5:7a:da:64:3a:72:73:88:ea:24:dd:01:af:98:35:
04:57:a4:21:78:04:8f:ab:71:23:9e:95:03:d8:87:
57:da:11:97:bd:59:69:19:63:81:59:d1:dd:67:9d:
3c:e2:5e:32:0f:56:24:2d:51:f3:05:cf:83:0a:93:
91:c9:78:ce:76:af:26:ca:6f:7e:39:b3:ce:2e:8d:
32:0e:b1:0f:07:93:a8:82:ca:76:06:65:cc:96:46:
c0:93:2f:45:21:95:00:8f:72:af:46:22:57:fd:d5:
06:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E3:05:E3:D7:94:E7:27:20:71:0A:82:89:63:7B:C9:2C:90:60:19
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/c-MF49eU5ycgcQqCiWN7ySyQYBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.225.0/24
Signature Algorithm: sha256WithRSAEncryption
f6:e2:16:eb:c5:14:84:d2:a7:c4:76:a3:97:4a:29:6f:2b:b8:
45:81:ac:cc:bf:0e:96:1b:cc:1c:3d:96:54:be:17:41:cd:b2:
9f:31:b9:8d:e3:6e:96:67:73:fd:4e:9e:9f:c0:89:d3:06:e8:
8e:1a:51:65:5f:d4:c9:91:a9:11:5e:10:98:ac:0f:08:63:02:
c0:27:38:c5:6a:81:e2:64:82:f2:f3:24:a1:83:60:d4:8f:36:
55:4f:5a:00:e1:c5:0b:9e:f9:82:0e:2c:ec:6f:83:b2:04:ee:
c0:4b:91:34:63:e6:50:a1:6e:ec:d8:c7:4e:e0:02:97:bf:70:
8a:ae:3f:8c:e9:1f:2c:e1:03:49:2b:90:13:35:70:d4:61:03:
65:7f:3a:8c:00:d6:48:03:f1:d3:8c:0a:f2:80:5a:40:b1:3f:
a4:43:90:c6:03:95:dd:8f:79:c3:98:e4:58:ce:3b:0e:78:64:
66:0d:fe:a0:30:2a:d9:e0:97:f3:fd:fb:fd:cd:21:89:40:b0:
d3:c4:12:c4:dc:a9:45:6d:bc:f1:3f:5c:2a:e9:44:13:ae:be:
af:76:83:2b:a7:13:ce:8c:1d:5c:0b:ba:a7:1f:43:dc:ed:58:
42:2a:10:ed:1f:95:e6:4b:ec:04:8f:40:3d:dc:76:8e:12:4c:
14:4f:4c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:58 2024 by rpki-client on console-ams.rpki-client.org