Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/m-lC3tHgR7hHhJ5R6qJHAM8L3LA.roa
File: m-lC3tHgR7hHhJ5R6qJHAM8L3LA.roa (raw, json)
Hash identifier: NJy1/F65u4c36bGDDWik2N0RFEMNjd200aGdaY3K+ng=
Subject key identifier: 9B:E9:42:DE:D1:E0:47:B8:47:84:9E:51:EA:A2:47:00:CF:0B:DC:B0
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 018654CDB61822841C989F62CD6CE60867DB
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/m-lC3tHgR7hHhJ5R6qJHAM8L3LA.roa
Signing time: Wed 15 Feb 2023 11:20:12 +0000
ROA not before: Wed 15 Feb 2023 11:20:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 193.201.28.0/23 maxlen: 23
185.1.218.0/24 maxlen: 24
2001:7f8:10::/48 maxlen: 48
2001:7f8:10::/64 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:54:cd:b6:18:22:84:1c:98:9f:62:cd:6c:e6:08:67:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Feb 15 11:20:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9be942ded1e047b847849e51eaa24700cf0bdcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:09:9a:23:ad:2b:b6:c6:9b:23:87:b8:ad:
7c:17:29:1d:9a:e4:9b:3a:cc:c8:10:4f:67:92:63:
7f:50:a2:3d:97:05:e8:15:ca:d5:43:7e:84:5b:aa:
8d:8b:fc:f1:47:8d:b1:2e:d4:ce:71:07:97:6d:05:
23:ba:54:6c:07:11:ac:87:b2:06:c5:63:7a:3a:08:
da:5d:a2:2a:d3:6b:27:67:1e:2a:c0:73:55:b8:70:
04:9d:6e:19:a6:b9:62:9b:b4:2b:a3:68:69:6d:d4:
23:d5:61:b5:c1:38:31:86:1a:27:0f:f7:ef:30:1c:
1f:3e:89:e7:eb:4d:b8:05:8a:f1:2f:6b:3a:0f:c7:
0e:da:e8:5a:68:e8:5f:ed:b5:0c:e2:2c:e5:3a:b8:
8a:34:b0:84:9e:d1:2c:63:d3:6e:d1:70:99:7e:3a:
96:0d:65:93:bc:e8:8a:e7:3c:0a:47:9a:4b:24:9d:
3b:be:6f:20:46:24:7e:e5:61:3e:32:96:62:2d:bf:
c9:71:51:ba:21:e4:b2:0e:0d:cf:3a:83:4f:3f:49:
65:fe:ab:ff:96:8a:7d:63:0b:7d:9b:fb:8f:6d:bb:
e0:e1:d0:4e:8c:74:b4:08:17:77:70:1d:d0:b8:21:
e2:6c:67:55:8c:5b:64:f5:c1:c9:01:f9:83:ba:b9:
45:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E9:42:DE:D1:E0:47:B8:47:84:9E:51:EA:A2:47:00:CF:0B:DC:B0
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/m-lC3tHgR7hHhJ5R6qJHAM8L3LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.218.0/24
193.201.28.0/23
IPv6:
2001:7f8:10::/48
Signature Algorithm: sha256WithRSAEncryption
b9:3c:be:07:30:a8:e3:90:d4:bd:e2:be:37:a8:0c:f6:1e:0d:
72:df:28:b8:ac:5f:aa:5d:6d:eb:bf:a9:34:47:35:28:69:5e:
4b:93:43:08:a7:60:e1:83:98:40:13:94:e8:fc:81:5c:f9:ba:
16:80:ad:bb:5a:51:80:85:8b:c8:88:61:86:d0:07:8d:ea:bb:
45:e5:6e:67:5a:4b:9e:f8:2a:ed:3f:83:0d:32:33:aa:fe:1b:
1a:97:b9:84:b6:b2:ac:eb:76:2b:51:59:de:95:9b:db:19:77:
9a:64:ce:0f:08:39:4d:0e:47:b5:f8:5e:54:2d:af:e7:dd:06:
ae:2b:60:c8:7f:c1:40:36:26:95:26:dd:0c:87:87:b6:78:40:
d2:0f:54:9e:10:a6:4f:1f:54:ef:23:b5:d1:db:12:64:7e:96:
fa:0b:5c:44:f1:31:a4:22:60:81:ba:0c:6b:6b:3b:8a:6a:b2:
9d:c7:be:80:e1:b0:50:cd:bd:94:3c:9a:b6:14:a5:fb:8b:4d:
e2:20:22:a0:fb:88:d6:cf:c7:4e:f9:7d:b7:99:c8:18:45:2f:
fc:ef:a2:64:cd:f7:0e:f0:e0:3e:17:74:76:3b:c4:b6:a9:4f:
15:b6:98:6d:32:0c:0d:f4:03:16:a0:48:d3:42:30:09:2f:6b:
44:9b:5b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:50 2024 by rpki-client on console-ams.rpki-client.org