Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/mr3uAcAK-fwY6yd1OsdKpUtfEeo.roa
File: mr3uAcAK-fwY6yd1OsdKpUtfEeo.roa (raw, json)
Hash identifier: LuMO5opBIOy+0F5jK75EOCK4QWDfzv5c/q9djAUjmbQ=
Subject key identifier: 9A:BD:EE:01:C0:0A:F9:FC:18:EB:27:75:3A:C7:4A:A5:4B:5F:11:EA
Certificate issuer: /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial: 018ABCC8E66D132C10F437CB2B00A9997108
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/mr3uAcAK-fwY6yd1OsdKpUtfEeo.roa
Signing time: Fri 22 Sep 2023 12:06:37 +0000
ROA not before: Fri 22 Sep 2023 12:06:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202817
IP address blocks: 185.154.8.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:c8:e6:6d:13:2c:10:f4:37:cb:2b:00:a9:99:71:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Validity
Not Before: Sep 22 12:06:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9abdee01c00af9fc18eb27753ac74aa54b5f11ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:28:87:d6:0c:9d:d9:24:2b:69:b4:c9:4b:
54:2e:16:0a:d2:14:cb:72:b2:1d:f3:a9:68:c8:a0:
88:b5:d3:59:a1:38:fa:3a:7b:b8:55:d6:7e:35:c5:
7a:9d:48:bc:80:31:65:4c:f6:14:b0:c8:23:2d:a9:
72:c2:42:c9:2b:cc:b6:a5:b7:0d:7f:72:0f:a5:8d:
50:88:bb:6b:96:e2:ba:b2:26:5e:3a:5d:78:6e:40:
8b:62:22:a4:c7:8b:b2:da:ab:a9:79:a8:0f:1e:29:
ed:41:49:94:cb:2b:2c:0e:e8:1e:e8:ea:0b:6d:4c:
cd:df:7d:55:e5:51:b1:66:ab:92:0d:be:e4:20:00:
0b:54:e4:50:47:e1:d3:39:8b:41:29:3f:26:1b:3d:
c8:ae:76:b3:8c:a9:1b:b6:9d:a7:40:61:24:d1:18:
2c:f7:a2:f4:9f:5d:ab:ac:ae:99:1c:5f:a7:4b:4a:
19:c6:3d:c4:b6:4d:81:12:5b:58:82:0f:77:43:b4:
2a:64:16:f4:7c:36:66:9d:9d:c4:7d:74:ec:af:22:
76:ac:4c:23:9e:b7:a9:8a:3d:ed:03:6b:60:42:11:
3c:ad:51:a2:31:ef:ce:b7:db:f9:a7:c8:25:e3:2d:
44:b0:ad:bb:a4:c9:c5:11:4a:b4:b9:a3:9d:fe:6f:
61:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BD:EE:01:C0:0A:F9:FC:18:EB:27:75:3A:C7:4A:A5:4B:5F:11:EA
X509v3 Authority Key Identifier:
keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/mr3uAcAK-fwY6yd1OsdKpUtfEeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.8.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:ef:28:40:25:1d:20:b5:62:4b:a2:f7:e9:5d:01:e4:65:9b:
9f:fb:06:76:0e:50:b4:10:28:9a:5e:ff:60:25:a9:ac:54:a1:
38:b5:9e:db:6d:df:bf:7f:1e:59:c6:1a:f0:65:7d:52:74:5b:
24:38:f7:62:c3:13:9f:73:ee:56:b9:8d:19:1c:29:99:e3:52:
5c:f1:b5:3f:05:31:f2:26:73:52:de:7c:17:4d:db:fe:9e:a2:
c6:0f:1d:18:ea:1b:ca:04:57:bc:55:21:17:03:56:37:a4:ea:
a5:cd:14:03:ec:e9:b6:02:25:93:a8:7b:c8:2e:6e:05:4e:c9:
39:7f:42:b4:7d:c1:2a:70:d7:ef:65:98:da:29:4d:17:ed:8a:
0e:4d:d9:d4:42:c6:27:63:3a:c6:95:91:99:a7:a5:b4:96:09:
f9:65:30:57:29:b8:78:7a:c1:d3:54:db:f5:ff:88:f9:1f:1f:
a0:7e:78:e0:62:b0:88:24:84:5d:c4:c6:35:fe:a0:cc:14:3e:
7d:a1:d2:2a:cf:3e:b0:25:c7:c6:29:7e:b7:c1:e5:bc:bc:d2:
34:34:38:31:0f:83:fe:19:6f:3a:d8:66:12:42:ff:af:8e:6c:
86:76:08:98:1e:cb:4b:45:9a:2f:ef:cf:c1:4c:df:08:c0:7a:
82:0c:71:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:21 2024 by rpki-client on console-fra.rpki-client.org