Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/MTQPG6rAjBzGwG0XLq0_ULSz5lU.roa
File: MTQPG6rAjBzGwG0XLq0_ULSz5lU.roa (raw, json)
Hash identifier: HW4EjTg/TNDn1tScyBmFwJjYyyCo/Z0NbYDgRCNNd3o=
Subject key identifier: 31:34:0F:1B:AA:C0:8C:1C:C6:C0:6D:17:2E:AD:3F:50:B4:B3:E6:55
Certificate issuer: /CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Certificate serial: 0185730CAC58C87C493697B48371018BB7D0
Authority key identifier: AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/MTQPG6rAjBzGwG0XLq0_ULSz5lU.roa
Signing time: Mon 02 Jan 2023 15:14:48 +0000
ROA not before: Mon 02 Jan 2023 15:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197033
IP address blocks: 185.149.216.0/22 maxlen: 22
185.232.24.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:ac:58:c8:7c:49:36:97:b4:83:71:01:8b:b7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Validity
Not Before: Jan 2 15:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31340f1baac08c1cc6c06d172ead3f50b4b3e655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ce:06:c0:ef:b4:d1:51:58:7c:33:7d:1e:02:
ee:bb:2c:25:b8:86:f2:d7:24:02:7b:cb:9d:b9:ca:
c8:65:73:15:bd:68:49:e2:af:da:af:74:d6:e1:f0:
35:47:cd:74:94:dd:4c:c0:7c:a9:43:bc:e0:63:7a:
79:b4:73:22:81:b0:34:cb:79:15:7e:01:bb:fb:31:
13:9a:80:da:53:d6:0f:b7:cd:09:e4:e4:c1:1a:c9:
59:f3:f7:b2:62:50:2d:2f:2a:ca:4b:04:0b:71:31:
95:6a:f6:59:7d:51:53:28:c9:67:07:d1:53:9e:e9:
fb:a8:e6:0d:a1:c0:a9:3b:3e:a4:15:3d:3f:46:7c:
8f:a7:3e:75:38:c6:9b:89:38:cf:9b:3d:7a:67:22:
12:63:0c:67:7c:b2:9b:67:48:52:38:88:fa:10:9e:
55:cf:21:0a:fe:a4:54:29:c4:e4:2e:6c:2c:21:6b:
2e:b3:1e:db:48:76:e3:7c:76:37:3e:b9:c2:17:f8:
0c:ed:a6:82:8c:41:70:57:4c:2d:3b:9f:5d:0c:7e:
fa:3f:a9:2f:7e:9b:65:39:78:e6:a2:a7:b1:c3:97:
0e:d6:72:6a:6d:a0:c9:51:12:02:5e:0b:79:9d:6c:
5b:13:cc:03:b5:39:3d:a6:6b:52:98:96:99:b3:ca:
48:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:34:0F:1B:AA:C0:8C:1C:C6:C0:6D:17:2E:AD:3F:50:B4:B3:E6:55
X509v3 Authority Key Identifier:
keyid:AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/MTQPG6rAjBzGwG0XLq0_ULSz5lU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.216.0/22
185.232.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:3d:ce:45:2f:51:07:ef:5f:4e:a6:4c:d3:57:f2:33:d4:84:
45:89:1b:e0:a7:4c:6f:d3:8d:fc:5a:3b:1a:d0:de:92:ac:ae:
7f:5b:78:39:65:fa:e1:d7:e4:c1:f3:83:36:be:cc:53:b7:9c:
f7:ea:da:5a:2a:b1:2d:6a:73:83:b0:d0:cf:24:98:de:1f:87:
e7:d2:62:26:49:1b:11:96:0c:c7:78:39:3e:2b:b1:98:ae:a4:
00:17:cc:17:f1:16:8e:06:91:a4:09:da:a5:a2:7a:de:75:bf:
6f:ec:35:a6:00:b2:23:e5:fd:6d:44:24:e3:c8:ca:55:74:9e:
5e:0d:7a:4c:f9:17:b5:73:a7:a6:e7:3e:4c:69:69:a3:56:72:
97:5c:7d:ca:99:88:49:b3:6d:82:72:df:cb:c7:04:97:78:06:
d3:dc:d8:c3:80:07:8a:bb:d8:8e:a5:5a:35:c1:9f:87:62:1c:
f1:ee:51:12:8a:ad:49:09:91:b9:78:4b:70:ad:08:32:76:81:
9f:93:b5:5a:59:49:66:8e:78:2c:f0:31:97:74:3c:5f:07:7f:
3a:de:ff:41:b8:e8:e2:78:b1:14:06:4d:d8:61:38:08:02:6a:
28:d5:38:f3:bd:e4:0b:9c:30:16:d1:d9:bd:8e:cd:b4:6d:c2:
9c:f1:a1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:02 2024 by rpki-client on console-fra.rpki-client.org