Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/MANivxzPStrqNgR0pDegWdWEp1k.roa
File: MANivxzPStrqNgR0pDegWdWEp1k.roa (raw, json)
Hash identifier: RqmdmzNeBxeAXhRYN/3TPCv2hu+JcIcfnKQWOKYx/lY=
Subject key identifier: 30:03:62:BF:1C:CF:4A:DA:EA:36:04:74:A4:37:A0:59:D5:84:A7:59
Certificate issuer: /CN=05f2748cb43862a104b56f8c6204b6209706558c
Certificate serial: 01856E01B3E14E5307BFE4FFDE936A678034
Authority key identifier: 05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/MANivxzPStrqNgR0pDegWdWEp1k.roa
Signing time: Sun 01 Jan 2023 15:44:43 +0000
ROA not before: Sun 01 Jan 2023 15:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211098
IP address blocks: 185.184.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:b3:e1:4e:53:07:bf:e4:ff:de:93:6a:67:80:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f2748cb43862a104b56f8c6204b6209706558c
Validity
Not Before: Jan 1 15:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=300362bf1ccf4adaea360474a437a059d584a759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d3:0b:ac:3b:e6:a5:9f:ae:d1:89:cd:92:e4:
2f:3e:47:0b:4b:48:fa:2a:5d:db:e4:bc:db:67:23:
c4:5c:1a:f5:80:bb:01:46:07:37:46:0c:d5:01:7d:
5b:54:a3:74:7f:46:4c:a0:cd:b3:0d:fb:17:64:0d:
de:fb:ab:cf:16:a6:8e:09:f0:ec:9c:b4:30:60:e5:
b4:fa:9d:b1:02:7a:66:7d:20:18:ff:48:50:8c:f3:
0a:25:99:ce:87:e8:b6:9d:b4:8b:a9:c9:45:a9:25:
ac:d4:a5:1d:10:b7:70:0b:e1:f2:d7:e1:ce:43:e0:
98:40:58:4c:2a:39:8a:ae:04:c8:be:4f:93:f2:e1:
e6:83:44:7c:dc:1d:dc:c8:37:17:da:14:f8:f9:bf:
63:a3:74:86:76:7c:41:5a:81:77:f6:7f:e7:2f:0c:
61:7e:65:13:25:0b:18:b2:85:ad:7b:24:bc:0a:81:
b9:11:d3:8f:7c:d6:08:68:36:00:c8:78:78:ab:64:
42:bf:2e:2c:d3:91:ab:db:03:88:a7:f0:98:ff:5d:
9b:5e:32:39:28:ff:aa:fc:64:2a:94:61:e2:d6:aa:
3c:c6:fa:14:ef:7b:96:23:f7:61:90:8d:fc:86:93:
2d:63:62:78:57:64:22:20:dd:e0:db:76:74:7c:6b:
12:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:03:62:BF:1C:CF:4A:DA:EA:36:04:74:A4:37:A0:59:D5:84:A7:59
X509v3 Authority Key Identifier:
keyid:05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/MANivxzPStrqNgR0pDegWdWEp1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.217.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:33:28:66:e2:1e:73:83:43:9b:64:ad:33:c9:40:af:f2:34:
30:b0:d6:2a:0b:4d:af:7e:e4:27:07:53:77:8c:bd:4e:d9:0c:
29:cc:8d:5d:88:00:aa:86:29:67:0c:8a:9b:f8:66:64:5b:d3:
fb:a9:09:97:53:9d:5d:fd:12:2f:f8:0c:45:da:ee:96:7a:e5:
79:a5:d4:e6:55:9f:e2:dc:38:a2:af:5f:03:3e:ad:10:64:28:
4d:bb:09:1f:cd:19:8b:41:e4:0a:72:4c:8c:4d:15:a9:2a:9a:
81:40:8f:0f:a7:87:64:e5:ef:45:15:af:67:b3:c0:2c:6e:bb:
48:03:c4:7b:41:11:5f:d8:e1:ca:f5:be:d1:d2:4b:ee:1c:05:
dc:b2:9b:79:d2:54:cd:45:07:05:55:b6:ed:2d:23:aa:5d:ea:
88:1c:3b:75:25:e1:75:86:29:06:47:7b:e5:94:6b:39:bc:58:
4d:31:7d:ab:35:eb:22:87:8e:b3:2e:fd:03:3f:fc:0a:02:72:
47:51:62:f8:04:cc:a3:27:17:0f:74:aa:c7:f4:89:5c:b9:47:
45:b5:6d:7c:eb:b8:d2:84:7b:4e:f7:14:a1:80:66:33:d9:79:
ab:38:16:2e:df:bc:ec:d8:27:5a:db:ee:1a:c2:fb:65:05:f5:
6b:b0:e3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:04 2024 by rpki-client on console-ams.rpki-client.org