Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/m33MrBTaqch8xlruCAPILLQo5Jc.roa
File: m33MrBTaqch8xlruCAPILLQo5Jc.roa (raw, json)
Hash identifier: 66FpzGZTBF+7lh9tgvi95BPEEvkCX3Z1P+ytlZS4aGU=
Subject key identifier: 9B:7D:CC:AC:14:DA:A9:C8:7C:C6:5A:EE:08:03:C8:2C:B4:28:E4:97
Certificate issuer: /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial: 01926628E404B7C8014A5EFEA305BE1BF9AE
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/m33MrBTaqch8xlruCAPILLQo5Jc.roa
Signing time: Mon 07 Oct 2024 08:46:48 +0000
ROA not before: Mon 07 Oct 2024 08:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43395
IP address blocks: 185.145.184.0/22 maxlen: 22
185.145.186.160/28 maxlen: 28
185.186.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 08:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:66:28:e4:04:b7:c8:01:4a:5e:fe:a3:05:be:1b:f9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Validity
Not Before: Oct 7 08:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b7dccac14daa9c87cc65aee0803c82cb428e497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f1:b6:f8:31:0e:1c:a4:e5:bb:0c:96:f2:3f:
e9:06:33:ba:81:45:97:12:bb:2e:a5:75:dc:6d:5d:
ba:bd:98:58:2b:76:cd:ad:f0:7b:19:0a:c8:3e:76:
56:dc:9a:11:e3:94:43:e3:59:a1:ea:e5:16:1b:b3:
11:8a:d8:bb:40:a5:3a:ee:ea:41:a5:f9:79:d6:59:
70:9f:ef:0b:21:d6:b2:26:cb:8b:e2:3a:6e:61:a8:
c1:78:af:b4:4d:28:11:aa:2c:ec:f0:d7:1d:cd:fb:
8a:ef:2c:7e:ef:c2:51:87:b6:62:4d:1e:c5:2b:73:
5b:ca:aa:1f:a1:87:cf:e6:32:4f:73:fd:20:5e:14:
87:6d:14:fc:18:ed:db:da:bc:d3:c9:34:ba:72:47:
13:7e:20:ae:e9:da:bb:45:93:8b:47:6c:cf:8b:fb:
a8:d5:27:9f:98:5a:81:a0:1e:72:97:46:fd:20:a7:
f3:15:34:54:70:34:a8:5d:57:18:5b:27:2d:37:21:
9f:4f:00:38:12:02:12:e4:56:c2:1e:76:0a:d8:b0:
4d:5a:00:47:31:03:fb:1c:d3:46:e1:71:46:64:b5:
a0:7a:00:8c:36:76:0f:ec:4f:0d:3c:98:73:8c:74:
ca:cd:d6:fd:c0:f2:c2:9e:74:ed:c1:f5:ab:ee:a7:
21:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7D:CC:AC:14:DA:A9:C8:7C:C6:5A:EE:08:03:C8:2C:B4:28:E4:97
X509v3 Authority Key Identifier:
keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/m33MrBTaqch8xlruCAPILLQo5Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.184.0/22
185.186.50.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d4:20:8c:38:8e:0e:f8:87:ba:9a:f5:a8:60:83:d0:46:6d:
91:38:23:8f:14:4f:60:59:b2:3d:b5:7a:45:f4:5e:de:10:31:
1b:74:08:e9:e3:90:ae:03:c6:60:23:04:a2:10:19:73:f9:84:
b2:2a:d8:7a:59:1f:4c:3c:a8:c2:66:97:98:df:47:13:46:b6:
0c:6e:26:62:cd:8d:0e:36:d9:83:46:ee:46:5d:9e:2c:ac:e8:
fc:f9:c0:cc:47:8a:2f:6f:83:77:ac:bb:42:c8:d7:5a:33:e7:
8e:1a:62:da:6b:c5:08:8f:5b:55:45:71:19:aa:a7:07:3d:91:
9d:1d:28:96:1e:a2:fe:33:4a:6a:61:38:a7:55:36:59:25:9f:
9d:6d:c3:2f:79:54:e0:24:76:80:10:1a:a5:cf:7d:bf:9b:a9:
51:89:ed:56:10:8c:d1:33:71:ad:60:18:fc:78:39:c7:12:52:
3d:06:9d:33:29:23:2d:ca:d4:2b:27:64:08:97:c9:d9:24:57:
80:8d:33:f1:ca:66:43:a5:2e:d1:90:8d:04:56:5f:d3:92:c9:
51:4f:6f:a3:57:ba:77:b0:e8:c3:68:e6:e5:96:a4:53:6c:a6:
97:f0:45:fa:49:78:b4:ed:8b:f2:a5:c8:10:06:5a:0f:5f:10:
eb:ac:e9:37
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZJmKOQEt8gBSl7+owW+G/muMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NGZkYWQxMGVlNTViMzI4MmE2NDI0NmE0MWRjNjFhODky
MmQyNWQwHhcNMjQxMDA3MDg0NjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjdkY2NhYzE0ZGFhOWM4N2NjNjVhZWUwODAzYzgyY2I0MjhlNDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvG2+DEOHKTluwyW8j/pBjO6gUWX
ErsupXXcbV26vZhYK3bNrfB7GQrIPnZW3JoR45RD41mh6uUWG7MRiti7QKU67upB
pfl51llwn+8LIdayJsuL4jpuYajBeK+0TSgRqizs8NcdzfuK7yx+78JRh7ZiTR7F
K3NbyqofoYfP5jJPc/0gXhSHbRT8GO3b2rzTyTS6ckcTfiCu6dq7RZOLR2zPi/uo
1SefmFqBoB5yl0b9IKfzFTRUcDSoXVcYWyctNyGfTwA4EgIS5FbCHnYK2LBNWgBH
MQP7HNNG4XFGZLWgegCMNnYP7E8NPJhzjHTKzdb9wPLCnnTtwfWr7qchaQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJt9zKwU2qnIfMZa7ggDyCy0KOSXMB8GA1UdIwQY
MBaAFDRP2tEO5VsygqZCRqQdxhqJItJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wNjc2MzAtMzA2ZS00YzM3LThiY2Mt
NGYwMjFjNzNlZjc0LzEvbTMzTXJCVGFxY2g4eGxydUNBUElMTFFvNUpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wNjc2MzAtMzA2ZS00YzM3LThiY2MtNGYwMjFjNzNlZjc0
LzEvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuZG4AwQA
uboyMA0GCSqGSIb3DQEBCwUAA4IBAQAG1CCMOI4O+Ie6mvWoYIPQRm2ROCOPFE9g
WbI9tXpF9F7eEDEbdAjp45CuA8ZgIwSiEBlz+YSyKth6WR9MPKjCZpeY30cTRrYM
biZizY0ONtmDRu5GXZ4srOj8+cDMR4ovb4N3rLtCyNdaM+eOGmLaa8UIj1tVRXEZ
qqcHPZGdHSiWHqL+M0pqYTinVTZZJZ+dbcMveVTgJHaAEBqlz32/m6lRie1WEIzR
M3GtYBj8eDnHElI9Bp0zKSMtytQrJ2QIl8nZJFeAjTPxymZDpS7RkI0EVl/TkslR
T2+jV7p3sOjDaObllqRTbKaX8EX6SXi07YvypcgQBloPXxDrrOk3
-----END CERTIFICATE-----
Generated at Mon Oct 7 13:25:52 2024 by rpki-client on console-fra.rpki-client.org