Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/mQoL05_miZHBYNmV_VG7VscS_l8.roa
File: mQoL05_miZHBYNmV_VG7VscS_l8.roa (raw, json)
Hash identifier: /wsvkeKHS2GcBfWU4Rzl5ook2iCl+nywudJxFQPwBDM=
Subject key identifier: 99:0A:0B:D3:9F:E6:89:91:C1:60:D9:95:FD:51:BB:56:C7:12:FE:5F
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 0190CD38F027851D87ED4689F2E795FCDED0
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/mQoL05_miZHBYNmV_VG7VscS_l8.roa
Signing time: Fri 19 Jul 2024 22:59:39 +0000
ROA not before: Fri 19 Jul 2024 22:59:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54203
IP address blocks: 185.147.213.0/24 maxlen: 24
2a03:efc0:200::/40 maxlen: 40
2a03:efc0:500::/40 maxlen: 40
2a03:efc0:1100::/40 maxlen: 40
2a03:efc0:1300::/40 maxlen: 40
2a03:efc0:1900::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 19 Jul 2024 23:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:cd:38:f0:27:85:1d:87:ed:46:89:f2:e7:95:fc:de:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Jul 19 22:59:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=990a0bd39fe68991c160d995fd51bb56c712fe5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:15:a7:5e:aa:0b:6c:54:fc:c7:c8:9f:69:56:
f2:af:c6:a3:48:e6:c8:44:fb:cf:04:d9:d8:8b:a9:
6f:be:b7:1e:29:a3:b4:55:68:39:4c:d1:1a:c3:5a:
dc:c9:2b:14:e3:78:a1:89:d9:13:00:50:4f:41:c6:
99:47:dc:cd:f6:ad:f9:cc:60:50:09:02:0f:36:1c:
33:a2:38:53:cf:36:6f:11:91:86:6f:79:a1:52:37:
00:fe:bf:8c:a5:32:59:a0:53:e6:22:e4:83:9c:cf:
eb:1e:c0:72:3a:8b:40:1e:26:db:53:42:43:c1:3f:
1f:35:5d:13:d8:e7:03:db:12:b8:f5:ec:c3:b9:61:
df:91:21:12:85:3c:a5:02:0e:43:6f:79:b8:25:a3:
3f:36:66:ff:66:42:e5:38:d9:cf:d1:f9:3e:e6:76:
ca:fe:b8:ea:87:8d:d3:c3:ba:e5:6f:5e:4c:97:84:
48:dc:94:6b:6a:f5:50:5b:0f:df:9d:a3:6d:c0:53:
71:1b:f5:01:cf:30:34:8b:9f:d9:42:84:2c:5e:95:
ef:70:80:7d:01:bc:f3:79:d9:eb:c1:b5:06:d0:a4:
4c:45:3f:b5:88:93:77:65:af:a0:ab:be:c0:91:79:
1a:da:13:a1:44:a7:37:fd:44:05:00:0f:70:63:1d:
c9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0A:0B:D3:9F:E6:89:91:C1:60:D9:95:FD:51:BB:56:C7:12:FE:5F
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/mQoL05_miZHBYNmV_VG7VscS_l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.213.0/24
IPv6:
2a03:efc0:200::/40
2a03:efc0:500::/40
2a03:efc0:1100::/40
2a03:efc0:1300::/40
2a03:efc0:1900::/40
Signature Algorithm: sha256WithRSAEncryption
8e:81:c6:18:3b:ce:48:93:5a:91:36:cf:e4:17:7e:00:02:f1:
e8:3a:1e:95:07:f5:fd:de:c1:bc:f8:3a:57:d2:19:6a:b5:77:
a4:f8:c8:73:6a:ea:a6:61:8c:1a:fd:2e:1f:cc:9b:1d:90:a7:
e4:87:06:aa:fc:59:b0:95:2c:9c:bf:9a:2e:a8:d7:96:a5:05:
3b:34:38:9c:5a:c6:ed:8f:7f:6d:c5:97:de:9e:a4:4b:2f:91:
71:d1:4a:c7:e7:38:99:b8:91:ad:09:d1:44:57:d1:5b:18:db:
e7:9d:4f:0e:88:cc:ce:62:ca:e9:e3:6c:24:08:3e:27:3d:8c:
53:07:89:19:73:b9:0b:19:6f:7c:f4:45:c5:5e:5b:7c:fc:f3:
c8:54:a4:db:5d:38:74:38:1b:4b:04:56:86:b5:25:2e:cf:bd:
c6:9a:2b:d8:a7:a2:ba:a6:ff:fa:84:14:2b:65:36:d2:3b:57:
81:cb:8e:d1:3e:84:c9:e4:7a:43:05:65:b7:09:1c:25:ba:f2:
93:1c:1d:5f:4e:ad:a4:5f:89:ee:b0:10:bb:91:8b:fa:61:e7:
65:b0:31:7c:dc:4e:35:d0:9d:dd:2d:db:b4:35:86:5a:b4:5c:
ac:09:f0:f8:6f:88:b5:43:af:40:56:de:4c:f6:f3:69:15:f7:
87:3c:db:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 20 02:32:26 2024 by rpki-client on console-ams.rpki-client.org