Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/M-0j-NcJ2NEH-PNn7bmJfyKmROw.roa
File: M-0j-NcJ2NEH-PNn7bmJfyKmROw.roa (raw, json)
Hash identifier: MLH/T6u9gFnu15XrKQDNcVM/JsBzvts9w+14/nXF4YU=
Subject key identifier: 33:ED:23:F8:D7:09:D8:D1:07:F8:F3:67:ED:B9:89:7F:22:A6:44:EC
Certificate issuer: /CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0
Certificate serial: 018CC3B710255C2F76ADA368649A6B270159
Authority key identifier: 4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/M-0j-NcJ2NEH-PNn7bmJfyKmROw.roa
Signing time: Mon 01 Jan 2024 06:30:03 +0000
ROA not before: Mon 01 Jan 2024 06:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43824
IP address blocks: 185.111.162.0/24 maxlen: 24
185.111.161.0/24 maxlen: 24
185.111.160.0/24 maxlen: 24
185.111.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 09:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:10:25:5c:2f:76:ad:a3:68:64:9a:6b:27:01:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0
Validity
Not Before: Jan 1 06:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33ed23f8d709d8d107f8f367edb9897f22a644ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f3:8f:ee:fa:09:42:12:34:21:d2:82:b1:72:
44:71:8a:73:c0:8a:78:c0:0d:a8:3a:3b:7b:d7:48:
b4:1a:40:69:92:8b:d8:5c:00:0e:cf:bc:72:bb:49:
dc:89:22:cd:9b:6d:e2:e2:48:8a:90:61:a0:94:cf:
e9:1b:28:7d:e8:8d:b7:03:64:ab:80:51:ba:34:48:
53:6d:ed:f3:4c:ce:eb:cd:20:51:74:cd:66:33:36:
ab:ad:2d:0c:df:c9:58:d9:9a:a2:b7:e2:fb:96:0b:
89:eb:46:9f:5c:92:bf:d5:47:27:0a:a2:ff:bd:95:
f6:88:3b:b4:7c:af:84:10:7b:7e:05:30:7e:05:53:
2e:59:8e:54:6c:5f:b6:10:56:2a:53:45:e1:a3:0e:
47:96:41:a1:ba:d9:ee:7f:9a:a6:cf:df:96:5d:b6:
b8:dd:2d:b2:5a:e3:92:e5:4b:1f:e8:53:e1:e6:f8:
c9:a1:cf:9a:27:c8:f6:3e:26:dc:5d:8d:0b:8f:f5:
85:80:ee:53:58:5d:5d:3f:e6:f7:00:5c:73:ee:4f:
75:7d:d5:86:8a:6d:53:cd:07:34:48:9a:30:38:d9:
0b:82:27:0a:89:c6:18:ce:63:52:f7:43:cb:db:e1:
a7:45:5f:26:14:89:0d:02:36:9a:c1:8d:12:a6:3a:
74:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:ED:23:F8:D7:09:D8:D1:07:F8:F3:67:ED:B9:89:7F:22:A6:44:EC
X509v3 Authority Key Identifier:
keyid:4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/M-0j-NcJ2NEH-PNn7bmJfyKmROw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.160.0/22
Signature Algorithm: sha256WithRSAEncryption
e3:40:47:9c:4e:e4:00:fa:1d:71:58:d4:69:7e:d0:a8:ce:5e:
53:c6:f8:c7:30:5b:c8:32:e3:58:78:72:2b:6f:22:d5:3c:b3:
9f:cd:85:66:06:75:de:cc:bd:42:a4:d5:c8:93:c1:f9:0c:7c:
30:82:26:40:94:fc:34:45:45:61:0a:0b:b9:2b:d5:10:b8:f6:
06:aa:06:69:e5:7a:52:5e:91:c6:c0:77:27:f8:64:4a:9b:2e:
9e:83:04:64:89:dd:c3:10:58:f6:c4:75:66:38:2b:47:bd:54:
b9:b6:45:6c:cb:37:d8:8a:5a:a8:e7:ef:37:2f:ab:3e:36:a1:
fb:99:56:68:e5:68:37:de:88:92:86:42:42:22:e2:a4:73:35:
20:58:f1:8a:dd:b7:42:6e:d4:68:93:43:e6:e1:5e:82:81:59:
7b:3c:55:9f:1d:0b:01:83:fe:9e:32:ab:a4:53:d8:00:10:2c:
3a:dc:12:0d:36:47:20:de:70:47:14:bf:8e:ea:e4:90:b3:14:
d9:1e:d2:59:a9:84:86:c7:7c:b0:34:f4:1a:51:aa:91:67:d1:
ca:94:ad:e0:af:16:2e:50:85:6f:f2:85:21:30:f3:96:0f:a3:
03:0e:21:d5:0f:b3:88:73:83:7e:9e:16:82:19:26:4d:53:f5:
97:45:e8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:18:36 2025 by rpki-client