Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/9mDgDLKLdjEft5WeqGmdqxFiJmc.roa
File: 9mDgDLKLdjEft5WeqGmdqxFiJmc.roa (raw, json)
Hash identifier: yL/JMiH0b1pmFl0RylT5o/E9DPeEmnU+Dzr5qoEyme4=
Subject key identifier: F6:60:E0:0C:B2:8B:76:31:1F:B7:95:9E:A8:69:9D:AB:11:62:26:67
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 018D9D4B1CDDED3F4DCFA5D465EA810F5318
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/9mDgDLKLdjEft5WeqGmdqxFiJmc.roa
Signing time: Mon 12 Feb 2024 12:29:21 +0000
ROA not before: Mon 12 Feb 2024 12:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.243.154.0/24 maxlen: 24
185.243.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 09:47:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9d:4b:1c:dd:ed:3f:4d:cf:a5:d4:65:ea:81:0f:53:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Feb 12 12:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f660e00cb28b76311fb7959ea8699dab11622667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:93:20:b3:9c:c7:d7:c6:71:cd:8b:b2:85:
bd:17:d5:6f:04:8c:f1:3b:d1:04:7f:cc:96:5c:e9:
bf:b6:cd:ea:e0:8f:78:62:eb:27:5a:47:0e:79:76:
14:b9:05:2b:99:07:dd:30:d0:38:da:b5:0d:48:49:
22:98:38:d5:df:d4:25:47:29:62:39:4a:34:c0:63:
49:a6:df:27:f1:4c:d9:32:f2:c6:27:21:5b:66:d3:
79:f5:e9:1b:e9:78:27:20:c7:95:aa:a3:96:21:cc:
54:69:6f:8e:09:5f:86:13:9f:df:46:36:59:08:8c:
5a:94:b8:bf:12:80:d7:6d:a0:81:c3:55:7f:a7:79:
b8:5e:1f:38:00:9c:d0:f4:a0:03:59:b7:99:92:65:
22:b6:3e:3d:54:9d:f3:28:ac:66:5c:cd:7c:dc:78:
27:a1:b4:54:9b:6d:cb:93:08:6c:76:f4:4f:e7:56:
e2:15:31:fc:fe:0e:03:2d:de:02:9b:a3:1a:2c:16:
29:00:24:62:17:ff:29:6f:ea:07:66:2f:41:2e:32:
18:55:7d:b5:4b:49:d9:a5:a9:34:db:3f:02:2f:00:
8c:fd:5b:ad:a9:82:98:d2:8d:20:f2:c9:b1:b7:d8:
96:af:f4:b1:6b:fa:7d:50:97:da:b7:2c:aa:1f:75:
78:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:60:E0:0C:B2:8B:76:31:1F:B7:95:9E:A8:69:9D:AB:11:62:26:67
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/9mDgDLKLdjEft5WeqGmdqxFiJmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.154.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:3a:a6:2a:92:d6:ca:2f:9b:f4:73:c1:f8:f0:0f:5c:5f:68:
49:de:f9:da:20:45:69:03:5f:3e:c7:29:b7:3a:9b:bb:46:53:
aa:7c:35:f8:75:80:c1:dd:a8:45:f3:5a:b0:6a:f4:0e:1b:33:
d9:5e:7d:c4:9b:df:fc:5b:31:7e:b5:b6:e2:b9:04:45:01:af:
a7:01:8d:ef:17:86:6e:48:47:05:de:b0:c5:37:e4:12:bc:fb:
5b:99:99:61:bd:ee:60:38:b3:39:db:3b:79:79:13:01:18:cf:
63:77:94:bb:cd:51:d0:62:5e:a0:ab:a2:45:42:53:27:ee:08:
b2:8e:69:87:20:d7:65:78:0a:8c:48:12:d9:b7:f1:84:56:8d:
e4:1e:9b:62:1d:3e:aa:73:ae:be:63:b3:bb:4a:18:e2:10:4c:
48:14:72:10:7a:53:02:e1:52:99:8d:30:15:51:c0:0b:7d:4d:
54:f4:d2:ba:9a:77:1b:da:d7:22:d2:02:ee:d1:50:6e:5c:44:
a5:df:86:7a:9e:5e:88:9d:bb:c5:ee:30:99:2e:10:37:eb:7e:
5a:ad:46:c0:16:d4:10:6c:65:55:f6:a5:22:8c:3e:ce:31:06:
c6:be:90:63:b5:7e:b7:d1:db:90:ae:41:2e:f8:dc:b4:25:11:
16:e3:3d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 13:09:40 2024 by rpki-client on console-ams.rpki-client.org