Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/e5aLCbqlm94ro8ew-MshGUOS-mA.roa
File: e5aLCbqlm94ro8ew-MshGUOS-mA.roa (raw, json)
Hash identifier: zGbI1ytN8C1tX2ph5H2Tv6/kMyL4z0FvaKQGzmZjtvk=
Subject key identifier: 7B:96:8B:09:BA:A5:9B:DE:2B:A3:C7:B0:F8:CB:21:19:43:92:FA:60
Certificate issuer: /CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Certificate serial: 01856D93FC9A3596EF49DDD777A059EA5CC7
Authority key identifier: 44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/e5aLCbqlm94ro8ew-MshGUOS-mA.roa
Signing time: Sun 01 Jan 2023 13:44:52 +0000
ROA not before: Sun 01 Jan 2023 13:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24961
IP address blocks: 185.249.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:fc:9a:35:96:ef:49:dd:d7:77:a0:59:ea:5c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Validity
Not Before: Jan 1 13:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b968b09baa59bde2ba3c7b0f8cb21194392fa60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:36:ef:87:ec:b6:32:f1:54:28:11:6a:40:03:
e1:c3:c6:19:90:da:ed:e1:8a:a9:f3:87:23:2e:75:
10:bc:6d:23:6e:b2:de:91:37:0e:21:c0:99:2b:2e:
2b:1d:61:ac:3b:88:e2:a8:53:3b:72:7f:4d:0d:31:
9b:78:c3:0d:21:eb:62:8b:fa:a5:27:1e:4d:97:c6:
f7:b8:2e:9a:6e:83:bc:31:b5:7a:7f:93:c2:66:01:
c6:fd:ff:f7:93:55:1d:72:bd:b0:ac:5f:e1:07:37:
67:d8:c4:3f:05:41:67:8b:a5:1c:78:f9:1a:f2:9a:
ec:78:47:6e:09:94:c2:ca:77:dc:c3:b3:d6:83:8e:
aa:f6:98:4c:ec:c5:0a:43:de:c0:d1:1f:eb:2d:6f:
4a:6a:15:e9:09:5c:0b:38:81:d7:0a:6e:2c:2a:a7:
53:a5:1c:32:cf:96:37:b0:60:82:eb:a6:5b:f2:18:
24:52:5c:34:61:ac:82:37:74:6a:28:46:98:d0:87:
b1:d4:12:65:11:91:8b:14:54:96:ee:06:58:26:33:
ff:9f:42:32:b2:af:df:60:0b:a9:fd:11:dc:f3:ca:
0b:59:4c:d3:63:55:99:6f:97:9e:b3:a5:8c:d0:a5:
b9:e7:7a:39:d2:55:79:6e:ae:0a:9f:d3:78:ce:c5:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:96:8B:09:BA:A5:9B:DE:2B:A3:C7:B0:F8:CB:21:19:43:92:FA:60
X509v3 Authority Key Identifier:
keyid:44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/e5aLCbqlm94ro8ew-MshGUOS-mA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.64.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:aa:c2:b8:bd:4f:3a:a6:e5:38:3b:e7:82:e3:ad:75:78:96:
43:43:93:b5:50:51:39:76:98:0b:fe:1b:ea:bd:6b:2f:98:d9:
f3:bb:62:2c:f7:96:9e:fd:b0:19:11:8c:28:a5:5f:4c:84:ab:
1f:99:b1:7a:71:6c:48:be:f1:52:d0:06:ff:23:00:2f:f7:ea:
a4:c5:ab:5e:14:ee:83:6c:b5:75:fb:9d:c4:45:70:d2:0a:35:
f4:3d:b5:b5:59:9c:fd:c4:2d:0e:05:e8:e3:9d:e5:1a:97:9c:
5d:83:3f:9b:6f:31:4c:f0:67:73:77:88:e2:54:1b:bf:72:7c:
7e:2d:67:f0:a0:93:7e:f0:74:a8:9a:51:a9:5a:86:94:d9:e6:
2c:40:9c:24:13:aa:a8:58:76:05:c2:10:1c:8d:35:df:61:2e:
88:e9:77:20:40:af:1d:fb:10:86:68:e5:44:ec:67:85:fc:9f:
0d:fb:b6:8c:a8:e5:23:d4:9b:ba:68:5b:70:9d:c1:e5:42:63:
49:6c:61:85:12:b4:29:9d:06:4a:f9:d9:63:85:66:f9:1d:b5:
82:0d:f1:cd:a6:11:2e:fe:c6:ce:94:32:ec:23:4c:d6:90:54:
e9:3f:2e:58:99:e4:98:c6:dc:fe:66:44:4d:fa:2f:5c:74:07:
f5:9e:da:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:58 2024 by rpki-client on console-fra.rpki-client.org