Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/M8rksk_XufXDAlhzE55GXACttTM.roa
File: M8rksk_XufXDAlhzE55GXACttTM.roa (raw, json)
Hash identifier: HcpM0GcbF0zsG+ofB4TrSLvY1BX7FX4ERb2lE3plk3k=
Subject key identifier: 33:CA:E4:B2:4F:D7:B9:F5:C3:02:58:73:13:9E:46:5C:00:AD:B5:33
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 01942747A5C958CFA9610FFC298300580067
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/M8rksk_XufXDAlhzE55GXACttTM.roa
Signing time: Thu 02 Jan 2025 13:49:54 +0000
ROA not before: Thu 02 Jan 2025 13:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 89.150.49.0/24 maxlen: 24
185.33.26.0/24 maxlen: 24
185.162.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Jan 2025 16:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a5:c9:58:cf:a9:61:0f:fc:29:83:00:58:00:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Jan 2 13:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33cae4b24fd7b9f5c3025873139e465c00adb533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:be:33:16:8b:6b:b1:2f:5a:21:8f:d7:d8:
3e:df:37:fa:68:8b:cc:d2:8c:89:4b:bf:14:87:39:
3f:55:9d:e4:40:16:40:f9:e4:a4:a8:b2:d0:5b:24:
ce:9d:27:7d:a9:e1:74:03:b0:6d:7b:89:63:25:cb:
4f:8e:3f:1e:6e:06:0c:24:82:a0:64:f7:50:e2:fe:
49:47:b6:84:fc:ac:66:2c:72:16:32:9f:6a:d3:11:
2b:ee:32:c4:ec:d5:ac:23:47:9e:b6:52:c2:bc:18:
6f:8b:6b:5d:7e:72:ca:72:11:85:e4:0f:03:2b:4d:
80:c7:7e:ae:0d:e8:3a:3c:fe:64:4a:54:9d:1c:3f:
ad:25:df:4a:01:41:9e:cf:ab:95:72:7c:4a:14:79:
4e:bc:64:ab:34:76:5a:b3:2f:a6:bf:20:12:b6:36:
50:d0:b5:08:35:31:a2:01:dc:82:cd:12:21:af:bc:
17:cd:37:a7:b3:5a:e2:84:48:8a:8c:83:0c:9a:57:
4a:09:5a:09:bc:26:a3:6e:5a:1e:51:b6:cf:98:b4:
e5:98:2b:41:0c:64:4f:c0:9e:d1:f4:17:12:83:8c:
09:32:9b:57:dc:23:a0:a1:9a:4b:73:04:e5:49:0d:
2d:74:aa:12:e3:7d:8c:a8:9a:86:bf:61:7d:49:48:
b3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CA:E4:B2:4F:D7:B9:F5:C3:02:58:73:13:9E:46:5C:00:AD:B5:33
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/M8rksk_XufXDAlhzE55GXACttTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.49.0/24
185.33.26.0/24
185.162.176.0/24
Signature Algorithm: sha256WithRSAEncryption
77:3f:51:f0:ee:ee:7a:5a:a0:7c:be:01:e7:a8:ff:07:a4:14:
5c:44:17:be:fc:a3:cd:9a:c7:53:ae:4e:b0:a9:27:21:65:6e:
23:30:77:b5:08:21:c4:61:71:dc:c6:18:e7:e3:3a:11:3f:9d:
ad:42:b7:8d:24:83:c7:fc:07:43:9e:91:67:1d:9a:50:bc:ef:
6d:95:8f:26:0b:29:8a:1f:83:89:48:26:bf:05:5b:07:d3:29:
3e:6b:2c:25:da:fa:4c:1d:90:73:d4:6b:79:eb:d3:de:65:39:
10:ec:9a:01:9f:0e:6c:a0:a7:af:b2:ca:13:bf:30:41:0e:18:
73:a7:9e:19:eb:91:ad:c8:e1:24:02:82:8f:31:ac:07:e5:52:
36:c6:f3:b8:b1:17:29:85:e8:cc:22:cb:68:3c:b4:93:f6:7f:
35:d2:ef:b7:2f:f9:c1:9d:70:9b:00:4c:3c:58:d7:9c:c9:5d:
6f:9a:b1:bd:9f:ff:ee:13:c3:11:a4:f6:5f:b1:96:c7:4f:f9:
22:f7:72:6b:b6:15:0e:39:6d:33:9a:2c:c9:59:11:d1:9b:f1:
40:31:d1:6f:63:fa:62:1d:7d:ab:cc:a5:0b:ac:62:9b:0b:5b:
c5:83:e5:2a:6f:df:e1:96:d5:bd:4a:4e:94:9f:9a:04:d5:33:
17:ee:d1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:20:35 2025 by rpki-client