Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/iMSFVgAdYkOsx5iNhRs8g0jbaRI.roa
File: iMSFVgAdYkOsx5iNhRs8g0jbaRI.roa (raw, json)
Hash identifier: Mbovec5umF6Y6ZfeAspJ6cnrvUloU4Sg0AypC9RR600=
Subject key identifier: 88:C4:85:56:00:1D:62:43:AC:C7:98:8D:85:1B:3C:83:48:DB:69:12
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 018CC3B6EAD1DB9676DFAE71DCC9DDAAF58E
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/iMSFVgAdYkOsx5iNhRs8g0jbaRI.roa
Signing time: Mon 01 Jan 2024 06:29:53 +0000
ROA not before: Mon 01 Jan 2024 06:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49386
IP address blocks: 185.225.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jun 2024 21:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ea:d1:db:96:76:df:ae:71:dc:c9:dd:aa:f5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Jan 1 06:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88c48556001d6243acc7988d851b3c8348db6912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:80:36:1f:b6:48:e9:b0:e0:21:8a:f1:9e:6c:
8e:08:41:5e:3e:f0:6e:4d:84:94:ce:7a:0b:d0:41:
e9:9b:34:eb:97:cb:ed:c3:76:e4:1e:a7:0c:d0:86:
a4:81:62:43:d2:bb:c2:33:aa:7a:0c:d2:6a:b3:7e:
a0:66:06:7a:6a:8d:74:b1:cd:ce:a5:77:4e:eb:a8:
7e:97:c0:62:f5:9a:b1:d5:b9:a9:57:a8:49:ed:c2:
f9:b2:02:be:a7:50:a3:02:19:bb:89:32:65:5b:f2:
26:c7:b2:41:92:6e:9a:04:ee:9f:e4:13:26:96:18:
7a:58:be:31:89:85:12:b0:f3:74:a2:1e:0f:0e:5c:
e8:c0:17:8d:83:3f:03:3e:bd:14:a0:63:5c:10:21:
1c:31:a7:d5:22:56:13:24:1e:7c:c2:30:6d:17:aa:
a2:ff:48:fc:a3:a7:be:da:18:1b:56:b7:cf:e5:48:
1c:e3:d2:5b:a9:11:15:c6:ac:39:4d:bc:10:3d:c3:
20:bf:16:e5:c5:2c:ae:77:82:77:52:bf:a4:21:ff:
3b:14:ca:60:56:95:33:52:1c:32:05:3f:51:f8:53:
ea:d6:88:b8:fb:8d:fe:9f:bf:d4:70:cb:a3:f4:07:
76:f5:12:3c:f8:2b:2b:13:e4:79:c9:e5:e5:69:65:
30:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C4:85:56:00:1D:62:43:AC:C7:98:8D:85:1B:3C:83:48:DB:69:12
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/iMSFVgAdYkOsx5iNhRs8g0jbaRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.202.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e8:ff:b8:9d:86:6c:d3:86:c3:e2:3e:1b:01:9d:be:41:a2:
f6:de:72:08:51:1c:82:53:e3:ba:19:5e:9a:c9:79:67:cc:ba:
c5:c9:98:aa:5b:8a:65:0b:89:d8:81:67:ab:84:e2:f8:b3:c7:
13:8f:c5:7a:bb:75:26:c3:82:4e:38:ea:23:1d:9c:3f:0f:f2:
e8:67:c0:94:5d:70:38:7b:c5:d5:b2:ca:77:15:52:86:17:eb:
bb:55:d6:62:15:ca:99:53:a9:ca:0d:cc:b4:45:52:1e:0a:5d:
32:71:0c:c6:76:c7:d9:74:c5:5e:80:e4:aa:92:27:02:91:d6:
8d:e7:dc:79:c5:4c:fa:8f:c9:5f:d7:1d:f3:89:1f:80:0c:03:
04:9c:cf:c1:0a:6e:2a:e4:95:a0:c3:4d:a3:7e:c1:b5:51:e9:
24:87:87:b2:17:3f:1b:01:e3:00:40:15:e6:80:a7:7c:80:78:
c8:33:2d:ec:08:f3:53:5e:92:07:05:75:31:bf:9a:8f:6c:dc:
44:39:4d:82:dd:07:f9:ec:8b:ee:3b:6c:f5:17:37:a5:56:58:
58:ab:8b:7e:13:10:c0:92:d9:59:5e:f5:6f:d7:6c:cf:90:88:
89:89:51:bb:5f:4d:e7:b3:2e:cd:9e:dd:ec:b8:08:eb:65:47:
9e:8c:44:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:31 2024 by rpki-client on console-ams.rpki-client.org