Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/_Mk-9hJo_8R9tb08e-j4e2qJ_0M.roa
File: _Mk-9hJo_8R9tb08e-j4e2qJ_0M.roa (raw, json)
Hash identifier: Brr4MMlfn424Dzt1O1xfMHIAiXlYG+h2VqTvOmTBv6c=
Subject key identifier: FC:C9:3E:F6:12:68:FF:C4:7D:B5:BD:3C:7B:E8:F8:7B:6A:89:FF:43
Certificate issuer: /CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Certificate serial: 0185704BD0ECDFF604B57B0FE1A2E2EEEFF4
Authority key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/_Mk-9hJo_8R9tb08e-j4e2qJ_0M.roa
Signing time: Mon 02 Jan 2023 02:24:54 +0000
ROA not before: Mon 02 Jan 2023 02:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199469
IP address blocks: 185.15.112.0/22 maxlen: 22
185.15.112.0/24 maxlen: 24
185.15.115.0/24 maxlen: 24
185.15.114.0/24 maxlen: 24
185.15.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:d0:ec:df:f6:04:b5:7b:0f:e1:a2:e2:ee:ef:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Validity
Not Before: Jan 2 02:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcc93ef61268ffc47db5bd3c7be8f87b6a89ff43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:18:7a:82:1d:e2:b9:ec:65:e8:2b:38:cf:93:
89:e0:76:a2:cb:2a:78:15:d0:c2:79:7c:7d:49:7e:
ab:86:de:fe:74:1e:c8:01:78:3a:a8:06:7d:f6:db:
a1:17:0e:c4:90:1a:c9:72:54:2f:f2:5e:b3:b9:2b:
8d:c0:aa:cb:c2:80:ca:d5:1f:77:61:c3:1f:08:68:
0d:1e:ad:b6:f4:8a:b4:fb:2c:da:6d:79:aa:4f:40:
4b:eb:29:42:50:9c:d0:78:c9:91:1a:d7:99:41:46:
22:11:9b:18:97:a8:85:b5:a4:8c:00:af:9b:32:da:
fd:7b:5e:c1:7f:8f:1d:d0:75:43:2a:c6:88:c3:89:
17:f2:1c:4d:9d:71:25:d7:50:6a:6f:9e:d5:fe:e0:
f0:21:29:47:93:f5:3b:24:5e:a0:f2:c2:13:38:0f:
b4:36:bc:cc:98:2e:e3:55:72:9c:7e:d8:1a:b3:7c:
3d:cc:e6:b6:3b:a0:b8:88:8a:77:25:a1:e5:ad:94:
a6:00:c5:28:8c:91:38:c8:a8:e0:30:f2:09:14:8c:
97:a9:91:27:88:f8:a6:5f:cb:eb:d1:b2:a9:fc:04:
a6:53:14:74:1b:d1:0c:ff:65:48:86:9f:c4:d9:65:
fc:26:2b:2c:a7:ab:68:bd:dd:72:35:0f:03:93:c9:
57:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C9:3E:F6:12:68:FF:C4:7D:B5:BD:3C:7B:E8:F8:7B:6A:89:FF:43
X509v3 Authority Key Identifier:
keyid:E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/_Mk-9hJo_8R9tb08e-j4e2qJ_0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.112.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:79:2c:bf:4b:50:ea:e1:d2:42:52:32:66:bd:a3:a3:be:23:
81:60:37:c3:70:36:c7:58:64:c5:03:0e:bd:c8:cc:bf:dd:51:
6a:1e:c1:23:0e:64:0a:dc:b9:be:b2:81:36:37:b8:b9:6b:54:
c4:6f:c0:72:76:1b:27:cd:d6:46:09:e9:7b:b5:0a:f0:bf:2e:
7a:2a:fc:06:01:87:14:d5:3b:fe:c6:c8:74:ab:1e:b7:7a:44:
22:05:34:07:5a:3f:13:86:ec:0f:22:e2:cd:6b:78:18:2c:e8:
ee:2e:4c:71:fc:5b:4a:cc:64:07:86:50:50:37:23:5f:f2:77:
75:d9:cb:6d:1d:e5:ab:31:3f:75:2d:83:70:b4:95:7d:35:8c:
4e:65:5f:19:97:bd:e1:47:90:26:45:db:c1:79:3a:d6:e1:e8:
d1:e4:a2:1a:6e:1c:f6:9d:ab:c1:c9:00:b1:17:d8:4f:55:35:
b3:25:f9:58:eb:8a:0b:8e:89:cb:c1:4a:47:a3:22:2b:1f:9d:
75:82:71:f4:b2:3a:e9:23:9e:00:e5:4a:f7:20:65:f7:5f:cb:
7e:8d:80:8e:20:a4:35:b7:4e:79:11:c8:f8:d2:e7:8e:b6:30:
57:9d:b1:ad:63:83:11:f9:0a:08:3d:b8:30:c6:56:fb:a2:87:
ae:63:0e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:15 2024 by rpki-client on console-fra.rpki-client.org