Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/ml12LN4O89-z0Ty-XxVyFhF95jg.roa
File: ml12LN4O89-z0Ty-XxVyFhF95jg.roa (raw, json)
Hash identifier: DzBGG0GHALk+l3QKr7Iu6CcHV5VWOxud8SpvalW3jbs=
Subject key identifier: 9A:5D:76:2C:DE:0E:F3:DF:B3:D1:3C:BE:5F:15:72:16:11:7D:E6:38
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 01856C7812171201300DE52A02296BD09D75
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/ml12LN4O89-z0Ty-XxVyFhF95jg.roa
Signing time: Sun 01 Jan 2023 08:34:46 +0000
ROA not before: Sun 01 Jan 2023 08:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 185.148.107.0/24 maxlen: 24
185.148.106.0/24 maxlen: 24
185.176.24.0/24 maxlen: 24
185.176.26.0/24 maxlen: 24
185.148.104.0/24 maxlen: 24
185.148.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:12:17:12:01:30:0d:e5:2a:02:29:6b:d0:9d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jan 1 08:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a5d762cde0ef3dfb3d13cbe5f157216117de638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7d:a6:b7:e4:93:fb:02:88:b1:50:e6:d4:20:
a9:5d:39:4c:c8:78:ad:14:6e:06:9d:51:c4:e5:d1:
7c:d4:29:90:b6:47:41:20:c4:1a:42:b3:20:ba:ee:
00:84:4b:cd:fa:90:14:50:09:8c:d5:4a:43:72:ea:
c0:f6:f7:6b:99:25:26:95:c1:eb:53:df:91:96:ee:
40:f1:d7:a4:f0:52:24:99:ef:fd:8b:88:31:aa:fc:
3d:6d:21:d9:a5:da:7a:11:82:21:07:c0:e0:ce:af:
c3:99:6c:1a:95:7d:64:96:e5:d9:97:52:88:8e:f9:
fa:d2:b2:4e:f9:2e:75:9c:17:0f:46:39:1b:dd:3d:
9c:7c:0d:f3:ca:ea:28:bb:63:eb:68:f7:61:c5:9b:
46:6c:5b:47:9d:a8:fa:3e:07:28:e3:5b:2d:8b:37:
ef:93:8e:e6:aa:5e:19:99:ab:45:c7:06:91:5d:89:
6b:54:d5:0c:a9:68:ff:95:0a:cb:5a:84:be:2a:a2:
5a:6a:54:04:16:89:cc:c1:f3:bb:47:fd:9a:47:e1:
95:2e:ac:7f:ea:7b:e5:22:96:72:72:84:18:64:ea:
c2:16:15:5a:36:bf:b3:48:c7:5f:4e:38:ad:d0:f8:
15:a0:85:d9:ac:b0:07:d2:08:cf:fa:3a:07:07:77:
90:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5D:76:2C:DE:0E:F3:DF:B3:D1:3C:BE:5F:15:72:16:11:7D:E6:38
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/ml12LN4O89-z0Ty-XxVyFhF95jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.104.0/22
185.176.24.0/24
185.176.26.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:67:81:ec:1d:72:d6:76:1f:b3:09:86:6d:7c:0d:de:c1:65:
e6:56:61:c4:9e:a1:28:41:df:91:26:1c:3b:05:7e:a2:df:e6:
8a:be:26:fe:51:ff:e3:6b:63:86:fa:9b:ad:b1:14:09:b6:82:
46:e5:82:5e:6d:6c:3d:54:00:bf:72:51:3e:1d:9b:e0:e1:80:
28:23:e5:7d:d3:d6:b6:e8:d2:68:1e:db:de:58:ea:a0:8b:2f:
f2:fc:8a:2d:4a:d0:a3:ea:7e:6d:1f:96:d8:6b:d8:ce:00:43:
59:b9:dd:cd:d3:4b:cf:ec:43:a8:0d:ca:95:1b:34:51:e4:1c:
ef:1b:48:b4:4b:3c:9a:81:2d:e4:d5:43:7f:4d:eb:a2:1e:f0:
3e:90:55:8c:df:0f:80:7a:7c:66:94:40:e8:55:33:1a:14:f5:
a1:7b:cc:44:45:97:02:f6:80:98:a5:08:94:23:79:ad:52:4f:
62:55:a0:af:78:0f:41:ad:d7:c7:27:b8:d5:75:25:be:48:80:
df:79:dd:d9:b1:de:20:ec:8a:ea:7c:ef:dd:04:fd:d1:d5:8a:
6b:60:3a:96:cf:67:4c:60:26:b4:d5:37:c8:9f:07:32:2f:a9:
dd:9a:2c:b1:b0:e2:9f:8f:66:60:8e:d0:b8:72:74:aa:16:34:
df:90:49:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:29 2024 by rpki-client on console-ams.rpki-client.org