Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/4-mro9o4CYaYKaBaZ3dWm4UFJ1g.roa
File: 4-mro9o4CYaYKaBaZ3dWm4UFJ1g.roa (raw, json)
Hash identifier: TZeAoFH3K4ayRVgDPfPRU6/4VG7UDc5hr0ds5ByNkHQ=
Subject key identifier: E3:E9:AB:A3:DA:38:09:86:98:29:A0:5A:67:77:56:9B:85:05:27:58
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DFB547AF1422259A4EB58F88076A80
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/4-mro9o4CYaYKaBaZ3dWm4UFJ1g.roa
Signing time: Tue 02 Jan 2024 06:32:33 +0000
ROA not before: Tue 02 Jan 2024 06:32:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216246
IP address blocks: 185.174.136.0/24 maxlen: 24
185.229.66.0/24 maxlen: 24
185.112.83.0/24 maxlen: 24
194.67.201.0/24 maxlen: 24
45.142.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jan 2024 22:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:b5:47:af:14:22:25:9a:4e:b5:8f:88:07:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3e9aba3da3809869829a05a6777569b85052758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6b:a5:89:8b:08:41:46:e2:04:6b:04:40:fb:
bc:8c:b6:67:8a:76:f0:7a:f6:61:f1:a4:62:ed:12:
e6:1b:18:ef:9d:b8:55:b1:f9:16:d6:0d:89:44:ae:
75:42:3c:31:50:92:2b:d7:ad:36:51:8d:c0:7f:eb:
36:f3:9d:04:f2:53:c0:c9:5d:8e:01:68:18:b1:9c:
28:24:47:cd:81:ec:99:27:5f:c4:62:c9:2e:f8:0b:
d5:4a:4d:9b:28:ca:07:41:f3:da:a8:22:d5:bb:03:
95:77:1c:56:21:89:fe:af:df:1e:7a:9a:c0:a5:01:
f2:b4:c3:46:cc:f8:8a:69:91:91:8c:c6:e3:46:37:
3b:df:72:81:ae:3f:5f:c2:c2:ff:05:71:fc:e7:ad:
b0:0e:ac:b7:9f:0f:e8:ce:05:60:60:8f:99:2a:a7:
1f:ad:84:aa:5f:aa:ae:a8:60:7b:43:9a:e6:39:20:
c9:0a:14:72:b0:a4:b3:99:cf:7d:fa:46:bc:4f:ae:
8a:e2:dd:dc:10:02:33:3b:3a:f0:23:cd:9d:49:ab:
1b:2d:85:c0:7d:be:0a:b9:fb:db:8a:3c:3e:88:7f:
b1:8f:2a:07:26:ba:b8:2b:b4:d9:ed:14:67:0b:00:
fd:c4:e5:54:53:49:fc:74:53:44:d2:39:64:14:1c:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E9:AB:A3:DA:38:09:86:98:29:A0:5A:67:77:56:9B:85:05:27:58
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/4-mro9o4CYaYKaBaZ3dWm4UFJ1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.122.0/24
185.112.83.0/24
185.174.136.0/24
185.229.66.0/24
194.67.201.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:ad:8e:55:1e:18:27:70:24:d6:94:87:50:a3:00:22:b8:a0:
0d:8c:c8:b4:7e:42:bd:42:c7:e2:ce:a3:5d:63:ea:5f:66:87:
31:bb:71:98:d0:5e:22:01:1c:6a:86:b3:fe:7e:4a:b8:b3:d4:
72:32:da:be:d7:4f:de:d4:60:3a:66:dc:3c:1c:b3:98:7b:62:
01:84:7f:80:22:64:50:3b:35:39:58:fe:c7:98:10:c2:4d:32:
46:a4:b8:22:46:21:aa:78:dd:ef:aa:14:ac:9a:0d:1a:a7:4e:
60:38:8a:ab:c6:42:57:9a:10:e6:14:4c:96:a7:7a:51:10:56:
52:c2:60:5c:76:a7:3a:ac:db:81:1a:3e:7a:cd:fa:a2:90:23:
d1:65:9a:23:93:fb:52:81:c3:51:d7:64:df:d2:bf:a4:7d:79:
3e:21:b1:b9:f1:73:f8:48:2f:d8:ca:5d:96:df:44:5c:a2:ff:
ae:e4:2c:5a:d2:19:95:14:d1:8f:63:68:55:f5:1c:c8:40:d1:
7d:0f:bd:68:03:d2:8d:86:1d:9a:ff:df:55:f2:52:b6:5d:19:
a6:b0:b9:72:a7:eb:34:97:24:a2:b5:6e:3a:59:ea:bf:f3:48:
12:e1:f2:2a:23:98:ee:e7:82:2f:d6:63:a6:2c:9a:db:ab:57:
44:0a:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 03:57:53 2024 by rpki-client on console-ams.rpki-client.org