Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/MDiyVEchwCPoPE7ziQpXCyAI_so.roa
File: MDiyVEchwCPoPE7ziQpXCyAI_so.roa (raw, json)
Hash identifier: Urz54tglgF/imxmU92DxKGnCLiXQuPXoxtqjUgO7I3c=
Subject key identifier: 30:38:B2:54:47:21:C0:23:E8:3C:4E:F3:89:0A:57:0B:20:08:FE:CA
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018DAF57C865881B9158F79514183309C943
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/MDiyVEchwCPoPE7ziQpXCyAI_so.roa
Signing time: Fri 16 Feb 2024 00:36:22 +0000
ROA not before: Fri 16 Feb 2024 00:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62282
IP address blocks: 185.198.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 12:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:af:57:c8:65:88:1b:91:58:f7:95:14:18:33:09:c9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Feb 16 00:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3038b2544721c023e83c4ef3890a570b2008feca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f2:f8:75:e9:de:16:84:b1:b2:17:9f:11:b0:
57:32:a6:68:58:89:e4:74:c5:b6:01:c2:42:db:c9:
ed:84:17:df:95:f4:b7:5c:ec:ba:14:7d:f2:a2:58:
66:91:f3:db:a0:7a:ac:27:eb:f4:35:9a:5f:04:24:
b3:23:16:15:de:40:8b:ac:c2:5e:6f:49:75:f1:50:
32:c5:04:b9:fc:cd:34:f7:3a:8a:e7:df:3b:45:71:
21:12:a1:ea:c3:25:62:7f:20:30:d2:00:39:47:2a:
e8:60:e9:f6:df:99:e5:4e:ac:fb:f0:65:79:30:b9:
96:36:35:c1:b2:00:c7:dc:f2:67:e6:18:45:2b:da:
d0:27:65:8c:34:b1:43:e4:24:18:f2:76:c0:07:50:
1f:c3:c6:aa:80:1b:ff:fc:12:f8:ad:75:3c:62:52:
32:8d:48:f3:44:2e:91:a1:73:a9:8a:07:53:98:05:
a1:af:1e:73:34:79:83:c0:7a:bd:8d:29:c7:ff:95:
b1:7f:a5:d1:2d:98:27:2b:e4:fc:52:37:62:52:76:
fe:bf:19:fb:cf:0d:6f:c6:29:0b:72:92:6b:6b:b9:
4f:a6:40:10:aa:62:5e:5e:46:ac:fb:1a:64:e0:f1:
1c:60:7c:70:55:ad:35:30:f1:8c:17:77:c9:1e:79:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:38:B2:54:47:21:C0:23:E8:3C:4E:F3:89:0A:57:0B:20:08:FE:CA
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/MDiyVEchwCPoPE7ziQpXCyAI_so.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.91.0/24
Signature Algorithm: sha256WithRSAEncryption
17:1e:4c:33:27:1c:94:cf:fe:94:ba:be:47:76:99:4f:e2:a8:
2c:0b:79:dd:ac:a0:28:91:d3:04:bd:96:47:4c:3e:54:db:d7:
e8:df:87:fc:30:80:bb:d9:d5:7f:f9:86:06:9b:79:e3:85:d0:
67:dc:5f:7a:6d:06:6c:7a:9d:f3:ed:76:a9:3e:93:c6:bf:d6:
b2:a0:80:c6:66:6f:d5:c0:b0:e1:da:a8:c6:2e:f5:ff:e0:e0:
aa:9f:8d:90:fc:e2:07:46:1e:97:ba:0c:94:1e:12:0d:a6:37:
31:ac:45:87:9e:85:73:35:ea:61:9e:b6:2f:86:46:74:59:06:
97:65:a6:d9:12:34:57:36:82:6e:b0:27:03:44:05:93:21:c3:
25:cc:44:09:e9:ad:9a:bc:6b:c9:dd:f5:9d:bc:3a:54:c4:d4:
ac:de:3c:29:6a:17:67:32:bf:e1:25:c8:35:8d:56:73:88:3b:
8d:72:ab:fb:9d:e5:92:d7:c7:a3:c4:62:46:73:83:bd:0e:02:
0f:42:30:65:09:50:7f:95:4b:b7:e1:cf:49:c8:31:ff:5f:51:
4b:28:e2:54:26:4a:06:11:de:47:58:fc:c2:06:d7:4c:57:de:
e2:72:13:19:02:21:d9:10:bc:9e:fa:99:c3:25:e5:18:9a:51:
b7:da:c1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 18:05:51 2024 by rpki-client on console-fra.rpki-client.org