Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/m3p_fMsbTJJ9rLnyOBSD9xO-mTU.roa
File: m3p_fMsbTJJ9rLnyOBSD9xO-mTU.roa (raw, json)
Hash identifier: XZm4ahAO3YOLKjtrb5ECz/bTPzumyqaRo3AQ87VjUzU=
Subject key identifier: 9B:7A:7F:7C:CB:1B:4C:92:7D:AC:B9:F2:38:14:83:F7:13:BE:99:35
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246D7EDEC5A118E0D598995D108CF4A
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/m3p_fMsbTJJ9rLnyOBSD9xO-mTU.roa
Signing time: Mon 02 Jan 2023 11:38:43 +0000
ROA not before: Mon 02 Jan 2023 11:38:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49147
IP address blocks: 85.187.0.0/24 maxlen: 24
85.187.5.0/24 maxlen: 24
85.187.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:d7:ed:ec:5a:11:8e:0d:59:89:95:d1:08:cf:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b7a7f7ccb1b4c927dacb9f2381483f713be9935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:00:1a:01:1f:46:8e:8e:f1:8f:92:6e:00:
e5:d1:12:1d:6e:3b:b1:00:c9:be:d5:5f:ac:90:d1:
aa:cc:d7:2b:e5:39:de:7d:03:ce:11:3c:da:dd:fa:
1a:01:20:b1:35:20:9e:ac:42:e4:0b:3c:d3:22:77:
65:e9:5b:40:09:4e:6d:de:a6:26:7d:a0:a7:fa:9a:
02:96:58:21:9f:51:c9:f8:49:a0:f7:f1:93:49:49:
26:fe:aa:8b:76:f1:2e:3a:b5:a0:4a:b2:62:ad:d8:
9c:3e:c9:b0:4d:d5:7a:99:6c:16:ef:d1:fd:b8:13:
ac:40:2b:69:fd:01:88:89:e5:80:3b:39:97:f2:25:
12:54:c3:41:65:15:86:bd:3d:3c:27:0e:06:d2:6b:
1e:2c:27:3b:9e:b9:e3:44:a5:eb:9e:81:0e:b3:da:
49:c3:57:58:08:e3:3a:d2:23:e4:54:9c:de:d1:de:
93:44:49:51:d7:e1:d7:41:7f:a6:f1:ac:f5:37:e6:
b8:0d:c8:58:20:a1:93:61:70:1d:45:95:e8:b9:58:
bd:27:a7:03:eb:f7:69:27:a4:50:9a:fa:66:72:d2:
46:2a:cd:94:ec:10:62:97:e2:9e:92:e4:49:be:bd:
70:3d:4d:98:9f:a0:7f:a0:b9:91:c5:a6:be:21:28:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7A:7F:7C:CB:1B:4C:92:7D:AC:B9:F2:38:14:83:F7:13:BE:99:35
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/m3p_fMsbTJJ9rLnyOBSD9xO-mTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.0.0/24
85.187.5.0/24
85.187.12.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:4e:4c:fd:76:81:c6:9a:1b:89:f7:07:33:bb:cc:35:5c:a3:
c5:c2:c4:99:8d:22:fa:d7:d1:bc:02:c1:ac:87:f3:cc:31:3b:
e1:c8:4f:d1:9b:6e:2d:2f:68:a1:80:a3:38:f9:75:26:a2:46:
7a:33:23:2f:1f:3f:60:2a:a6:4c:b0:16:a5:dd:40:55:6f:0c:
2a:82:c1:6c:0a:82:7c:34:66:05:96:91:03:55:37:d4:d9:a7:
2b:70:02:9c:4b:42:0b:8d:2c:4b:c3:ee:a0:22:bb:2c:25:4b:
3e:e4:b4:8d:e5:f8:9b:03:51:4e:a1:f8:30:0a:91:37:a0:05:
89:83:0d:14:89:12:30:bd:e2:8a:26:b4:b2:c7:9d:86:47:93:
22:85:c9:af:32:4a:6c:46:fa:f2:71:5e:fe:ab:73:2a:96:ac:
46:70:30:05:0c:a7:ce:a5:d0:da:0b:55:61:21:fe:dc:a2:ba:
a2:fe:00:06:c5:9b:7f:df:d4:fd:06:83:38:c0:6d:eb:24:7f:
d4:bb:74:eb:27:b2:08:4d:e0:ce:5c:49:ec:f0:0c:a9:16:6c:
1f:63:47:bf:4b:be:65:dc:db:24:db:d3:bb:a0:fa:ed:1f:bd:
33:31:2b:c7:a1:d7:95:c9:f1:a2:84:73:79:fd:96:a8:8e:00:
00:cb:df:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org