Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/Mt3CKqejCxR_TNf-4niJgUE-HaA.roa
File: Mt3CKqejCxR_TNf-4niJgUE-HaA.roa (raw, json)
Hash identifier: 8cuEDPhNaZ5qBFZ91FfBY0wGIuywgaQLGWvZ6W6dcE0=
Subject key identifier: 32:DD:C2:2A:A7:A3:0B:14:7F:4C:D7:FE:E2:78:89:81:41:3E:1D:A0
Certificate issuer: /CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Certificate serial: 019026BA7D8965E29BAE416E648590BCF209
Authority key identifier: 46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/Mt3CKqejCxR_TNf-4niJgUE-HaA.roa
Signing time: Mon 17 Jun 2024 15:04:34 +0000
ROA not before: Mon 17 Jun 2024 15:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215160
IP address blocks: 185.18.224.0/23 maxlen: 24
185.18.224.0/24 maxlen: 24
185.18.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 20:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:26:ba:7d:89:65:e2:9b:ae:41:6e:64:85:90:bc:f2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Validity
Not Before: Jun 17 15:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32ddc22aa7a30b147f4cd7fee2788981413e1da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:0a:3b:ae:e3:5c:ad:c7:9a:8a:85:30:43:
f2:8d:09:c9:5d:59:83:23:52:8b:56:5d:bf:db:71:
f2:dc:2a:a3:cd:83:6c:b5:c4:73:62:e1:37:e3:7b:
6f:51:67:f4:20:06:75:58:b3:d3:ee:40:b1:ec:74:
b1:b7:9a:17:39:9b:ec:46:7f:4e:28:18:38:1f:25:
31:dd:9a:09:1d:83:39:cd:e4:d9:1a:fe:67:5c:e9:
df:7f:2e:45:af:0d:15:cc:16:83:66:c7:f3:4c:97:
8a:e1:b0:ec:40:00:48:58:3a:b2:4b:1a:d4:d8:28:
5c:d2:ed:3f:64:fe:6a:23:89:86:f3:e4:69:1f:5c:
4c:c6:26:d4:f0:51:3d:c0:d6:d3:7c:05:bf:31:b1:
10:e7:b2:90:5b:84:72:68:70:17:98:46:ed:a5:ea:
77:c7:91:a0:ea:c1:21:95:db:bd:49:b2:af:3a:06:
68:d1:30:ad:36:b0:21:bc:d2:10:f5:1e:9e:76:07:
f7:c1:57:8f:67:44:4a:cc:b6:bd:36:e9:f5:7e:07:
66:3f:bb:d1:22:f4:0b:35:1a:0e:0d:71:03:a5:84:
5b:b9:8f:39:3c:eb:4a:6d:57:af:62:68:b6:46:73:
29:5c:e2:a9:c3:d0:6f:db:fc:2a:5a:7e:e6:4b:cc:
87:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DD:C2:2A:A7:A3:0B:14:7F:4C:D7:FE:E2:78:89:81:41:3E:1D:A0
X509v3 Authority Key Identifier:
keyid:46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/Mt3CKqejCxR_TNf-4niJgUE-HaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.224.0/23
Signature Algorithm: sha256WithRSAEncryption
00:d6:c4:d5:25:82:d5:e6:7d:b9:0f:8c:11:70:4a:c3:5f:8f:
15:cf:66:cd:57:15:66:17:b5:b0:18:e5:31:7a:85:63:5e:31:
d8:dd:7d:8c:75:d6:c1:01:f8:ed:ea:e7:d0:74:bc:49:68:dd:
84:42:67:59:d7:a6:3a:54:21:4b:8e:4e:4a:e8:07:5e:45:3e:
1e:4e:7a:d1:cc:90:a7:28:df:79:12:ac:81:d9:2b:eb:4f:de:
f5:64:c0:fb:29:e2:d7:88:2c:75:2f:fb:a9:98:5a:13:fd:25:
97:17:4c:9e:37:fc:b1:d5:18:9e:a4:14:c6:ae:3d:79:2d:c7:
bd:15:3e:0f:fd:9e:e7:e2:d2:dc:f0:be:80:dd:51:bf:f0:7d:
43:ec:30:1a:04:c4:cb:5a:bb:3d:f8:b4:57:24:61:6a:73:4c:
0a:e4:30:7b:37:1a:60:5b:45:c4:85:02:44:66:1a:81:c4:80:
15:f2:47:09:59:a7:7a:10:b0:c2:a7:d2:41:f0:f7:2b:99:46:
43:d7:83:af:51:f3:80:47:f5:3f:39:b4:5c:04:4c:48:41:fa:
ca:ee:1b:a9:9d:88:25:fb:c7:69:6d:39:36:a1:dd:ac:32:ad:
ad:80:92:05:53:98:e8:b0:d2:3c:49:fa:d8:c6:dd:76:7f:8e:
d6:54:a2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 21:22:00 2024 by rpki-client on console-fra.rpki-client.org