Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Mhv67ukcjZbm16Tl1FyqQrfLITg.roa
File: Mhv67ukcjZbm16Tl1FyqQrfLITg.roa (raw, json)
Hash identifier: z8/4oFSF4S9To2k1L63bLs++E3CA5zZg9oO0SbePUnI=
Subject key identifier: 32:1B:FA:EE:E9:1C:8D:96:E6:D7:A4:E5:D4:5C:AA:42:B7:CB:21:38
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01938BF85DE54EAB545FC660AFAED9656C94
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Mhv67ukcjZbm16Tl1FyqQrfLITg.roa
Signing time: Tue 03 Dec 2024 10:02:10 +0000
ROA not before: Tue 03 Dec 2024 10:02:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152911
IP address blocks: 185.227.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:f8:5d:e5:4e:ab:54:5f:c6:60:af:ae:d9:65:6c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 3 10:02:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=321bfaeee91c8d96e6d7a4e5d45caa42b7cb2138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3a:d6:20:74:ad:5c:22:c5:15:9a:1a:bf:04:
17:43:13:23:39:cd:ff:27:98:64:50:6b:0d:bf:ad:
62:ab:a5:6f:80:37:4d:d1:d8:3a:19:0f:64:32:08:
78:3c:8c:8a:a6:82:5d:47:55:dc:36:67:ae:92:c7:
84:c4:47:d1:86:e2:64:3c:34:64:de:97:07:8e:8a:
d5:88:b3:93:4d:03:5f:da:f0:85:f9:a3:0e:7d:a5:
97:43:7d:90:68:87:58:e3:92:80:36:90:f3:53:46:
12:ba:43:0a:eb:55:36:5b:67:e9:ae:f9:f1:78:23:
59:4d:4d:a0:a5:bf:a5:b8:01:e0:c9:fa:f2:73:32:
74:ea:3f:7a:9d:83:6d:ad:7e:fb:ef:5b:11:0a:9f:
d0:88:7e:3c:17:65:ea:08:55:0e:52:36:94:c5:e6:
cf:c3:c3:92:04:31:10:11:94:3e:ba:94:8b:0e:e5:
d1:b3:f5:94:9e:83:1b:90:a5:72:33:33:72:da:e1:
8e:2f:e0:df:99:ca:84:6c:d7:2b:36:77:56:6e:62:
03:30:a0:ac:85:db:7c:18:9a:f9:4c:3a:3a:3c:ab:
28:21:57:1f:d6:4f:a3:51:92:74:be:b1:04:93:a4:
39:1b:b3:9a:d0:63:3a:bb:5a:d7:0e:ba:c8:77:2b:
36:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1B:FA:EE:E9:1C:8D:96:E6:D7:A4:E5:D4:5C:AA:42:B7:CB:21:38
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Mhv67ukcjZbm16Tl1FyqQrfLITg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.144.0/24
Signature Algorithm: sha256WithRSAEncryption
99:2f:8c:8b:df:07:01:e5:2b:f9:03:d2:11:60:36:df:4f:23:
04:88:22:a0:ae:27:82:d3:2b:12:e7:cd:ed:11:dc:f8:07:67:
0c:9e:74:7e:56:f6:67:27:84:b9:39:1d:61:a4:c3:7b:9a:82:
8f:56:f0:cb:4b:59:73:17:ff:11:a0:d7:9d:76:4f:bd:bb:c9:
11:c7:a2:95:81:b4:29:53:d6:27:d9:2f:92:4c:a9:d2:30:fb:
b8:d2:60:b7:2b:63:fd:21:20:49:b8:61:ea:72:14:7d:ff:94:
04:0a:4a:f9:bd:f4:d6:4c:ec:13:df:46:ce:47:c1:a6:a4:f8:
2c:4d:fa:82:5c:b7:e9:0e:ab:d5:91:d7:2f:bc:0e:a5:31:55:
26:18:5c:8b:c1:0a:a4:06:37:cb:e9:67:9b:64:10:ef:c2:d7:
d0:ca:b7:d6:f8:43:92:01:9a:0e:6a:ec:5b:4b:0e:97:91:bd:
54:9f:dd:1d:ed:ac:82:e2:db:98:a9:59:36:76:53:79:44:3b:
b6:43:a5:cc:e0:4e:c1:1a:8d:d7:7f:3c:71:ff:36:95:2d:6e:
16:98:60:81:2f:8f:74:32:46:e1:48:7b:65:d7:12:f3:d0:92:
29:34:bf:b3:46:00:c5:fa:f5:a8:e1:e2:ef:db:45:4d:6f:be:
54:b8:27:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:32:21 2025 by rpki-client