Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/MwOpJbXnhN47y-r1Kl_JoE8JMao.roa
File: MwOpJbXnhN47y-r1Kl_JoE8JMao.roa (raw, json)
Hash identifier: p7O2a0EAeE7xRCNKzAJ+E7aXXgMYVfXuDXWxw2ws9lw=
Subject key identifier: 33:03:A9:25:B5:E7:84:DE:3B:CB:EA:F5:2A:5F:C9:A0:4F:09:31:AA
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018E2D318AEBF5E878778C05BE8F6E0DA3C1
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/MwOpJbXnhN47y-r1Kl_JoE8JMao.roa
Signing time: Mon 11 Mar 2024 11:06:45 +0000
ROA not before: Mon 11 Mar 2024 11:06:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208949
IP address blocks: 185.246.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 15:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:31:8a:eb:f5:e8:78:77:8c:05:be:8f:6e:0d:a3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 11 11:06:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3303a925b5e784de3bcbeaf52a5fc9a04f0931aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:08:50:b7:24:e9:ba:ce:81:1d:bc:39:bd:41:
8b:f0:90:da:82:59:8a:5f:28:d9:fe:45:13:8f:60:
37:6a:9c:85:ae:db:a3:bb:89:e3:de:b5:a5:06:6e:
68:9e:7a:e5:4d:92:31:46:90:ff:0b:ab:73:58:0c:
01:8a:71:84:21:ce:be:13:66:7c:a1:70:8a:b5:b5:
87:d2:89:f5:d7:50:0e:9b:8e:26:81:a2:d9:8a:dc:
44:74:9a:fb:47:b6:c1:05:7a:15:2e:e0:b5:58:a1:
74:e8:68:ad:d1:62:6c:1b:31:cb:2a:91:bf:c5:28:
fc:b8:cf:73:65:f4:e6:fc:84:83:12:ba:91:ed:0d:
ca:48:ed:8c:8b:6e:91:de:15:f4:57:2a:bd:25:13:
8e:cb:74:65:3c:3a:e2:76:c1:ae:b7:64:da:e3:81:
45:eb:f8:85:e7:8b:e1:65:b5:c4:ec:f7:bb:27:3f:
43:bf:da:ce:6b:ae:33:5b:93:95:e0:da:37:59:79:
8b:d5:e6:36:61:df:65:9c:d0:20:83:22:95:5a:1f:
75:e6:24:f0:33:21:3b:c1:47:5c:e4:c4:61:ac:96:
fe:c7:a7:60:cb:f4:53:63:69:1b:23:54:5f:8d:31:
3b:86:9d:4c:c6:c1:26:dc:6d:57:6f:ff:b0:3a:16:
06:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:03:A9:25:B5:E7:84:DE:3B:CB:EA:F5:2A:5F:C9:A0:4F:09:31:AA
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/MwOpJbXnhN47y-r1Kl_JoE8JMao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.113.0/24
Signature Algorithm: sha256WithRSAEncryption
10:8b:a0:9e:20:29:1b:72:31:f5:8a:39:60:42:fc:5c:b4:fe:
f4:ac:0f:f1:20:db:39:01:0b:e1:d3:da:ed:bc:62:5b:57:99:
80:df:88:5c:98:71:fa:22:5d:21:cf:b9:de:5e:07:0d:db:69:
74:0a:16:df:78:57:d8:a0:45:76:24:2a:d4:b6:91:fe:e5:55:
c4:37:0c:8b:37:2b:e6:28:26:15:8c:34:10:84:e4:84:42:8f:
21:26:1c:9c:c4:31:23:1a:60:86:4b:02:df:3a:2e:e1:ab:ee:
61:e6:cf:27:85:15:f2:05:3f:f4:71:72:a8:a4:ac:d8:51:f2:
a1:b9:83:47:e5:4b:6e:35:41:a3:dd:75:e9:aa:86:1a:c8:ec:
b8:7e:f3:4e:3f:93:27:3f:8e:56:41:bb:1b:ab:36:86:05:b2:
d7:d5:dc:f1:54:37:d9:09:7b:8e:2c:7f:ab:6a:75:7b:e3:cf:
a5:cc:c0:5e:ed:94:24:af:a3:0b:5e:2d:7c:12:ef:31:89:18:
b1:53:7e:24:c0:c4:b4:d5:ea:1a:99:cd:a3:d7:15:75:12:db:
98:05:a8:d2:4d:0c:fb:90:00:3a:f9:28:dd:04:5a:74:bf:eb:
9a:d1:ef:c0:d0:51:a1:97:b5:2a:32:c1:0c:06:3d:42:d5:a7:
19:d1:ba:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org