Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mecqC5frOp2nVvcsUbL2N3-5tP0.roa
File: mecqC5frOp2nVvcsUbL2N3-5tP0.roa (raw, json)
Hash identifier: NWtBJMlzn2l/0Zfo4MBU1xAtEBWn23KQJYATaeCexmY=
Subject key identifier: 99:E7:2A:0B:97:EB:3A:9D:A7:56:F7:2C:51:B2:F6:37:7F:B9:B4:FD
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C5402FB6C484CBCEA7462EB5485D1D0
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mecqC5frOp2nVvcsUbL2N3-5tP0.roa
Signing time: Sun 01 Jan 2023 07:55:23 +0000
ROA not before: Sun 01 Jan 2023 07:55:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 131477
IP address blocks: 185.188.5.0/24 maxlen: 24
185.255.152.0/23 maxlen: 32
185.255.153.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:02:fb:6c:48:4c:bc:ea:74:62:eb:54:85:d1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99e72a0b97eb3a9da756f72c51b2f6377fb9b4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:42:93:cb:e4:d3:46:77:ef:7d:d0:5a:fa:4e:
55:0f:93:98:07:b6:a8:2e:fc:2e:5d:ab:95:c8:47:
60:f8:ad:4f:dc:ea:50:29:f5:c3:d0:79:eb:4b:ff:
77:53:20:c0:ed:51:89:4c:ac:3a:e8:46:be:41:85:
4e:ed:9a:0a:a4:61:2d:bf:74:5e:21:fc:1c:02:18:
ab:96:11:dc:76:c4:cd:06:0a:ee:e3:69:a0:dd:b3:
87:bb:c2:c3:bc:4f:98:25:bc:dd:23:96:af:80:f4:
ed:fc:63:9b:45:4c:85:88:07:fc:6c:d0:13:fc:8e:
fa:32:ea:ee:98:1b:00:6b:53:69:87:a6:e4:e5:b6:
d7:0e:ea:8a:e2:e8:eb:bb:ca:47:1d:ec:dd:76:ca:
e6:97:1b:c2:b0:a4:24:1c:9e:fd:c4:ef:b6:39:53:
7a:b9:2d:8a:80:36:c0:97:d5:b3:63:cc:32:78:a4:
87:20:1a:34:0f:ee:97:57:b2:b1:0c:1f:7c:e7:a7:
f2:bd:84:d2:de:0b:3c:07:20:0d:90:87:78:f9:ad:
fb:96:34:62:85:70:aa:60:f5:e7:e7:81:22:f3:a8:
0f:a6:28:6a:46:6b:6d:bf:0a:0f:ed:a4:41:d6:14:
f6:c6:01:ec:5d:9e:16:9d:ed:db:94:be:58:10:3c:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E7:2A:0B:97:EB:3A:9D:A7:56:F7:2C:51:B2:F6:37:7F:B9:B4:FD
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mecqC5frOp2nVvcsUbL2N3-5tP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.5.0/24
185.255.152.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:a2:17:2f:d0:c4:80:28:db:f1:c8:dc:01:b3:3f:18:c7:31:
1c:05:69:5f:84:92:33:da:83:07:b0:e8:40:cc:ce:1c:89:5b:
df:0f:a8:27:a3:e6:65:d4:1d:d1:01:fd:10:bd:79:e6:30:77:
76:39:0b:d9:8c:0b:63:be:70:a9:51:a8:85:c1:fd:ca:2b:69:
1a:7a:f5:23:56:75:bb:c6:67:13:6d:de:ad:06:0a:c7:db:05:
ab:69:bb:47:94:4c:ee:c4:44:76:fe:a4:11:2a:d9:0b:bc:c3:
95:3d:6d:0b:40:a0:77:13:73:9f:14:3d:e4:6f:75:ef:b7:d8:
5a:50:58:dd:98:42:15:9f:5c:46:a0:39:bc:bb:b3:49:af:01:
4e:2d:47:f2:ef:9d:81:20:47:88:e3:c8:91:9d:0d:ae:59:87:
53:61:e5:80:fc:1d:81:eb:16:ba:07:41:55:55:5d:a4:db:11:
69:61:16:e2:32:76:10:5e:b4:71:f7:8a:fa:6f:b2:d8:2b:df:
1e:9c:4c:8e:ca:cf:27:3a:0e:70:42:b7:c3:89:17:be:50:1a:
2e:0b:ad:5c:f4:01:e0:6f:39:b6:a0:a3:13:42:d1:83:d6:2c:
44:62:3b:40:a0:35:d4:85:a1:f4:38:ac:18:ea:14:d0:54:5c:
d7:e4:cf:b1
-----BEGIN CERTIFICATE-----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Generated at Sat Nov 25 18:17:51 2023 by rpki-client on console-ams.rpki-client.org