Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/m2n_pR8ve_bFVAtWjx1tbi2hL6I.roa
File: m2n_pR8ve_bFVAtWjx1tbi2hL6I.roa (raw, json)
Hash identifier: x//0ktOjsc2+hgzNNzn+RrHmJfuiG98EU5t4zHry5CA=
Subject key identifier: 9B:69:FF:A5:1F:2F:7B:F6:C5:54:0B:56:8F:1D:6D:6E:2D:A1:2F:A2
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 018CC7940DE7D2AAD95B8E4F858A2858F506
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/m2n_pR8ve_bFVAtWjx1tbi2hL6I.roa
Signing time: Tue 02 Jan 2024 00:30:18 +0000
ROA not before: Tue 02 Jan 2024 00:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.133.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Apr 2024 16:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:0d:e7:d2:aa:d9:5b:8e:4f:85:8a:28:58:f5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Jan 2 00:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b69ffa51f2f7bf6c5540b568f1d6d6e2da12fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:27:33:50:44:bd:79:94:35:df:8d:86:49:f0:
fa:e7:d6:de:45:59:eb:3e:b4:bb:04:ad:b9:31:13:
5a:47:8a:ee:e3:c6:ae:42:38:3c:69:85:26:20:dc:
3c:68:5c:db:b6:81:a2:82:65:e1:db:a7:44:61:0f:
f3:51:98:e8:a8:80:0f:f7:51:2d:ea:20:e3:f4:fe:
b6:19:41:1b:d3:b3:f4:54:c4:cf:49:ce:23:90:12:
a4:f5:30:13:38:bf:47:49:03:66:9c:e1:27:f4:63:
37:99:d2:04:b6:7e:cd:84:e4:32:a0:cc:ee:45:0c:
6b:db:2e:16:79:82:26:b7:8f:ac:d3:fa:9a:d0:23:
32:95:d5:92:0e:3c:02:82:48:f6:e9:e7:a0:e1:e4:
46:6c:6e:90:6b:d6:c1:ad:91:ab:72:1a:1d:b6:78:
88:22:5d:80:c2:91:4d:0a:03:bd:d2:d7:87:3f:32:
be:90:f8:56:26:4e:7b:49:1c:45:75:85:42:ea:3f:
cb:21:38:bd:9e:38:f9:98:6d:f1:fc:12:5d:2a:20:
f8:92:30:f6:aa:d3:a2:73:25:6f:a9:c5:86:83:78:
71:e6:75:1f:4a:d8:6a:cc:56:55:f2:d1:03:f0:ac:
48:f5:cc:15:34:91:e8:4b:7f:7b:56:a4:93:c2:ab:
66:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:69:FF:A5:1F:2F:7B:F6:C5:54:0B:56:8F:1D:6D:6E:2D:A1:2F:A2
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/m2n_pR8ve_bFVAtWjx1tbi2hL6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.70.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:2e:9a:03:a6:96:2d:30:c3:28:20:bf:6b:00:c4:6a:11:e3:
3e:fe:c4:b5:5a:b8:e5:dc:4c:ea:93:45:75:42:10:5d:51:15:
42:8d:e8:cd:62:63:d3:99:a5:45:fa:1d:5c:dd:99:f5:0f:91:
d5:46:e6:10:7a:ca:f1:ed:c6:28:50:d6:4e:b3:54:46:e8:9c:
3f:0b:06:28:7e:19:0d:74:28:4e:76:23:2e:7f:db:fa:64:0e:
ba:41:df:f0:3d:24:03:ba:29:74:50:9e:d9:5e:d1:41:84:d3:
7a:b2:84:9f:2e:96:95:c3:a8:ce:81:f9:2a:5c:c6:13:9d:c7:
17:bf:d5:9c:8e:ce:5d:5a:08:1d:69:2d:d5:35:f7:fd:b4:89:
03:7c:fb:72:bb:77:89:ed:a3:1a:41:00:79:28:56:1e:2d:e3:
d4:12:81:ed:ba:08:62:b7:cb:ef:bf:ed:81:16:76:b4:c2:72:
c4:8e:c1:da:5b:ef:9b:ed:bd:4f:7d:49:2a:84:d0:ba:57:6b:
8f:d2:e7:c2:6d:c4:9e:c3:33:02:2c:08:c5:e3:dd:56:32:18:
e9:55:42:d7:e0:21:d3:7f:29:87:a8:70:2a:82:18:fe:ac:90:
20:a9:05:7a:b3:9b:72:50:3c:65:7f:d9:5e:8e:38:54:ec:92:
11:12:92:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:27 2024 by rpki-client on console-ams.rpki-client.org