Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/mfjdpDB6XNg7f3r9rOtOiAIRl_0.roa
File: mfjdpDB6XNg7f3r9rOtOiAIRl_0.roa (raw, json)
Hash identifier: FhpWTThvPCGKNZTwNe9dtpdhYKB8YT5Otg5b1PEHj6M=
Subject key identifier: 99:F8:DD:A4:30:7A:5C:D8:3B:7F:7A:FD:AC:EB:4E:88:02:11:97:FD
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 01856EC2345438332487CF87563C38F226D3
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/mfjdpDB6XNg7f3r9rOtOiAIRl_0.roa
Signing time: Sun 01 Jan 2023 19:14:59 +0000
ROA not before: Sun 01 Jan 2023 19:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48761
IP address blocks: 185.172.48.0/24 maxlen: 24
185.172.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Dec 2023 16:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:34:54:38:33:24:87:cf:87:56:3c:38:f2:26:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jan 1 19:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99f8dda4307a5cd83b7f7afdaceb4e88021197fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:de:c3:70:2f:eb:9d:d0:d7:8e:50:66:45:f9:
4e:05:ec:50:32:1a:09:90:b8:53:5a:7f:bc:5a:68:
7f:4c:b6:3c:5d:2a:9e:aa:0f:f3:b6:7c:64:7e:53:
13:00:2e:06:b1:ec:82:90:3b:f3:b4:70:c1:a5:f8:
2f:95:f1:61:7e:bc:99:05:32:e7:50:b6:07:05:9c:
92:90:61:f8:8b:f0:e2:21:03:13:13:48:14:72:6a:
b9:1c:bd:1c:1b:72:29:44:a0:a8:42:ba:70:8e:7d:
bf:37:5c:0d:d8:9a:7d:6b:58:ba:40:f3:34:5e:b7:
a3:34:8b:11:9f:9f:f9:c4:02:cb:1a:a4:f5:3a:d0:
72:51:81:07:f2:1c:f8:b7:79:e5:52:73:66:db:f9:
af:04:fd:b3:62:ef:dc:87:73:ba:fa:e7:24:93:f5:
97:96:81:be:6c:86:be:0d:f7:dc:94:2c:47:27:ad:
27:29:c3:4b:9c:9d:08:5f:a2:f3:07:ad:fc:2e:03:
dc:c6:00:01:f5:ef:86:bd:e4:e9:72:35:93:f4:58:
9f:88:bd:5c:48:28:00:39:86:d4:2c:e9:d6:71:65:
2f:b3:e7:7e:17:a8:03:4c:c4:7e:ae:42:bc:02:3e:
6c:13:22:90:3a:f7:34:11:84:47:9a:e0:6c:ac:31:
7e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F8:DD:A4:30:7A:5C:D8:3B:7F:7A:FD:AC:EB:4E:88:02:11:97:FD
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/mfjdpDB6XNg7f3r9rOtOiAIRl_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.48.0/23
Signature Algorithm: sha256WithRSAEncryption
71:5a:61:98:b4:a4:89:f0:0b:d2:ac:c1:95:84:11:54:72:f7:
54:28:c3:5e:dd:52:31:db:ae:47:7d:85:da:a9:f8:43:2a:c0:
28:fb:cf:8c:af:d9:84:26:92:e7:e0:da:27:81:0f:e0:44:3e:
9e:3f:22:b4:98:c9:a8:19:a3:4f:55:ab:7c:a8:ae:67:70:ce:
ba:87:6c:65:f3:e2:fb:ba:35:db:f0:6b:a8:9e:a2:25:5e:9c:
a5:6f:0d:f1:80:72:34:64:d4:df:44:a7:e6:1f:b8:e0:74:c9:
68:25:7d:1e:84:45:5a:e6:df:3a:44:25:8f:b8:2d:50:b7:ae:
4c:13:58:f8:ae:32:a7:3c:16:be:ec:a4:5a:eb:b1:fd:d2:c8:
3d:6f:6f:da:08:ff:4b:86:1a:b5:86:a5:33:52:78:28:16:7e:
02:70:23:83:da:a1:df:53:de:eb:8e:86:ca:b1:70:f8:99:bd:
a9:3d:d9:1a:9a:ba:d4:ab:3d:0a:fa:3b:a1:6f:51:cc:06:e9:
51:2a:74:6b:04:49:01:5b:0c:85:fc:ea:59:8b:86:02:70:ab:
ce:5b:ad:9e:c0:32:33:7c:9a:f8:c0:39:97:cb:6c:63:d1:09:
b9:b6:61:38:f4:2f:db:d2:cc:4b:d7:fc:b8:62:a9:d5:53:e0:
81:f4:ea:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:08 2024 by rpki-client on console-ams.rpki-client.org