Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/3MAojOwMlGBphbs6dHvQ5mNLBaY.roa
File: 3MAojOwMlGBphbs6dHvQ5mNLBaY.roa (raw, json)
Hash identifier: TSDSkIVBsceH3Udh6IC83yKay2Cdqv4TUhb7LbK7wYI=
Subject key identifier: DC:C0:28:8C:EC:0C:94:60:69:85:BB:3A:74:7B:D0:E6:63:4B:05:A6
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 01881415BEC4154965F73F111669E2D14D5A
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/3MAojOwMlGBphbs6dHvQ5mNLBaY.roa
Signing time: Sat 13 May 2023 07:49:09 +0000
ROA not before: Sat 13 May 2023 07:49:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62284
IP address blocks: 185.110.28.0/24 maxlen: 24
185.110.28.0/22 maxlen: 22
185.110.29.0/24 maxlen: 24
185.110.30.0/24 maxlen: 24
185.110.31.0/24 maxlen: 24
2a13:e180::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:14:15:be:c4:15:49:65:f7:3f:11:16:69:e2:d1:4d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: May 13 07:49:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcc0288cec0c94606985bb3a747bd0e6634b05a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6c:90:5f:09:d6:bf:78:f0:cb:87:f4:74:0e:
c3:a5:1a:43:16:f5:7f:59:59:51:5c:a2:72:23:60:
c3:dc:40:63:b5:da:7e:f9:af:d1:ba:ca:d2:98:32:
ef:4b:97:e6:4a:4b:1a:cd:76:f4:9d:d5:3f:13:67:
3b:5e:0a:ee:5d:d7:e4:21:d9:bf:4d:6d:59:4e:13:
7e:b4:7f:ec:6c:2d:72:ee:bf:c2:32:1e:3c:f0:e5:
27:15:11:6e:c9:a9:f7:d3:47:bf:b8:90:de:db:d2:
05:3d:54:d6:42:b3:bf:39:cb:06:4e:dd:74:70:f4:
2e:f5:bf:6a:fc:93:1c:18:8f:38:52:5f:be:11:7d:
ba:0f:bc:6a:93:fd:da:8b:37:fb:c3:3d:98:30:f2:
a5:8f:fe:6a:90:66:36:bc:14:03:e9:4c:16:47:42:
7e:80:e3:af:0c:c1:53:9b:1b:02:90:13:34:0a:85:
f2:f3:7c:c3:e2:b5:96:30:31:93:df:9d:dd:04:95:
40:e6:1c:be:c7:1e:d9:f9:f4:bf:f6:8c:1a:03:01:
2c:5f:e8:3f:7c:e3:23:96:ea:92:47:82:4b:5e:aa:
8f:83:21:8a:48:ae:0a:9e:ad:0a:cd:19:6c:a4:bd:
3d:d1:53:23:31:e3:d7:03:3e:f6:c1:ee:5d:0c:cf:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C0:28:8C:EC:0C:94:60:69:85:BB:3A:74:7B:D0:E6:63:4B:05:A6
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/3MAojOwMlGBphbs6dHvQ5mNLBaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.28.0/22
IPv6:
2a13:e180::/29
Signature Algorithm: sha256WithRSAEncryption
59:84:ad:9b:02:18:f1:2b:e2:9a:cb:31:14:cd:0b:1d:38:c7:
28:ec:34:50:fd:9b:3e:ae:42:4f:49:77:d3:7f:de:f4:33:1f:
c9:c7:3d:04:62:55:fd:57:2e:8b:65:2e:34:51:bf:af:dd:f8:
da:bd:0a:7d:57:81:03:b2:1c:81:a5:38:e9:f0:79:c3:77:e1:
56:f8:b8:b3:e9:5e:32:fc:bd:7b:01:d5:f1:90:6b:a8:f4:05:
8c:8c:69:32:bc:82:0c:bd:0c:76:71:b1:70:da:f6:6c:34:a4:
0a:24:4b:0c:5b:5b:1b:b8:0c:ea:e3:48:de:87:1b:13:c8:98:
59:43:28:eb:2f:51:59:41:38:c8:dd:ce:d5:a0:74:9c:29:c7:
7d:74:6f:c0:6b:f3:98:04:37:64:a6:73:f5:39:1f:4d:37:0a:
cd:97:0c:e1:10:f6:b5:2a:24:09:3b:72:d5:ec:7c:5c:e0:59:
cd:d1:d4:88:4c:d3:09:e6:8c:2e:5c:47:9b:32:85:8d:05:73:
69:a4:74:04:7c:1e:cd:c7:37:10:46:81:d2:13:0a:b5:5f:73:
21:97:97:96:06:6a:c9:ff:2e:32:db:a1:93:41:1e:fc:b0:27:
6d:16:48:fa:d7:02:9f:4f:26:c3:63:e3:ac:bb:b6:a8:90:c8:
94:ce:2f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:39 2024 by rpki-client on console-ams.rpki-client.org