Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/mTq847FsxXEfiSmPsbPIJzcBAL0.roa
File: mTq847FsxXEfiSmPsbPIJzcBAL0.roa (raw, json)
Hash identifier: Jw0SOwbz+k/1ei+sKocK2Q7sapX/ox8wSlPIwYdXPFY=
Subject key identifier: 99:3A:BC:E3:B1:6C:C5:71:1F:89:29:8F:B1:B3:C8:27:37:01:00:BD
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018CC3B67B21D037FB46ECE9A40FED278951
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/mTq847FsxXEfiSmPsbPIJzcBAL0.roa
Signing time: Mon 01 Jan 2024 06:29:25 +0000
ROA not before: Mon 01 Jan 2024 06:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197071
IP address blocks: 185.236.8.0/24 maxlen: 24
45.86.156.0/24 maxlen: 24
45.86.156.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 May 2024 11:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:7b:21:d0:37:fb:46:ec:e9:a4:0f:ed:27:89:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 1 06:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=993abce3b16cc5711f89298fb1b3c827370100bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:14:7b:53:b6:8b:79:d7:0e:39:cc:11:0a:5d:
4c:d9:34:72:d8:af:cb:9b:24:c0:20:1f:5b:13:82:
c4:3d:79:7a:07:e4:ca:36:a9:56:29:ae:4e:ae:6d:
06:aa:86:10:e7:ed:70:8c:d9:5e:14:64:60:2b:f3:
b1:71:14:5b:8d:0e:c1:3b:d2:80:d1:e5:9a:90:a9:
80:78:05:2e:a2:b3:be:eb:75:7f:9e:9d:16:6e:fb:
66:48:d6:5b:08:a7:c0:59:c0:64:5a:c0:0c:5f:00:
6a:65:d8:60:ee:94:b5:c8:a8:29:56:5c:4b:21:71:
6c:ce:4b:f5:d6:dd:09:4d:10:4b:de:0f:ed:40:9a:
1e:f1:ce:c4:4e:6b:9c:c2:0e:d6:f0:ee:54:17:55:
07:cd:b2:d4:e7:a1:50:24:da:2e:20:35:e4:75:a0:
f9:55:06:59:86:7a:24:fa:df:27:87:c7:d8:c7:a8:
1c:71:43:64:e6:46:59:a5:20:21:f4:df:ea:d6:f2:
92:d5:31:b2:14:53:e3:9c:8d:d9:ce:b2:d7:dc:8e:
f2:a5:cb:5b:5d:32:d4:18:d0:78:03:c5:a9:d7:54:
c4:00:8c:43:47:a2:fa:01:97:a3:79:d8:a2:bc:ab:
1a:26:42:a9:82:38:4f:ad:2e:2a:68:d2:a0:65:08:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3A:BC:E3:B1:6C:C5:71:1F:89:29:8F:B1:B3:C8:27:37:01:00:BD
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/mTq847FsxXEfiSmPsbPIJzcBAL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.156.0/23
185.236.8.0/24
Signature Algorithm: sha256WithRSAEncryption
32:33:dc:ca:9a:76:84:3f:c7:e8:72:c7:84:3b:50:43:8d:eb:
b0:ba:c5:29:18:bd:03:25:a1:44:34:48:8b:58:2a:76:5c:1b:
5b:4a:14:40:71:f2:4a:34:e3:f9:d6:b3:83:54:4e:38:80:c2:
85:4b:60:9d:29:c9:17:ae:8e:19:96:f3:ec:ea:7c:6e:cc:49:
b6:05:c7:53:52:23:05:a3:c2:6c:46:0a:ba:ee:2b:8b:56:17:
e7:8b:61:de:f9:36:1e:2d:17:92:50:88:9c:d9:89:a1:87:c8:
a6:36:0f:4e:c3:87:64:f3:39:04:c0:39:de:3d:ad:4e:de:d3:
5c:ab:58:db:a9:2b:64:a2:66:b5:17:3d:bd:b5:b2:c5:42:35:
c0:63:69:b1:cd:64:2c:60:3c:25:41:3f:f8:54:7e:92:30:c8:
e0:f5:18:f7:08:9b:d7:04:b3:38:b5:42:ce:0b:ef:d4:da:5c:
ca:07:10:f3:40:aa:a8:7a:bb:4f:4f:87:51:d3:31:52:63:1a:
de:67:29:f6:ac:52:20:9c:45:e6:ef:f8:7a:22:66:2a:1d:b8:
0d:3d:26:93:5e:ed:a0:e4:76:ac:da:b2:1a:b7:7b:90:fe:8b:
40:1c:aa:6e:5f:0e:72:f1:60:2f:a9:1e:ac:95:84:cd:29:ff:
3d:aa:f7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:56:35 2024 by rpki-client on console-ams.rpki-client.org