Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/MwD19t1GlovECVgb8-RcIpuQx_Q.roa
File: MwD19t1GlovECVgb8-RcIpuQx_Q.roa (raw, json)
Hash identifier: WW1FQcpR4dXiZQL52TqnztuDlVnm/XTGVkiHqW3lFWE=
Subject key identifier: 33:00:F5:F6:DD:46:96:8B:C4:09:58:1B:F3:E4:5C:22:9B:90:C7:F4
Certificate issuer: /CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Certificate serial: 018CC5005BE8EC1B9AB39F71F46824E903F4
Authority key identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/MwD19t1GlovECVgb8-RcIpuQx_Q.roa
Signing time: Mon 01 Jan 2024 12:29:44 +0000
ROA not before: Mon 01 Jan 2024 12:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.135.128.0/24 maxlen: 24
195.191.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:5b:e8:ec:1b:9a:b3:9f:71:f4:68:24:e9:03:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Validity
Not Before: Jan 1 12:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3300f5f6dd46968bc409581bf3e45c229b90c7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:17:b3:e2:1d:41:c5:3c:37:65:11:09:ce:6c:
15:c0:da:12:33:12:54:6d:43:4b:c9:64:78:b1:22:
d2:9b:ab:b7:cd:6a:db:64:2c:ba:2c:2f:ba:77:bf:
80:29:57:ba:05:b3:49:4e:8a:02:dd:0f:32:3e:89:
ce:05:c3:f4:03:43:bd:cd:a2:88:44:40:5a:f4:1b:
94:78:11:cc:c4:a9:4f:2c:4e:03:17:9f:20:75:a6:
c6:8b:f9:b6:55:68:c6:75:fd:9b:2c:1f:89:e3:0c:
30:f8:5d:d7:aa:45:4d:ab:c2:5f:be:9c:47:28:e5:
30:47:62:53:dc:7d:2d:24:05:c0:a8:fe:cf:4f:22:
0a:62:88:cb:23:da:ce:39:90:49:86:95:26:8f:4a:
63:54:f7:d5:65:cf:ad:61:f7:46:06:6a:df:ca:bf:
f9:28:3e:92:5d:4e:ca:e9:72:ee:85:a2:2a:1f:74:
8f:0e:80:db:a1:fa:79:fa:0a:aa:63:ea:33:a3:79:
ab:12:72:3e:b0:eb:f6:e2:1c:47:7d:3d:cc:61:46:
a7:dd:2a:46:c8:e9:2c:46:a1:4e:ce:e5:6a:a5:16:
25:7c:0e:e0:a1:e2:cc:c6:1f:72:e4:e7:48:0b:14:
6c:98:84:e2:5b:c0:55:2f:13:72:2d:31:3d:ee:64:
cf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:00:F5:F6:DD:46:96:8B:C4:09:58:1B:F3:E4:5C:22:9B:90:C7:F4
X509v3 Authority Key Identifier:
keyid:BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/MwD19t1GlovECVgb8-RcIpuQx_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.128.0/24
195.191.165.0/24
Signature Algorithm: sha256WithRSAEncryption
33:86:5b:56:40:e5:93:14:c1:69:e0:bd:1a:78:be:88:80:8b:
9d:dd:a0:12:1c:6c:98:30:42:8b:a0:bb:1e:83:b0:03:cf:4b:
fb:b6:a7:61:c0:52:87:6c:b2:05:fd:ba:d2:b0:b6:f5:59:3f:
85:e3:34:f4:a0:b6:e4:c2:ad:cc:d3:a5:20:d3:8c:0d:79:11:
be:76:95:ff:3b:75:24:96:e8:17:3d:40:bb:71:7b:22:ee:a6:
d9:02:a6:81:36:88:67:8e:ef:76:4f:1c:bd:6f:2d:ea:a5:3c:
80:05:28:18:1f:0a:e9:3b:c4:a9:dc:2e:58:59:c9:e0:b9:a8:
8a:5a:1c:f8:ca:bf:39:a2:7f:b5:0e:37:85:0a:8f:79:2d:ee:
a9:1b:49:46:2c:00:e9:44:a2:ca:14:e3:5e:6a:d9:90:2c:ec:
80:2d:2e:ce:16:81:8b:1e:31:a8:72:c4:a1:4a:5b:b1:ed:41:
5c:88:cf:aa:9d:61:2d:c5:ef:e0:1a:f8:5f:28:0d:c5:95:09:
c5:7f:a6:eb:48:ca:f9:1b:dd:5d:4c:fc:03:c3:cd:7e:99:70:
ac:6d:41:6c:83:83:ae:82:fe:63:27:a8:a2:61:2b:75:b8:05:
9e:b9:b9:09:53:53:20:98:9c:b2:87:81:74:dd:56:6d:5e:d0:
6f:0e:1f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:12 2025 by rpki-client