Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/t_M8mvmryTUNsn3AIctJdeY4Y2U.roa
File: t_M8mvmryTUNsn3AIctJdeY4Y2U.roa (raw, json)
Hash identifier: 9f8mjpCllR8PedFtu3vRG5jYn8QUVlgz9nJ84uDOmQQ=
Subject key identifier: B7:F3:3C:9A:F9:AB:C9:35:0D:B2:7D:C0:21:CB:49:75:E6:38:63:65
Certificate issuer: /CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Certificate serial: 018571953F7057949264A71AEEDE2F5227AE
Authority key identifier: C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/t_M8mvmryTUNsn3AIctJdeY4Y2U.roa
Signing time: Mon 02 Jan 2023 08:24:44 +0000
ROA not before: Mon 02 Jan 2023 08:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202844
IP address blocks: 185.151.208.0/22 maxlen: 22
185.151.208.0/23 maxlen: 23
185.151.210.0/23 maxlen: 23
2a0e:e640::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:3f:70:57:94:92:64:a7:1a:ee:de:2f:52:27:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Validity
Not Before: Jan 2 08:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7f33c9af9abc9350db27dc021cb4975e6386365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:28:78:39:84:ca:18:6c:b0:f5:57:2c:11:80:
00:99:e0:44:4e:94:57:61:fa:61:cb:9f:e1:7f:c2:
97:a0:0e:7b:ae:61:16:52:eb:d0:2a:85:3d:6e:ba:
0c:36:c5:df:7c:2c:3c:b9:cc:33:dc:19:89:fa:4c:
9c:5b:e9:90:90:ad:b1:35:5f:9a:cd:04:81:2c:24:
41:32:1c:a1:2d:89:ad:9e:20:5a:76:4d:9a:01:4a:
db:28:2d:ed:a4:c7:e0:6a:0f:91:79:0f:a2:ab:9b:
d8:79:13:2d:15:26:26:99:f1:17:d1:44:20:05:47:
a4:de:6e:1d:45:52:e4:72:84:56:ec:a2:14:ec:45:
91:b2:5f:7a:1e:ef:2d:ce:a9:58:98:d2:7d:83:b1:
96:25:45:40:f9:0d:ff:20:90:17:50:8f:7f:41:1c:
40:1e:1f:66:fc:cd:b6:1e:12:ab:3a:df:9b:a0:9a:
9e:05:5b:80:d2:cd:e0:e5:c5:85:ce:8a:49:5b:da:
8c:27:e6:df:d8:f1:38:e1:06:07:40:51:8d:b9:92:
59:8a:3d:eb:27:78:cc:77:ec:43:e2:30:92:55:24:
8f:f3:f4:4a:ca:53:66:88:f0:a1:73:c9:49:3a:75:
76:4d:f1:f1:61:43:56:0f:5f:15:28:51:bd:62:68:
2e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F3:3C:9A:F9:AB:C9:35:0D:B2:7D:C0:21:CB:49:75:E6:38:63:65
X509v3 Authority Key Identifier:
keyid:C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/t_M8mvmryTUNsn3AIctJdeY4Y2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.208.0/22
IPv6:
2a0e:e640::/29
Signature Algorithm: sha256WithRSAEncryption
94:c5:80:57:82:14:90:23:9f:7c:a0:60:6b:27:46:71:4b:09:
fc:20:f7:3a:c8:18:c7:88:8f:34:a4:13:5f:2d:fd:63:79:a0:
09:32:2c:25:e7:b8:db:be:b6:20:50:5a:be:5f:3c:e5:f9:65:
ff:f5:70:20:4b:7f:53:57:91:ed:c3:61:57:73:7c:e4:4a:01:
e8:07:57:4b:c0:84:98:44:b6:87:f4:3b:ec:d6:74:3e:3b:03:
8c:a3:35:fd:9c:40:37:4d:00:ce:84:f4:03:f5:43:4b:ce:83:
17:89:91:27:ff:92:4b:3d:fa:48:4b:08:a4:73:db:64:c9:ba:
1e:00:56:21:11:92:44:c8:fe:30:26:4a:53:4b:e7:9b:3d:fb:
60:be:19:a3:08:4f:13:3b:79:38:25:88:0e:b0:3c:06:3c:22:
ba:c5:14:a8:ea:7f:82:9e:ed:db:ab:b9:58:84:f0:72:4e:20:
42:d3:5e:7b:4c:73:5b:62:f9:f1:7d:9f:77:c7:2e:e1:eb:9f:
2e:1e:63:92:ab:17:5c:9d:69:27:49:f7:8a:ac:a2:0f:2c:fc:
92:c3:a0:a9:ea:23:86:22:33:ae:30:b1:20:a3:8b:7d:4c:37:
84:a5:53:40:f1:fe:36:53:29:24:6a:e6:43:32:75:c5:d4:b9:
a9:6e:81:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:25 2024 by rpki-client on console-ams.rpki-client.org