Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/MuH6j1gcKvaNYO9-_V3VZtvkxt8.roa
File: MuH6j1gcKvaNYO9-_V3VZtvkxt8.roa (raw, json)
Hash identifier: nMaDVfbrBQq/ckOHxCJvz6B9VO6XUMre4XAQS6JhjX4=
Subject key identifier: 32:E1:FA:8F:58:1C:2A:F6:8D:60:EF:7E:FD:5D:D5:66:DB:E4:C6:DF
Certificate issuer: /CN=987277fc47d848fa5634ce8031a174fc249fa673
Certificate serial: 019424B3CF8C43DACE4D445365D81B6A5FBE
Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/MuH6j1gcKvaNYO9-_V3VZtvkxt8.roa
Signing time: Thu 02 Jan 2025 01:49:11 +0000
ROA not before: Thu 02 Jan 2025 01:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 185.194.8.0/24 maxlen: 24
185.194.9.0/24 maxlen: 24
185.194.10.0/24 maxlen: 24
185.194.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 09:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:cf:8c:43:da:ce:4d:44:53:65:d8:1b:6a:5f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673
Validity
Not Before: Jan 2 01:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32e1fa8f581c2af68d60ef7efd5dd566dbe4c6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ed:53:00:3a:e5:ae:f7:ad:3b:62:2d:23:0b:
83:fa:da:32:06:c1:7a:62:dd:29:28:80:f2:3a:a1:
86:dc:d3:60:53:04:98:56:64:07:04:ec:66:c4:bb:
a3:f0:9b:4f:b9:df:fa:fe:cb:33:ed:72:b6:e2:3a:
59:93:8d:d1:d9:48:0a:21:1c:6b:e6:5f:f1:f7:a4:
55:d6:d8:4a:e9:0c:5c:4f:0e:2a:94:44:7a:5b:3d:
93:07:af:62:ec:28:50:5b:70:94:14:ce:a2:45:ad:
76:af:c2:3d:67:a7:18:06:96:63:d6:64:0c:8d:71:
ba:69:5d:ba:44:17:65:2d:0f:a0:ac:c4:d3:6a:ff:
67:df:5d:03:08:46:c0:63:7e:f6:e0:9f:d5:ae:65:
e8:56:6c:4a:0b:1c:19:6c:f9:a6:2f:76:0c:a8:45:
1b:f8:18:5b:6b:4d:3d:ac:09:c0:94:0b:c8:e6:ee:
e4:69:4b:d4:f5:04:3f:fe:22:02:91:e7:93:43:93:
71:a7:40:ba:25:d3:b4:f5:d3:35:86:bc:30:23:f9:
e1:28:0d:f9:15:e3:d2:ca:b4:5b:54:bb:82:04:be:
a6:93:29:d6:8d:17:58:2f:51:f7:14:92:1c:aa:55:
7a:8c:31:87:a8:43:1a:00:fd:b5:f9:24:50:9f:55:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E1:FA:8F:58:1C:2A:F6:8D:60:EF:7E:FD:5D:D5:66:DB:E4:C6:DF
X509v3 Authority Key Identifier:
keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/MuH6j1gcKvaNYO9-_V3VZtvkxt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.8.0/22
Signature Algorithm: sha256WithRSAEncryption
88:5b:2d:33:dc:98:3d:b9:7a:25:c0:84:d1:4a:6d:c7:f5:39:
f4:62:be:a7:e1:eb:b1:64:d6:d7:77:61:6a:8f:7b:de:b0:d4:
0a:54:e4:0d:50:76:e8:61:12:ab:73:54:2a:29:eb:15:3b:bc:
62:4b:f1:5c:dc:bc:24:fb:a4:91:ba:a5:45:a2:74:9a:bd:49:
8b:fb:7b:39:7a:9e:19:81:00:5d:9d:63:ec:90:dd:f4:c7:92:
2d:3a:f5:da:47:df:58:65:6e:92:64:1b:a0:2d:7c:ba:f5:a0:
56:bb:ac:e0:0b:41:1d:67:40:8c:7c:50:d1:bb:22:44:3c:b3:
46:9f:80:7f:4d:a5:12:bf:14:33:73:49:af:3c:1d:b4:82:f1:
da:cb:78:af:d2:ae:49:bc:34:45:9e:0d:f6:01:5a:42:d0:c6:
27:cc:39:7b:88:71:38:75:16:d5:54:00:ec:bf:59:80:68:18:
b4:c6:8c:b8:03:c6:c7:16:f9:ed:bd:66:01:ab:8a:8c:f9:1f:
61:8f:f7:19:78:9d:60:3c:96:bc:c8:7e:d2:68:8a:f5:67:e8:
d5:46:b1:4f:66:87:4d:67:09:75:6d:2d:82:e0:dd:93:b2:20:
5a:39:a0:14:5a:5f:a1:43:e9:b6:3a:0b:5c:52:bf:5e:5c:f6:
31:da:ae:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:38:34 2025 by rpki-client