Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/M71GBWLGemapLM3YaYd01utzbMs.roa
File: M71GBWLGemapLM3YaYd01utzbMs.roa (raw, json)
Hash identifier: BsDi3wiK43LHZgQebCzDVldUZpdOJ5W5o4wxqkZ+WUc=
Subject key identifier: 33:BD:46:05:62:C6:7A:66:A9:2C:CD:D8:69:87:74:D6:EB:73:6C:CB
Certificate issuer: /CN=ecc8402f2faab304879ff712cfcbf5ae52b6699c
Certificate serial: 01857030439F4D57A9F8BAB2F2F9D1DC8EEC
Authority key identifier: EC:C8:40:2F:2F:AA:B3:04:87:9F:F7:12:CF:CB:F5:AE:52:B6:69:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MhALy-qswSHn_cSz8v1rlK2aZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/M71GBWLGemapLM3YaYd01utzbMs.roa
Signing time: Mon 02 Jan 2023 01:54:49 +0000
ROA not before: Mon 02 Jan 2023 01:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42184
IP address blocks: 185.153.140.0/22 maxlen: 22
2a0f:8880::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 09 Feb 2023 15:51:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:43:9f:4d:57:a9:f8:ba:b2:f2:f9:d1:dc:8e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc8402f2faab304879ff712cfcbf5ae52b6699c
Validity
Not Before: Jan 2 01:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33bd460562c67a66a92ccdd8698774d6eb736ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:86:ff:ef:62:4f:c3:76:b1:39:0a:90:b4:
a2:4a:49:a1:bd:23:42:01:6c:36:9c:1a:aa:a6:5b:
7b:fb:a0:85:80:f1:02:6e:28:85:2d:b5:9f:88:99:
32:f3:b8:60:b8:e0:46:0d:e7:a8:59:f3:8d:fb:4d:
1d:d0:1b:64:6f:f5:71:ea:d3:6f:b1:7a:f2:90:2e:
d0:14:a2:ca:92:37:59:d0:34:ce:15:bb:5f:11:d6:
f2:39:cd:fe:f2:3d:42:98:fe:fe:55:46:76:63:8f:
7f:97:ed:06:97:76:e8:28:22:fc:79:8a:af:4e:31:
1a:e4:26:e7:ae:d0:5b:ff:58:09:31:9b:11:3b:c0:
45:dc:e3:7e:2a:27:31:26:21:9a:81:5d:d5:de:8c:
57:77:f6:15:b5:53:87:82:a8:42:fb:0a:de:5b:08:
b1:c5:41:92:c9:8c:e7:93:f9:60:a1:4e:2d:e5:cf:
24:9c:34:b7:09:ec:b4:4f:17:59:40:cc:03:36:11:
a1:34:04:e5:0c:d3:a8:51:35:a1:d9:75:90:7c:05:
42:2f:f0:ac:50:f7:dc:2f:a1:7a:c0:75:3f:5e:55:
5f:6a:32:ad:78:df:c1:df:cb:a3:17:83:39:26:92:
e9:96:35:20:3f:49:a4:60:cd:a4:a7:9c:52:18:bd:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BD:46:05:62:C6:7A:66:A9:2C:CD:D8:69:87:74:D6:EB:73:6C:CB
X509v3 Authority Key Identifier:
keyid:EC:C8:40:2F:2F:AA:B3:04:87:9F:F7:12:CF:CB:F5:AE:52:B6:69:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MhALy-qswSHn_cSz8v1rlK2aZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/M71GBWLGemapLM3YaYd01utzbMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/7MhALy-qswSHn_cSz8v1rlK2aZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.140.0/22
IPv6:
2a0f:8880::/29
Signature Algorithm: sha256WithRSAEncryption
93:7c:32:66:54:6f:aa:57:66:df:c8:4e:cf:bb:8b:63:a3:c5:
6b:09:70:ec:51:98:91:e4:bd:1b:67:15:f2:97:cb:ae:ea:34:
ae:c8:01:e0:16:d7:f6:c2:f0:7a:c8:e3:ff:31:d0:39:f2:48:
48:98:5f:28:44:64:cd:79:b5:e8:70:7c:26:d5:2f:ac:c2:06:
23:b2:eb:6b:d6:c2:d2:0c:03:f7:a6:63:01:ee:ce:db:34:98:
bb:2d:c7:1e:cb:99:2a:bc:11:57:a2:03:de:6a:d0:af:46:fa:
93:a7:bd:03:2c:74:47:27:6b:dd:16:9d:75:2f:68:9b:29:22:
17:c9:3c:28:83:81:e4:f5:7b:41:25:57:69:17:ba:4f:69:f4:
20:be:8b:96:d2:bf:4b:8f:98:80:e0:10:4b:89:8e:50:88:9a:
da:a7:03:23:83:a3:b0:17:61:c0:50:92:9f:eb:1b:5d:ce:a0:
53:79:4d:43:95:b6:dd:da:b3:0f:28:37:43:f1:55:df:3d:3e:
8b:ea:24:6c:a0:1f:28:29:41:f2:09:86:90:a2:7f:28:42:56:
8e:ed:97:10:aa:db:7e:50:1e:ca:91:0f:47:6e:90:58:09:d2:
d0:b4:eb:99:f3:d0:6c:de:9f:c5:f3:cb:35:a6:06:4c:76:49:
9b:1d:21:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:10 2024 by rpki-client on console-fra.rpki-client.org