Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/MQq-5ACqdNUAERfzDwjYbjCIpPI.roa
File: MQq-5ACqdNUAERfzDwjYbjCIpPI.roa (raw, json)
Hash identifier: 7RO4GSPSJIbreE1BpPQHg9vuuHt71WqQOUy+O2jI2NA=
Subject key identifier: 31:0A:BE:E4:00:AA:74:D5:00:11:17:F3:0F:08:D8:6E:30:88:A4:F2
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 0192D78789F76FE4894D369C6FCC14170FC7
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/MQq-5ACqdNUAERfzDwjYbjCIpPI.roa
Signing time: Tue 29 Oct 2024 09:07:16 +0000
ROA not before: Tue 29 Oct 2024 09:07:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205585
IP address blocks: 185.143.232.0/22 maxlen: 24
185.220.226.0/24 maxlen: 24
2a0c:a7c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Sun 10 Nov 2024 10:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:87:89:f7:6f:e4:89:4d:36:9c:6f:cc:14:17:0f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Oct 29 09:07:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=310abee400aa74d5001117f30f08d86e3088a4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4c:59:cd:b5:30:f1:c7:48:7e:15:71:c8:aa:
c1:84:a0:16:2b:87:fc:9f:35:22:3e:8d:fa:39:3a:
cf:51:70:41:16:92:69:1d:b6:33:db:3b:7c:84:35:
f5:02:98:c9:c6:58:78:f8:cb:69:7d:67:1d:d8:72:
bd:17:93:0e:b4:dd:fa:85:22:19:ba:62:0f:f3:99:
ce:17:5d:ab:4c:2e:6e:09:38:37:19:b7:7a:7f:d3:
52:3f:ff:75:88:e8:15:44:4e:84:19:cc:d7:01:b7:
ec:4d:01:b5:8b:54:18:ef:fa:90:9b:18:3a:0a:0e:
30:e0:7a:df:28:7f:12:bf:0e:57:5c:64:3a:e6:be:
10:a4:0a:41:87:3e:77:78:c5:a3:9d:99:6e:0e:22:
e1:b9:f6:a3:f9:a7:c3:18:47:3d:48:0d:4c:ba:fa:
d3:ea:37:5e:0d:8e:b6:28:34:92:12:cb:5d:5e:75:
8d:ba:02:4b:10:5b:9c:71:46:e4:51:d9:a6:ad:0d:
5c:79:a1:ab:67:ec:89:d8:5c:50:0e:f3:5d:78:10:
23:70:a5:23:68:8d:7a:e2:ff:a9:8b:48:2b:40:1c:
1f:68:e3:bc:dd:4d:2f:fd:b7:d1:4a:e9:17:08:45:
73:b9:c6:49:92:d8:ca:09:5d:66:20:a9:dc:0f:7f:
7b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0A:BE:E4:00:AA:74:D5:00:11:17:F3:0F:08:D8:6E:30:88:A4:F2
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/MQq-5ACqdNUAERfzDwjYbjCIpPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.232.0/22
185.220.226.0/24
IPv6:
2a0c:a7c0::/29
Signature Algorithm: sha256WithRSAEncryption
82:2f:c2:b0:d1:20:84:4a:0e:7b:ec:56:a4:b2:ab:30:c2:bc:
b3:79:5a:0b:cb:a3:ab:09:00:47:24:75:04:65:1e:af:2f:4a:
de:b5:99:9c:1d:e8:13:87:28:d1:40:98:aa:97:c1:da:ec:d2:
1e:2e:03:0a:f2:a1:f4:d5:d0:da:e9:8c:6e:4c:57:27:17:6b:
38:a1:0f:67:fa:f4:ed:d3:fc:29:9e:be:a4:c8:fe:7f:42:3e:
51:01:aa:39:7f:09:13:62:0c:4a:62:be:48:51:cf:4a:dc:1e:
e0:5c:45:c6:21:45:ec:a4:ea:84:5e:1e:05:be:56:98:44:24:
42:53:f6:42:71:46:de:08:14:41:9f:d2:17:7d:ae:fd:81:33:
a5:ea:df:b1:3e:28:f3:c2:14:05:0e:b8:11:91:47:3c:c9:18:
30:9f:cd:3e:48:32:9a:8b:5c:a6:9a:59:c8:6d:6e:ca:b0:6c:
19:1b:ae:5d:6d:37:00:cc:81:5d:07:4d:d8:2c:f0:07:07:af:
fc:26:8d:22:28:fe:69:c3:7d:c0:5f:89:c4:f4:b3:96:04:1e:
df:f2:07:85:03:6a:48:7b:4b:33:40:81:3a:23:26:4c:3b:bc:
f2:b7:52:5a:26:dc:d3:21:d8:89:0e:d0:fc:ac:65:39:dc:d0:
70:1f:96:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:20:43 2025 by rpki-client