Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/2MSIgpvpH_MWnAokLJRjQLccUX0.roa
File: 2MSIgpvpH_MWnAokLJRjQLccUX0.roa (raw, json)
Hash identifier: m4wmF0LfEDJd/zJ+DFHFG3oAdUfK1tiX2U5ud9VWoUA=
Subject key identifier: D8:C4:88:82:9B:E9:1F:F3:16:9C:0A:24:2C:94:63:40:B7:1C:51:7D
Certificate issuer: /CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Certificate serial: 018B2AEF6C30B87C18B5BAD2D0EAA01FBA0C
Authority key identifier: B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/2MSIgpvpH_MWnAokLJRjQLccUX0.roa
Signing time: Fri 13 Oct 2023 21:26:55 +0000
ROA not before: Fri 13 Oct 2023 21:26:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202913
IP address blocks: 185.130.144.0/24 maxlen: 24
185.130.145.0/24 maxlen: 24
185.130.144.0/22 maxlen: 22
185.130.144.0/23 maxlen: 23
185.130.146.0/24 maxlen: 24
185.130.146.0/23 maxlen: 23
185.130.147.0/24 maxlen: 24
80.78.131.0/24 maxlen: 24
80.78.130.0/23 maxlen: 23
80.78.128.0/22 maxlen: 22
80.78.128.0/23 maxlen: 23
80.78.128.0/24 maxlen: 24
80.78.129.0/24 maxlen: 24
80.78.130.0/24 maxlen: 24
45.148.196.0/24 maxlen: 24
45.148.197.0/24 maxlen: 24
45.148.198.0/24 maxlen: 24
45.148.196.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 10 Nov 2023 12:08:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2a:ef:6c:30:b8:7c:18:b5:ba:d2:d0:ea:a0:1f:ba:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Validity
Not Before: Oct 13 21:26:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8c488829be91ff3169c0a242c946340b71c517d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:11:9d:77:4f:e9:b4:c4:30:0b:23:19:27:b3:
43:89:b6:c4:8b:3a:32:e4:30:4e:74:e4:d2:ac:cf:
8c:1f:3e:c3:70:d3:42:0b:34:e7:d0:51:29:95:21:
47:73:a6:3f:4b:31:ff:98:57:4a:f8:24:34:35:52:
11:df:13:c0:96:fb:b2:6f:78:81:ec:1a:65:d5:9f:
4a:b4:87:5b:74:cf:f3:11:b4:d3:b2:28:af:29:f1:
50:6c:a6:2c:f3:98:38:3f:50:2d:5c:1f:6e:77:8e:
df:f5:9b:30:0a:b2:ca:51:5b:ea:db:18:83:18:7a:
6e:88:f0:c7:8a:ba:c5:5f:a3:c5:64:13:dc:e6:f3:
d5:5a:48:9a:21:0f:48:e6:5b:2f:95:68:e6:12:7e:
43:85:a5:c0:1d:91:d4:ae:6b:64:92:ff:54:b9:69:
1f:80:dd:95:ad:7d:7c:d0:26:41:7a:69:20:1f:64:
5a:b4:19:2b:a7:88:49:85:b9:17:43:ea:bf:40:98:
d9:28:45:51:01:28:24:65:f7:8c:95:3c:5a:e4:82:
e0:9a:3f:9d:0e:07:20:b8:9f:32:14:32:29:00:95:
66:0e:fc:cf:5d:5c:2b:ec:4b:c0:ca:d2:64:59:15:
c3:01:f0:de:d1:1a:b2:1f:79:62:7d:ca:30:b2:2c:
d5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C4:88:82:9B:E9:1F:F3:16:9C:0A:24:2C:94:63:40:B7:1C:51:7D
X509v3 Authority Key Identifier:
keyid:B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/2MSIgpvpH_MWnAokLJRjQLccUX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.196.0/22
80.78.128.0/22
185.130.144.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:ca:0c:18:0d:1d:b2:6d:4a:2f:1e:ba:3d:22:36:76:7f:65:
4a:bd:43:83:71:1b:2c:06:77:6c:ce:84:11:b7:48:5c:a3:5e:
af:24:c3:5b:51:40:6b:5d:47:5b:8d:6b:24:7a:4c:0b:7d:bd:
25:eb:9d:10:82:a9:76:c2:42:cb:0b:77:06:5c:43:fd:1e:6c:
b2:2f:d3:ab:f8:7f:2d:f6:7b:db:a0:4a:0b:1a:ae:f9:16:d3:
93:b1:e4:45:8b:45:4a:c4:73:57:c0:94:87:c0:57:2d:33:85:
0f:51:45:fc:8d:68:bd:97:5d:11:0b:4d:9f:ba:dc:a4:be:08:
86:d8:3d:89:a7:ea:dc:eb:9d:5c:be:aa:5b:16:07:27:2c:73:
4a:10:80:f7:fb:b5:8e:89:b5:b5:2e:4f:89:d7:da:f9:cc:52:
31:4d:0d:fe:67:a7:74:35:02:e1:c1:b9:cf:f4:fb:65:18:7e:
8c:ca:60:3a:24:79:c8:a5:e4:be:50:ad:91:21:84:c2:8a:d1:
ee:7d:0a:2a:c8:2d:6c:35:c9:d0:d4:be:c4:e2:9e:cc:eb:aa:
e1:c6:9f:6e:ca:75:c3:de:e9:b9:f1:6f:68:98:b8:cb:d6:24:
e3:e9:c6:4b:fe:85:dc:2b:3c:33:8e:71:7b:17:fe:fc:bc:31:
79:e6:06:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:49 2024 by rpki-client on console-fra.rpki-client.org