Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/MHRBcbpucJWUmTB14-HoxtNNIbM.roa
File: MHRBcbpucJWUmTB14-HoxtNNIbM.roa (raw, json)
Hash identifier: 17jhJLrMpS+FBHBv3urS0hBlixKrjOQkP+1DKRSfOtU=
Subject key identifier: 30:74:41:71:BA:6E:70:95:94:99:30:75:E3:E1:E8:C6:D3:4D:21:B3
Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial: 01856F2FDE99744B6A873E75B9DE30672BEA
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/MHRBcbpucJWUmTB14-HoxtNNIbM.roa
Signing time: Sun 01 Jan 2023 21:14:46 +0000
ROA not before: Sun 01 Jan 2023 21:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47492
IP address blocks: 81.161.227.0/24 maxlen: 24
185.94.232.0/22 maxlen: 24
185.94.232.0/23 maxlen: 24
185.94.232.0/24 maxlen: 24
185.94.233.0/24 maxlen: 24
185.94.234.0/23 maxlen: 24
185.94.234.0/24 maxlen: 24
81.161.224.0/24 maxlen: 24
185.94.235.0/24 maxlen: 24
81.161.225.0/24 maxlen: 24
2a03:e841::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:de:99:74:4b:6a:87:3e:75:b9:de:30:67:2b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10c73530bb684fd569dfc432704675704183429
Validity
Not Before: Jan 1 21:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30744171ba6e709594993075e3e1e8c6d34d21b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:85:f9:21:13:5d:4d:6d:ba:06:15:be:ea:6a:
7c:69:35:21:d4:eb:fd:6c:0e:8d:8a:7b:b3:da:0f:
40:67:b1:ec:f6:26:dd:f9:5a:47:e6:86:5d:ff:3e:
bc:26:86:c1:36:3a:58:1c:d2:f0:6e:9e:0f:af:e5:
da:03:a5:fe:d3:ed:5f:3f:a3:f6:d6:be:d1:cc:c8:
f4:89:5b:4a:1d:01:72:b9:7a:d8:c1:3a:de:8f:38:
57:c2:6f:e0:8e:dd:76:e0:22:20:b1:f6:39:cd:7f:
43:aa:e4:b8:62:ed:40:0c:7e:b2:e2:93:0d:16:76:
24:61:78:9c:a0:ff:a6:16:a1:9d:e4:90:bd:76:1f:
9f:47:a3:15:0e:63:4e:6e:59:5c:83:7e:14:03:2d:
f9:0b:d9:a1:60:f8:71:c3:19:1b:ed:2a:d2:c7:70:
eb:91:79:74:c6:21:de:d9:e1:c0:e0:9b:63:74:c9:
db:09:87:bf:c5:30:6c:2a:23:23:e7:b6:5f:18:21:
b8:11:b3:76:eb:ce:a6:e9:dc:cc:50:6c:b6:ba:3f:
77:ee:b5:0b:fb:9f:95:75:5b:be:90:98:50:03:d3:
5c:20:0f:2a:5d:9a:e5:4f:12:91:cd:1e:8c:1b:cf:
93:b5:77:57:50:02:8d:ad:7b:96:44:72:38:fe:90:
7d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:74:41:71:BA:6E:70:95:94:99:30:75:E3:E1:E8:C6:D3:4D:21:B3
X509v3 Authority Key Identifier:
keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/MHRBcbpucJWUmTB14-HoxtNNIbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.224.0/23
81.161.227.0/24
185.94.232.0/22
IPv6:
2a03:e841::/32
Signature Algorithm: sha256WithRSAEncryption
3c:91:af:ae:90:81:77:6a:c1:d6:fd:ef:0b:2f:c8:d2:b7:7f:
1d:01:68:3b:41:60:9f:d9:c8:e2:0c:a4:98:ed:c6:c5:df:ff:
87:43:a2:a5:55:2c:15:be:4d:1d:e3:d1:96:0c:6f:e3:ea:e8:
68:b6:6d:ee:6a:c8:78:75:91:87:94:72:fd:a1:0d:26:9e:58:
dd:a3:77:8c:5d:d7:1d:16:58:38:c5:08:d8:a3:16:3b:d9:8a:
e3:58:85:d8:e4:26:58:81:cb:ec:68:bb:e3:12:19:b3:ab:d5:
bf:df:b8:66:7a:70:d7:cc:5a:1c:0b:5c:d9:d5:0e:03:aa:8d:
f2:87:f0:06:e4:0a:c5:23:4c:c2:a9:9f:e1:77:f5:04:c0:6e:
2f:aa:a8:fc:a3:cb:38:34:ff:71:c3:d7:e9:02:90:76:48:9a:
2a:e7:15:7f:53:ba:db:7e:1a:00:25:25:5f:b1:01:c9:50:92:
60:fa:a6:62:08:c8:ec:b6:37:94:b9:9e:7f:cb:33:63:df:05:
fa:4a:ad:b9:9e:5d:eb:37:35:71:22:77:43:01:b8:75:96:2f:
b2:9a:75:49:e2:89:20:03:09:57:0a:38:76:b9:e6:83:e7:b8:
d0:1e:29:c9:ec:ca:3a:21:fb:63:c8:d7:03:f7:51:f1:0c:57:
23:47:1b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:35 2024 by rpki-client on console-ams.rpki-client.org