Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/MN9LaC0SxpRymQVaErihVaMpHfk.roa
File: MN9LaC0SxpRymQVaErihVaMpHfk.roa (raw, json)
Hash identifier: QD+DTUDxkSdyB3esognPR7l6YsLnsIkaxo95APVqUdc=
Subject key identifier: 30:DF:4B:68:2D:12:C6:94:72:99:05:5A:12:B8:A1:55:A3:29:1D:F9
Certificate issuer: /CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Certificate serial: 018B1E23AA2478E631A9B252831229AFCF93
Authority key identifier: CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/MN9LaC0SxpRymQVaErihVaMpHfk.roa
Signing time: Wed 11 Oct 2023 09:48:55 +0000
ROA not before: Wed 11 Oct 2023 09:48:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60372
IP address blocks: 185.156.214.0/24 maxlen: 24
185.156.215.0/24 maxlen: 24
185.4.252.0/24 maxlen: 24
185.4.253.0/24 maxlen: 24
185.4.254.0/24 maxlen: 24
185.4.255.0/24 maxlen: 24
185.156.212.24/29 maxlen: 29
185.156.212.8/29 maxlen: 29
185.156.212.0/24 maxlen: 24
185.156.213.0/24 maxlen: 24
2a02:7740::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:23:aa:24:78:e6:31:a9:b2:52:83:12:29:af:cf:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Validity
Not Before: Oct 11 09:48:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30df4b682d12c6947299055a12b8a155a3291df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:66:d6:69:c9:e3:3d:be:03:37:03:70:71:96:
e9:31:68:6a:19:22:74:7b:0d:f4:b2:6f:50:36:54:
5b:cb:a1:a7:a0:9b:68:96:0c:90:79:57:8a:6c:83:
ca:d4:46:ff:69:42:70:c3:51:0a:ae:4b:8b:4b:97:
35:a8:13:87:3d:55:62:cf:96:3b:d2:ca:c7:d7:36:
ff:50:6c:e1:14:5e:26:55:93:de:97:de:6a:4c:40:
17:c9:d3:57:03:79:54:f6:01:aa:23:40:25:53:1b:
d3:4b:1c:3b:8c:90:f8:9f:29:39:6d:e0:1f:a4:94:
21:89:1b:80:cf:bf:19:2a:9f:b1:63:66:1f:fe:4a:
6b:e4:2e:ac:9f:b7:44:ed:95:98:12:4b:f3:8c:94:
bb:89:00:46:f9:5d:8d:bc:36:00:53:5b:56:49:48:
04:9f:b4:1f:e1:71:af:1c:ec:10:c7:38:b7:6e:3a:
1a:8e:ac:1a:7c:f1:7c:b3:62:24:88:72:ee:49:6c:
17:79:14:74:46:bd:41:75:f5:76:be:39:b8:8a:6b:
b5:1c:5c:f8:46:13:7a:f7:05:cf:ee:73:86:0a:aa:
15:5c:a6:33:da:f4:60:b0:50:ea:bc:99:79:2e:80:
dc:2c:bd:c4:2f:b9:71:01:eb:1d:ac:67:ef:2e:7d:
95:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DF:4B:68:2D:12:C6:94:72:99:05:5A:12:B8:A1:55:A3:29:1D:F9
X509v3 Authority Key Identifier:
keyid:CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/MN9LaC0SxpRymQVaErihVaMpHfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.252.0/22
185.156.212.0/22
IPv6:
2a02:7740::/32
Signature Algorithm: sha256WithRSAEncryption
a6:4a:c5:6c:81:38:ff:fa:b2:da:90:7f:aa:b6:4d:c9:70:8d:
d9:93:94:a0:41:8a:1c:ae:8a:c9:09:f3:22:7e:34:81:4a:d4:
d0:cf:ad:3d:8e:50:d6:61:9b:e5:4e:83:5f:c7:3e:bf:2f:8f:
93:fb:b7:4e:3e:6e:1f:5e:21:c0:68:01:62:18:92:4c:b5:32:
0b:17:4d:e7:51:b4:0d:3a:27:58:e4:66:a0:5c:5b:c9:28:aa:
09:85:59:5c:68:c0:7c:79:d7:58:62:6d:f5:6c:5b:57:4b:16:
0c:73:ad:61:a5:a8:2e:1f:90:69:c5:3a:22:88:c2:17:59:f7:
37:dd:13:5b:da:67:74:4b:67:34:69:b7:0c:53:f4:61:eb:99:
9a:87:98:7a:4d:cc:80:4e:cf:fa:a7:d8:01:9d:b7:33:ef:5c:
8b:29:d3:a9:2a:cd:61:a3:b6:45:2c:7b:58:c8:1f:84:8f:58:
74:f2:e4:30:50:6e:7e:7c:13:07:5e:63:ef:36:80:8e:c8:5a:
5e:da:ff:20:1d:9c:12:99:36:98:ea:e3:04:df:0d:62:bf:50:
09:aa:22:5a:dc:a9:62:29:73:65:8d:e0:b3:d9:c9:a1:a9:41:
75:ef:3e:20:f9:33:b8:ae:90:5c:b9:a5:78:84:4f:47:59:cc:
65:04:10:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:51 2024 by rpki-client on console-fra.rpki-client.org