Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/MBNrlidRuF-ES01W5NdCTdVzT3I.roa
File: MBNrlidRuF-ES01W5NdCTdVzT3I.roa (raw, json)
Hash identifier: uFkXfbTMu4THqR38Z5UTksuduDy5VThUWL4b8thOmto=
Subject key identifier: 30:13:6B:96:27:51:B8:5F:84:4B:4D:56:E4:D7:42:4D:D5:73:4F:72
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0188303D78478CB4024D7131A1F844AD2DF0
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/MBNrlidRuF-ES01W5NdCTdVzT3I.roa
Signing time: Thu 18 May 2023 19:01:54 +0000
ROA not before: Thu 18 May 2023 19:01:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202656
IP address blocks: 194.156.1.0/24 maxlen: 24
45.91.161.0/24 maxlen: 24
45.135.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 May 2023 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:30:3d:78:47:8c:b4:02:4d:71:31:a1:f8:44:ad:2d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: May 18 19:01:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30136b962751b85f844b4d56e4d7424dd5734f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f3:cf:01:3a:24:f3:2b:a4:af:76:3c:8a:4e:
c2:ca:39:fb:e6:a8:30:af:62:64:d4:27:00:ac:d2:
ec:f4:83:b3:ef:0e:c9:e2:4e:dd:f7:7a:5e:2b:4e:
29:cf:20:f8:6e:85:a2:5d:47:a3:8b:55:20:67:f8:
30:77:15:5c:cf:73:41:f0:6d:bc:8a:7c:3a:9a:d3:
5a:ee:f6:05:ab:9e:a2:f7:51:94:be:63:93:95:77:
e4:9e:b5:6d:ed:fe:c0:11:26:6c:87:33:6c:04:48:
3e:73:57:da:aa:ab:af:b5:0e:16:e3:35:9f:c5:f3:
65:ad:a6:fb:27:eb:9b:5b:70:4c:a2:d2:93:3e:8b:
c1:fe:df:17:da:cd:e8:de:de:c0:85:f0:0d:bc:98:
b9:fe:8e:a1:e2:18:ee:e1:cc:1a:83:bf:d4:73:8c:
11:91:6f:35:55:4a:ae:7f:1c:6b:e7:38:17:da:ef:
f2:63:a4:1f:97:f0:e6:11:2e:41:26:41:9b:e8:52:
59:19:f5:89:6c:ce:e2:89:2b:c2:21:f5:9e:e7:c5:
a3:14:5f:13:d6:1d:45:ff:2c:d8:3e:4f:d5:2b:a9:
58:11:e6:be:74:f2:b4:22:44:89:94:56:37:a5:06:
67:88:c3:b0:d8:9e:ae:ed:f0:1d:0e:07:55:76:20:
65:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:13:6B:96:27:51:B8:5F:84:4B:4D:56:E4:D7:42:4D:D5:73:4F:72
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/MBNrlidRuF-ES01W5NdCTdVzT3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.161.0/24
45.135.178.0/24
194.156.1.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d9:c8:69:d9:c6:21:64:9c:51:33:de:1c:6f:59:9f:96:32:
0a:a8:97:48:3a:ac:af:05:5b:da:7e:98:d2:90:d3:c1:f6:7b:
be:5c:94:44:4b:08:1b:dd:6e:40:79:d6:a8:b1:0a:04:7e:29:
00:2f:06:ca:63:bc:34:10:5b:20:05:21:e2:ee:c1:9d:4e:85:
18:af:6f:9f:db:ec:0a:9d:19:47:0e:74:70:c6:6f:63:41:c6:
83:86:51:37:4e:ed:30:f6:59:88:61:02:ee:37:1d:a6:74:8b:
53:38:d9:1a:59:14:83:db:8f:e0:9d:2e:71:a6:71:bd:fe:d9:
ad:95:a9:dd:07:10:1a:de:cb:1e:e6:f1:f1:a3:6a:60:8a:ee:
c0:13:43:f4:27:53:4d:ed:6f:08:0e:cf:7a:93:e2:f1:ae:11:
36:b3:69:fd:5e:dc:a7:39:38:c1:ae:d7:bc:aa:80:b3:44:d7:
3e:22:31:76:85:a2:e9:78:89:e4:e9:73:57:30:f8:6b:3f:4b:
3a:7f:f9:1b:a0:ed:66:31:ce:21:8a:37:7d:59:7e:82:78:5b:
00:31:ac:86:5c:95:53:be:bd:fa:ee:64:38:0b:01:3c:dd:23:
55:a8:d8:a3:1d:53:ff:8c:26:9f:06:27:dc:e0:f9:49:11:14:
db:95:6f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org