Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Muw9ZC1iqgnIUkQCIe4yx7mdLZA.roa
File: Muw9ZC1iqgnIUkQCIe4yx7mdLZA.roa (raw, json)
Hash identifier: 9GYFC9UnA/TvhWOo7c6HVdnRyEaLFHJhDEiI+JPKGv8=
Subject key identifier: 32:EC:3D:64:2D:62:AA:09:C8:52:44:02:21:EE:32:C7:B9:9D:2D:90
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01896553B61E19544BC2F88C6AEA8F05E8B6
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Muw9ZC1iqgnIUkQCIe4yx7mdLZA.roa
Signing time: Mon 17 Jul 2023 19:28:52 +0000
ROA not before: Mon 17 Jul 2023 19:28:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 194.156.0.0/24 maxlen: 24
194.156.27.0/24 maxlen: 24
45.152.212.0/24 maxlen: 24
45.152.213.0/24 maxlen: 24
91.213.35.0/24 maxlen: 24
45.135.177.0/24 maxlen: 24
45.158.45.0/24 maxlen: 24
45.156.151.0/24 maxlen: 24
45.156.148.0/24 maxlen: 24
87.247.141.0/24 maxlen: 24
45.152.214.0/24 maxlen: 24
45.152.215.0/24 maxlen: 24
45.147.252.0/24 maxlen: 24
193.8.171.0/24 maxlen: 24
91.188.231.0/24 maxlen: 24
91.188.228.0/24 maxlen: 24
91.188.229.0/24 maxlen: 24
91.188.230.0/24 maxlen: 24
91.220.229.0/24 maxlen: 24
45.143.142.0/24 maxlen: 24
45.92.172.0/24 maxlen: 24
91.220.206.0/24 maxlen: 24
213.226.102.0/24 maxlen: 24
213.226.103.0/24 maxlen: 24
45.142.74.0/24 maxlen: 24
45.142.75.0/24 maxlen: 24
45.142.72.0/24 maxlen: 24
45.142.73.0/24 maxlen: 24
45.140.62.0/24 maxlen: 24
45.140.63.0/24 maxlen: 24
45.140.60.0/24 maxlen: 24
45.138.144.0/24 maxlen: 24
45.138.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:53:b6:1e:19:54:4b:c2:f8:8c:6a:ea:8f:05:e8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jul 17 19:28:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32ec3d642d62aa09c852440221ee32c7b99d2d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e1:b9:2d:47:81:8c:51:b0:1b:f6:65:32:a4:
ec:80:7b:72:2a:07:8d:8f:90:51:fb:8c:62:01:15:
47:e1:d3:63:48:ff:12:29:50:56:8f:69:1f:12:f0:
8f:3e:89:28:7c:69:15:65:ed:db:b9:89:87:98:02:
1d:5d:b0:06:33:20:c7:b2:ea:40:7d:ed:af:c1:18:
47:dc:fa:2a:d2:6c:4b:da:54:50:d0:92:36:aa:26:
76:91:7f:17:cc:d5:9b:66:f1:11:27:97:da:a1:60:
1c:05:41:9d:bc:40:52:bc:02:44:19:d7:62:5f:b1:
c7:a7:92:3d:bc:b9:57:19:ff:a8:58:11:4d:07:4c:
e8:a5:5a:30:dc:da:18:73:c9:29:32:64:77:ab:04:
83:4b:58:73:ec:7f:ef:3b:9b:63:44:59:16:74:9e:
0a:86:5e:a1:4d:eb:9e:02:83:62:3f:99:66:41:3e:
5e:51:68:f0:6b:35:df:83:4d:95:7f:7c:d3:c4:1e:
8f:7c:73:83:a5:aa:1c:74:08:7a:d0:1f:b3:5d:74:
1c:50:e4:00:db:28:9b:08:1d:86:e2:d4:38:2d:a1:
96:f4:0b:a1:32:b0:b2:89:63:db:50:15:aa:fa:53:
07:50:e3:26:d7:88:01:f2:e0:a9:db:f5:b8:8f:07:
df:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EC:3D:64:2D:62:AA:09:C8:52:44:02:21:EE:32:C7:B9:9D:2D:90
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Muw9ZC1iqgnIUkQCIe4yx7mdLZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.172.0/24
45.135.177.0/24
45.138.144.0/24
45.138.147.0/24
45.140.60.0/24
45.140.62.0/23
45.142.72.0/22
45.143.142.0/24
45.147.252.0/24
45.152.212.0/22
45.156.148.0/24
45.156.151.0/24
45.158.45.0/24
87.247.141.0/24
91.188.228.0/22
91.213.35.0/24
91.220.206.0/24
91.220.229.0/24
193.8.171.0/24
194.156.0.0/24
194.156.27.0/24
213.226.102.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:8a:d0:57:d3:1f:42:51:47:8d:61:1f:f1:31:96:e1:a7:e6:
24:8a:fd:0b:93:b9:13:cb:59:52:bd:6c:29:78:40:7f:08:2d:
86:06:35:f7:34:e2:48:8f:ab:46:93:b0:d1:ee:a6:70:98:8f:
cd:ea:62:92:ee:25:40:70:59:7e:b2:08:2d:0b:46:cc:4b:b0:
5d:e9:74:0a:5c:b1:99:df:74:12:61:cb:2f:9e:6a:10:be:1d:
ea:23:dc:8f:42:07:af:41:c3:0a:2b:50:cf:5c:73:4a:5b:9e:
b2:d3:56:ef:68:d3:fa:8f:0f:93:2c:a4:08:2a:4d:bf:02:4b:
c4:19:38:70:3e:73:9b:42:83:25:3d:ef:8e:3e:7f:18:eb:e8:
29:94:73:43:4b:67:bc:d2:c5:9a:8b:7e:e4:b9:25:8a:ab:62:
ed:be:21:05:c4:5d:4f:7a:42:42:a4:b5:5d:0d:b2:6e:56:db:
15:63:16:ca:8c:1d:8b:eb:f4:19:d8:67:72:21:29:0d:99:b9:
eb:4c:f2:13:88:43:e8:07:85:d7:5a:4f:d5:5e:9f:ad:cd:84:
21:6e:95:6a:73:ba:cd:81:6f:1e:f5:18:dd:70:52:c9:23:d6:
d3:19:56:4d:83:32:9e:2e:28:43:d9:33:cb:4b:e1:a7:ee:96:
88:92:19:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org