Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/MxzGPutlmZe5l_rJZ36hrcJ8HTo.roa
File: MxzGPutlmZe5l_rJZ36hrcJ8HTo.roa (raw, json)
Hash identifier: 5o6FBZaE/dWuxyzpaZRiYEdWHwhpJ0FhDWIN8YSnigc=
Subject key identifier: 33:1C:C6:3E:EB:65:99:97:B9:97:FA:C9:67:7E:A1:AD:C2:7C:1D:3A
Certificate issuer: /CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Certificate serial: 01856D9D0E7590A0DBBE95F1C9341C48B494
Authority key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/MxzGPutlmZe5l_rJZ36hrcJ8HTo.roa
Signing time: Sun 01 Jan 2023 13:54:47 +0000
ROA not before: Sun 01 Jan 2023 13:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12390
IP address blocks: 194.207.96.0/19 maxlen: 19
213.249.128.0/18 maxlen: 18
185.188.232.0/22 maxlen: 22
83.100.128.0/17 maxlen: 17
94.72.192.0/18 maxlen: 18
194.207.128.0/19 maxlen: 19
194.207.64.0/19 maxlen: 19
5.198.0.0/17 maxlen: 17
87.102.0.0/17 maxlen: 17
212.50.160.0/19 maxlen: 19
77.86.0.0/17 maxlen: 17
194.207.224.0/19 maxlen: 19
178.78.64.0/18 maxlen: 18
194.207.160.0/19 maxlen: 19
213.249.192.0/18 maxlen: 18
194.207.192.0/19 maxlen: 19
159.253.64.0/20 maxlen: 20
2a00:4900::/32 maxlen: 32
2a00:4902::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:0e:75:90:a0:db:be:95:f1:c9:34:1c:48:b4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Validity
Not Before: Jan 1 13:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=331cc63eeb659997b997fac9677ea1adc27c1d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2b:a1:87:ac:fe:7c:c6:6f:5d:13:47:7e:0f:
3c:25:50:35:bc:07:09:f6:ea:9f:f0:ba:5f:36:3c:
86:14:fb:a9:09:64:30:f5:69:84:1f:3d:91:ce:f1:
75:7d:34:27:3a:26:c9:ce:0a:7c:76:bf:d4:df:3d:
5b:89:13:a6:6c:b6:4b:76:74:1f:5c:c7:ff:36:75:
25:2d:f6:24:27:08:55:fb:43:ba:96:c3:5f:4b:01:
ef:61:7c:01:19:a5:c9:29:e3:5d:2a:c0:5c:d8:82:
44:49:bf:f5:df:52:b9:ea:54:48:89:32:09:51:35:
93:0f:f0:8a:f8:7f:a8:c9:87:ef:b3:9a:c2:d9:c6:
8e:ac:a4:8d:65:32:cd:57:1e:fa:93:ad:41:33:12:
f4:25:be:7e:11:b8:bc:8b:96:bb:64:75:ae:40:36:
4e:69:69:45:3b:d7:fe:af:4e:bc:ac:47:51:d4:a7:
36:ed:e5:1b:50:b1:5c:4e:47:d1:c9:94:f2:02:1b:
c5:43:01:cc:d0:d7:5b:00:e2:1f:18:ae:70:35:fe:
4b:bd:e8:0c:51:95:63:aa:40:6f:d4:df:69:b0:19:
a3:9d:dc:d3:3e:38:9e:bc:aa:a7:37:9c:8e:1f:a9:
12:cc:e6:b4:27:6f:19:a6:40:33:e9:07:ac:86:55:
a6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1C:C6:3E:EB:65:99:97:B9:97:FA:C9:67:7E:A1:AD:C2:7C:1D:3A
X509v3 Authority Key Identifier:
keyid:7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/MxzGPutlmZe5l_rJZ36hrcJ8HTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.198.0.0/17
77.86.0.0/17
83.100.128.0/17
87.102.0.0/17
94.72.192.0/18
159.253.64.0/20
178.78.64.0/18
185.188.232.0/22
194.207.64.0-194.207.255.255
212.50.160.0/19
213.249.128.0/17
IPv6:
2a00:4900::/32
2a00:4902::/32
Signature Algorithm: sha256WithRSAEncryption
56:a2:7d:6d:4f:26:7a:f7:ee:6c:01:0b:9d:21:b7:f2:ca:19:
c1:7f:d9:df:56:5b:88:82:d6:02:90:bf:97:44:bb:1c:e9:2e:
cc:7b:80:e8:59:ba:70:e0:64:6c:b2:58:8e:27:05:89:07:3e:
9d:e7:08:3e:a9:a4:d6:40:1c:d5:38:a5:86:78:2f:65:90:d1:
3b:91:1f:6f:0c:be:90:13:77:0f:fb:73:14:e2:a8:3c:0d:97:
a8:cc:28:6b:62:4b:f5:1e:fe:cb:74:8c:a2:df:bd:fd:33:73:
a5:34:b2:e4:1b:43:40:f3:d0:2c:1e:f7:e4:42:e1:73:9e:0e:
1d:88:62:b5:69:33:30:6b:bc:47:44:94:77:bf:1d:8b:99:b3:
85:da:bc:9e:ad:a7:69:eb:fb:92:9b:f5:44:fb:93:11:7e:42:
cc:95:7a:c1:e4:9a:1f:9c:42:7d:ab:cd:09:8c:09:bd:17:dd:
68:7b:37:2e:14:0b:20:38:35:79:7a:87:16:54:d7:6c:74:5d:
a9:64:5d:f4:19:90:38:b0:ba:8c:bf:75:e7:2e:59:24:38:f6:
a6:1e:27:25:fd:fc:d6:5c:97:49:75:57:c6:64:a0:33:1d:72:
52:3d:67:4c:45:1b:9d:57:39:68:58:5a:f1:38:c4:e9:cc:c6:
05:5c:55:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:20 2024 by rpki-client on console-fra.rpki-client.org