Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MJqF737XyqC9jvwlpyQRKPB26Pw.roa
File: MJqF737XyqC9jvwlpyQRKPB26Pw.roa (raw, json)
Hash identifier: Brb7aojFWCkvG9Oip/Psu6fYiUmL2n5vsMQrC+dcIdc=
Subject key identifier: 30:9A:85:EF:7E:D7:CA:A0:BD:8E:FC:25:A7:24:11:28:F0:76:E8:FC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018834888FE79CE0C4F16F0DEFA65007F8E1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MJqF737XyqC9jvwlpyQRKPB26Pw.roa
Signing time: Fri 19 May 2023 15:02:24 +0000
ROA not before: Fri 19 May 2023 15:02:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53850
IP address blocks: 62.76.224.0/24 maxlen: 24
194.87.117.0/24 maxlen: 24
194.87.32.0/24 maxlen: 24
194.87.34.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
194.87.39.0/24 maxlen: 24
185.72.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 May 2023 17:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:34:88:8f:e7:9c:e0:c4:f1:6f:0d:ef:a6:50:07:f8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 19 15:02:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=309a85ef7ed7caa0bd8efc25a7241128f076e8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:fe:2e:5a:59:6a:49:e1:25:96:1b:e5:af:
ed:9e:ba:2f:8e:a5:11:aa:b3:ec:a9:e8:ad:82:29:
de:8a:6a:0a:4d:ab:24:07:22:ca:d3:a4:6c:c6:5f:
21:f5:36:8b:77:83:4e:c9:b3:07:3b:4c:0f:bc:52:
10:fc:21:40:e3:d6:da:b7:27:92:61:9a:e3:63:8a:
27:25:8a:1a:8b:f8:49:02:7a:c3:eb:a1:d7:99:d9:
78:d0:6c:fb:d7:67:9d:f1:fc:d8:d0:92:ed:33:a1:
0b:40:2b:83:db:92:ad:a7:ef:7a:bc:63:7a:a0:d2:
3f:f0:51:30:44:01:9a:fc:b0:b1:32:83:21:8d:72:
c2:43:09:cb:e0:c7:97:1d:4c:6a:31:34:b0:88:28:
39:a1:69:5c:24:35:fa:9f:4b:00:06:a0:81:d2:52:
16:2b:4f:b3:de:0a:b9:5b:75:fe:0c:52:79:88:0c:
2f:4d:3c:26:8a:02:04:fe:55:e7:d4:89:eb:d4:c3:
13:1d:cc:e6:5d:19:62:2e:78:f1:8d:23:c5:ec:b0:
c8:f5:50:ed:a0:d4:a5:51:be:e8:48:19:1d:dd:e5:
63:e1:2b:4b:b7:0b:50:28:d2:7c:1b:05:f0:63:ef:
e3:10:d7:8e:44:41:a2:62:a3:b0:45:79:f7:10:92:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9A:85:EF:7E:D7:CA:A0:BD:8E:FC:25:A7:24:11:28:F0:76:E8:FC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MJqF737XyqC9jvwlpyQRKPB26Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.224.0/24
185.72.11.0/24
194.87.32.0-194.87.34.255
194.87.39.0/24
194.87.117.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:34:a6:41:d7:6c:0f:f8:8d:f2:61:b6:67:ce:0c:c2:6d:a4:
d3:b0:ec:b6:9c:ac:fc:99:b4:df:b8:28:24:fe:c2:87:04:4f:
6b:bd:d3:ba:1d:87:54:97:76:2b:57:65:5e:c1:70:c5:2e:4e:
22:28:f0:f4:17:c3:37:a8:f3:30:f5:e0:b0:13:4a:69:6a:47:
7d:71:b6:17:0b:39:42:ab:78:6c:5e:4b:9a:91:38:8a:71:f3:
6a:15:3d:07:48:95:14:a9:ad:59:a8:33:68:7a:9b:72:84:4f:
b6:6b:75:b6:b4:db:81:aa:7e:48:b7:3c:7c:b9:b9:3a:04:14:
64:ef:6f:7d:e4:d5:22:b4:98:6d:29:9b:c6:63:bb:83:5a:b0:
f4:26:e0:05:77:4c:5a:6b:21:bc:ec:7c:2a:cf:2c:6c:f1:37:
af:23:b4:97:9b:8f:01:b2:6c:1b:cf:94:0d:42:5b:aa:48:76:
fd:24:96:8a:2c:29:d7:50:3d:c4:c5:12:29:ef:8d:99:08:30:
47:38:40:2a:eb:da:f2:f8:c5:b4:a2:a1:7a:24:0c:b0:12:91:
22:f6:9a:cd:23:30:8e:84:e8:f7:7c:86:4a:cf:5f:a7:f3:af:
2f:04:9a:20:68:01:23:b4:13:e4:ad:7b:d1:08:25:bd:f3:a8:
db:f6:10:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:14 2024 by rpki-client on console-fra.rpki-client.org