Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/M5M0R3P68JpusxKj_APFV-JS6jU.roa
File: M5M0R3P68JpusxKj_APFV-JS6jU.roa (raw, json)
Hash identifier: ORs1MhPEzlN8hjxBFRYMVdH9yVa6FElOq2opFBfqLlY=
Subject key identifier: 33:93:34:47:73:FA:F0:9A:6E:B3:12:A3:FC:03:C5:57:E2:52:EA:35
Certificate issuer: /CN=40c57f7c0befe63b6004e944df684c9d51e468f3
Certificate serial: 0186278281352E1ACEE7F1FFCDC52D09021B
Authority key identifier: 40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/M5M0R3P68JpusxKj_APFV-JS6jU.roa
Signing time: Mon 06 Feb 2023 16:15:09 +0000
ROA not before: Mon 06 Feb 2023 16:15:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57574
IP address blocks: 164.215.56.0/23 maxlen: 23
164.215.58.0/23 maxlen: 23
164.215.61.0/24 maxlen: 24
164.215.60.0/24 maxlen: 24
164.215.60.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:27:82:81:35:2e:1a:ce:e7:f1:ff:cd:c5:2d:09:02:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40c57f7c0befe63b6004e944df684c9d51e468f3
Validity
Not Before: Feb 6 16:15:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3393344773faf09a6eb312a3fc03c557e252ea35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e1:90:cf:da:8f:10:54:74:43:38:4c:68:ac:
ea:97:af:4e:1e:57:65:b9:5a:e9:1e:d2:81:e2:49:
80:48:b0:cb:d2:41:b7:55:5f:06:86:30:30:a9:bc:
3f:16:11:a0:5e:46:87:6c:34:1f:b3:66:8b:9d:34:
fe:ee:99:0b:9b:ec:1e:da:68:c3:ec:4a:86:f1:9c:
aa:2c:54:8a:a4:4e:0a:27:52:cd:9b:f9:b7:c7:9b:
88:6e:e7:cc:cf:88:f8:d1:32:bf:6f:05:b8:bd:ab:
c3:ef:ae:e1:f3:76:68:23:7b:e0:60:18:91:e3:49:
c0:7e:85:b2:d2:98:f7:0a:89:38:0b:2e:9b:1b:27:
48:d0:14:dd:eb:ca:ce:70:39:57:fa:c4:2a:1a:97:
19:8b:5d:69:32:6b:5d:7e:23:69:54:74:33:8c:20:
50:ad:ee:cd:ba:f5:ac:53:40:a6:c2:4c:24:07:7a:
48:f0:f6:44:7f:e2:bb:bb:f8:2b:9f:ca:7a:c6:38:
cc:bb:db:ef:07:1b:46:88:cd:3a:4c:99:3b:53:c2:
60:6f:d7:15:0f:a0:03:a1:07:02:15:d6:c0:33:9d:
83:f8:c3:57:2f:7e:e2:ef:3e:84:22:a4:3c:16:15:
fc:6b:12:5b:84:63:f5:6a:48:a6:34:5c:80:2c:72:
93:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:93:34:47:73:FA:F0:9A:6E:B3:12:A3:FC:03:C5:57:E2:52:EA:35
X509v3 Authority Key Identifier:
keyid:40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/M5M0R3P68JpusxKj_APFV-JS6jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.215.56.0-164.215.61.255
Signature Algorithm: sha256WithRSAEncryption
50:0d:1c:a5:6b:68:b0:b9:0a:c4:a6:08:89:ad:27:4a:bf:0a:
cb:5c:9c:a0:4d:fb:53:33:1b:a2:02:f9:fe:07:25:d5:ad:5e:
89:a1:bc:c6:9e:61:99:3d:fb:19:ea:6f:23:bf:45:74:72:51:
f1:f5:94:c3:a1:73:d6:aa:96:e3:17:00:68:2b:c5:2a:6a:06:
fd:a8:79:34:32:e4:76:7e:8f:7d:9b:d2:55:de:5c:a6:58:db:
88:9d:68:2c:21:aa:3e:bc:e5:2c:54:6d:33:53:a6:a2:f2:7a:
e1:54:b1:1d:be:06:af:eb:9d:72:f8:96:85:e0:e1:45:cc:8d:
57:64:64:9b:fe:9f:35:98:d6:2f:41:d1:0a:ee:e0:ac:e4:94:
fb:0b:79:1c:aa:4b:d9:83:1a:52:b3:6e:98:f5:a6:be:59:05:
ed:79:e4:78:4d:4c:36:bb:17:82:ba:8a:90:32:d0:1d:45:a3:
46:db:de:84:77:b0:a0:96:b2:08:5a:f2:d1:2f:f6:e0:93:d6:
15:d8:76:2e:fe:9b:aa:8f:28:be:87:1d:1e:7e:70:9b:ba:c2:
a8:61:cf:c3:f5:7d:8a:6a:e4:68:54:46:ea:eb:74:60:35:e7:
84:8b:1c:7e:22:ae:00:fd:65:31:83:b4:eb:34:33:ec:2b:8d:
8e:97:6c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:05 2024 by rpki-client on console-fra.rpki-client.org