Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/MR-Xd4q29e0D9v4QBe8xpIqvjJQ.roa
File: MR-Xd4q29e0D9v4QBe8xpIqvjJQ.roa (raw, json)
Hash identifier: O/bCAqt09bnwC+RwhY6HOr/ZmeeOLV7Mj4DbosUru6Q=
Subject key identifier: 31:1F:97:77:8A:B6:F5:ED:03:F6:FE:10:05:EF:31:A4:8A:AF:8C:94
Certificate issuer: /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Certificate serial: 018679113A108B3A64663D62D8551C01D5F3
Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/MR-Xd4q29e0D9v4QBe8xpIqvjJQ.roa
Signing time: Wed 22 Feb 2023 12:20:17 +0000
ROA not before: Wed 22 Feb 2023 12:20:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 45.147.166.0/24 maxlen: 24
45.147.165.0/24 maxlen: 24
45.147.164.0/24 maxlen: 24
45.147.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:79:11:3a:10:8b:3a:64:66:3d:62:d8:55:1c:01:d5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Validity
Not Before: Feb 22 12:20:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=311f97778ab6f5ed03f6fe1005ef31a48aaf8c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:30:d8:61:af:8a:20:fd:95:cd:4b:45:c5:
57:66:7e:53:15:bc:4c:8b:06:08:78:e7:8b:42:a8:
4e:29:48:42:cb:a8:7a:78:5b:2d:8a:8a:a4:ce:eb:
b9:b3:37:ef:63:ed:95:9d:5f:85:97:89:ea:67:f3:
b7:e4:44:ed:22:98:2e:c1:c9:89:b5:a3:43:2d:af:
6e:75:42:01:10:22:9e:d6:b8:43:0e:57:7f:ca:80:
c6:e6:63:d9:f7:ce:68:a3:b1:14:8c:09:61:48:eb:
fb:a7:bc:4f:2b:e6:8f:60:f8:ac:b9:87:a7:5c:73:
da:47:06:c9:9c:11:65:18:be:51:a3:aa:02:83:fd:
7a:de:18:0f:d3:e2:03:3d:93:c1:e6:f6:ff:3c:e9:
85:c5:95:fe:eb:42:07:3e:ba:6d:7d:e3:8d:d2:91:
2a:0a:88:71:68:f7:44:e3:e9:ee:09:fc:d8:13:96:
2c:47:f0:11:aa:05:fb:28:08:bd:5e:59:45:f6:63:
21:37:af:14:c1:19:c0:be:7e:78:66:53:73:86:a7:
23:9a:a5:c9:c0:83:29:46:82:ff:f7:83:84:4c:56:
4c:0f:c7:e6:c4:b4:21:c0:11:fb:bf:dc:26:a2:62:
58:11:44:45:c3:51:8f:12:d1:f5:3a:35:f5:c5:b3:
e6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1F:97:77:8A:B6:F5:ED:03:F6:FE:10:05:EF:31:A4:8A:AF:8C:94
X509v3 Authority Key Identifier:
keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/MR-Xd4q29e0D9v4QBe8xpIqvjJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.164.0/22
Signature Algorithm: sha256WithRSAEncryption
06:f6:74:67:87:48:40:2e:0f:11:6f:54:33:95:64:04:e5:68:
04:bc:8d:0a:53:e3:11:48:cc:7d:87:7e:2d:e5:f0:8f:ee:5b:
42:c5:50:11:7a:39:d9:61:4e:d5:77:b4:60:1d:40:12:99:d9:
ef:15:fb:cc:3c:93:93:e1:38:5b:86:b0:e8:7b:69:ff:f7:44:
de:f8:5f:0c:07:2c:9e:3e:16:f3:bc:5a:d0:07:16:75:00:cc:
21:1e:99:95:a7:40:dd:7d:e9:24:42:66:a0:1f:19:b4:9b:19:
55:42:5e:92:e2:b9:c0:28:46:1c:46:26:1b:0f:cc:bb:42:ca:
42:da:5a:41:ae:ae:7a:f9:9e:e5:b0:75:d0:95:45:76:9f:8a:
83:1a:64:db:04:05:63:80:96:1c:06:c5:c4:fa:6c:f5:a7:a1:
ef:3d:e9:40:77:c8:cf:a8:50:58:24:b0:be:d5:61:9b:57:04:
88:ea:bb:16:08:69:43:81:60:13:1c:ac:12:d0:49:49:d2:f9:
26:78:9a:7f:71:f5:f3:4d:74:20:4f:0f:63:d1:52:88:46:47:
b3:d0:ec:cb:db:a7:b8:35:05:8e:67:50:57:c4:5a:10:35:1d:
01:34:44:09:7c:78:b4:85:65:4f:92:a6:60:ad:8e:08:a5:84:
0a:1c:c2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:24 2024 by rpki-client on console-ams.rpki-client.org