Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/MXWlmuTDrVw5BdzLENrPGDIgrpo.roa
File: MXWlmuTDrVw5BdzLENrPGDIgrpo.roa (raw, json)
Hash identifier: m8MrVIW+5dahlkgf/PHe155cIQczisfmQvBmbc+7Nkw=
Subject key identifier: 31:75:A5:9A:E4:C3:AD:5C:39:05:DC:CB:10:DA:CF:18:32:20:AE:9A
Certificate issuer: /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial: 018C84259B60464FDCC1800AC4DC47E201FE
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/MXWlmuTDrVw5BdzLENrPGDIgrpo.roa
Signing time: Tue 19 Dec 2023 22:15:06 +0000
ROA not before: Tue 19 Dec 2023 22:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 45.95.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:84:25:9b:60:46:4f:dc:c1:80:0a:c4:dc:47:e2:01:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Validity
Not Before: Dec 19 22:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3175a59ae4c3ad5c3905dccb10dacf183220ae9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6e:ee:e5:33:7a:c3:5c:17:b4:14:1f:95:4d:
b6:b5:0e:18:cf:a3:52:e7:2a:3d:bd:45:d8:c1:b9:
4a:7d:fb:4e:0a:88:57:9b:ed:61:8e:33:b3:12:87:
00:de:91:41:d6:f7:19:ab:95:06:56:28:f1:04:fe:
14:ad:a8:bb:c8:75:7f:7e:b4:2d:94:d2:82:e8:ae:
1a:92:55:90:4a:a4:25:01:1e:4d:aa:9e:67:e3:2f:
df:d7:6c:ed:2f:6a:cb:05:d4:38:7c:0a:d5:39:91:
bf:ce:f6:eb:7a:a4:34:73:65:97:90:e7:82:0d:86:
c8:d6:82:1a:7f:2b:37:ab:38:56:08:c0:bc:96:53:
80:79:73:9a:b4:f8:1e:d4:36:8b:94:6d:f6:b2:2f:
0b:dd:36:9c:36:30:04:ee:bd:7c:5e:34:6f:43:7f:
d7:d6:1f:1f:ef:5e:3f:59:b4:46:69:c8:e1:75:07:
4b:70:8f:39:21:99:ce:ff:32:93:eb:5a:71:7d:ec:
b8:5c:5c:52:3a:f0:74:23:82:f3:d9:7b:fa:c6:78:
c1:83:1e:d6:5c:f3:83:71:07:a5:7d:93:0c:8c:cc:
d7:74:73:54:4f:64:82:d7:90:1b:db:72:ec:55:64:
a7:6b:85:3d:59:b7:32:60:66:e0:67:53:a3:59:bf:
84:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:75:A5:9A:E4:C3:AD:5C:39:05:DC:CB:10:DA:CF:18:32:20:AE:9A
X509v3 Authority Key Identifier:
keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/MXWlmuTDrVw5BdzLENrPGDIgrpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.206.0/24
Signature Algorithm: sha256WithRSAEncryption
52:8a:1c:c2:fa:2e:1d:67:78:79:5c:6a:4b:6a:c8:e5:da:67:
97:87:3e:14:69:15:f3:a5:c2:b6:15:22:37:26:15:64:b4:95:
bc:e0:8c:58:a3:33:fc:6b:e7:9c:cd:8a:d7:d2:91:d6:d8:63:
84:1f:61:0b:5d:50:33:2f:57:62:c7:97:c8:e1:97:6c:1e:77:
1c:8a:1d:26:f1:f4:62:4b:a4:ed:54:a8:87:c4:90:76:3e:67:
1a:59:ec:7f:be:ce:15:d7:b2:a8:d0:17:97:b3:1b:46:ba:39:
aa:4e:e5:80:e5:66:7b:de:79:8e:a5:50:21:58:01:f5:d9:28:
47:c4:7b:4f:c5:df:fa:88:f3:ad:02:68:f0:45:a1:69:53:f4:
fe:fd:16:1f:03:ef:c4:62:4a:78:c7:7c:df:b2:ec:86:19:35:
ef:96:59:35:7c:0c:b8:d9:28:bc:5c:10:27:b9:82:8b:84:c2:
90:04:35:ac:eb:de:74:5f:e3:35:da:c7:e7:f5:0f:40:df:0a:
1c:57:bf:cc:29:d2:63:c6:7d:12:4f:bc:bc:8e:15:94:e5:86:
29:8c:e1:9f:21:74:b7:23:79:b1:25:4e:0f:44:d6:6a:14:0a:
11:38:dd:05:e5:26:7c:5b:44:56:02:aa:a3:ed:78:1d:df:f8:
9d:64:75:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyEJZtgRk/cwYAKxNxH4gH+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNjFhYTVkMWJlZmQ3YTBmZTNlNGRmZTNhYThkYTczZWZj
ZmJhMzQwHhcNMjMxMjE5MjIxNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTc1YTU5YWU0YzNhZDVjMzkwNWRjY2IxMGRhY2YxODMyMjBhZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG7u5TN6w1wXtBQflU22tQ4Yz6NS
5yo9vUXYwblKfftOCohXm+1hjjOzEocA3pFB1vcZq5UGVijxBP4Urai7yHV/frQt
lNKC6K4aklWQSqQlAR5Nqp5n4y/f12ztL2rLBdQ4fArVOZG/zvbreqQ0c2WXkOeC
DYbI1oIafys3qzhWCMC8llOAeXOatPge1DaLlG32si8L3TacNjAE7r18XjRvQ3/X
1h8f714/WbRGacjhdQdLcI85IZnO/zKT61pxfey4XFxSOvB0I4Lz2Xv6xnjBgx7W
XPODcQelfZMMjMzXdHNUT2SC15Ab23LsVWSna4U9WbcyYGbgZ1OjWb+EVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDF1pZrkw61cOQXcyxDazxgyIK6aMB8GA1UdIwQY
MBaAFB9hql0b79eg/j5N/jqo2nPvz7o0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUt
YzYyMWU4ZGY5NWZmLzEvTVhXbG11VERyVnc1QmR6TEVOclBHRElncnBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUtYzYyMWU4ZGY5NWZm
LzEvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV/OMA0G
CSqGSIb3DQEBCwUAA4IBAQBSihzC+i4dZ3h5XGpLasjl2meXhz4UaRXzpcK2FSI3
JhVktJW84IxYozP8a+eczYrX0pHW2GOEH2ELXVAzL1dix5fI4ZdsHnccih0m8fRi
S6TtVKiHxJB2PmcaWex/vs4V17Ko0BeXsxtGujmqTuWA5WZ73nmOpVAhWAH12ShH
xHtPxd/6iPOtAmjwRaFpU/T+/RYfA+/EYkp4x3zfsuyGGTXvllk1fAy42Si8XBAn
uYKLhMKQBDWs6950X+M12sfn9Q9A3wocV7/MKdJjxn0ST7y8jhWU5YYpjOGfIXS3
I3mxJU4PRNZqFAoRON0F5SZ8W0RWAqqj7Xgd3/idZHXt
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:11 2024 by rpki-client on console-ams.rpki-client.org