Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/MLRn22at5eUgfUnHKzNDDX1uAOM.roa
File: MLRn22at5eUgfUnHKzNDDX1uAOM.roa (raw, json)
Hash identifier: sptdki5HxEdj1uDWhPuvpC2tlufyJcIGhVkS71FaM1U=
Subject key identifier: 30:B4:67:DB:66:AD:E5:E5:20:7D:49:C7:2B:33:43:0D:7D:6E:00:E3
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 01857270F95625D16F96917EEF9B1ADAB159
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/MLRn22at5eUgfUnHKzNDDX1uAOM.roa
Signing time: Mon 02 Jan 2023 12:24:44 +0000
ROA not before: Mon 02 Jan 2023 12:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49349
IP address blocks: 185.11.146.0/24 maxlen: 32
185.11.147.0/24 maxlen: 32
188.209.49.0/24 maxlen: 24
188.209.52.0/23 maxlen: 24
185.62.190.0/24 maxlen: 32
185.62.188.0/23 maxlen: 32
185.11.145.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:70:f9:56:25:d1:6f:96:91:7e:ef:9b:1a:da:b1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Jan 2 12:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30b467db66ade5e5207d49c72b33430d7d6e00e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:de:c0:6b:0b:13:3c:17:22:a2:e7:54:4d:49:
71:c1:cc:2c:49:c2:af:d4:6e:25:36:05:67:70:c2:
f0:d3:bc:8e:49:21:4c:ec:2e:0d:1a:92:92:69:6e:
9e:ea:88:6b:ec:a6:75:de:27:b4:fb:f1:70:4d:d1:
c3:3f:0a:b5:a4:2e:f3:df:aa:4a:ce:67:a5:e1:d6:
8f:c6:02:55:40:5a:75:b3:69:dc:02:60:8f:96:54:
d8:6d:5b:2c:a7:e0:a4:c7:9f:5f:df:77:0b:e1:f1:
aa:b4:7d:d0:f7:e7:d1:c7:93:b5:0b:77:f0:10:42:
65:e4:bf:8d:0b:87:87:1c:ff:cd:c4:8b:dc:f7:0c:
b5:e7:fe:4a:1a:fe:cc:59:47:48:6c:b0:5d:43:a7:
af:65:04:f8:af:00:ed:47:fd:dc:ac:2d:41:e9:d1:
8d:3d:f7:ac:fc:d3:60:54:bc:45:7a:dc:83:e0:2c:
a8:e3:ce:dc:1f:10:71:8f:01:df:c3:bc:a5:26:de:
4f:c9:08:32:da:79:c0:1b:9b:e2:82:ea:17:c2:9d:
f9:78:e7:6a:5a:ff:4a:49:bc:52:12:29:a0:76:47:
e8:95:ae:b7:af:a5:31:b2:71:dc:5f:76:34:e7:b8:
ca:6f:e3:6d:bf:a9:38:2c:b9:a5:5d:1a:39:17:81:
8c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B4:67:DB:66:AD:E5:E5:20:7D:49:C7:2B:33:43:0D:7D:6E:00:E3
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/MLRn22at5eUgfUnHKzNDDX1uAOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.145.0-185.11.147.255
185.62.188.0-185.62.190.255
188.209.49.0/24
188.209.52.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:ea:ab:ba:bd:b0:46:97:0e:19:a1:e6:32:5f:da:6a:95:3e:
07:1b:c3:cd:20:0d:4a:7d:6f:3a:9b:91:93:e9:ca:ab:2b:e2:
e0:ef:00:cc:b1:01:8e:4f:7c:60:1a:f5:1f:5d:a3:37:f3:02:
d7:56:8a:1a:61:8b:a3:39:03:e0:ea:82:d2:34:4b:aa:e8:fe:
ef:d2:7c:9f:a2:85:da:8a:66:6f:25:fc:7a:f0:58:7f:bd:a1:
f9:e6:5e:31:02:45:69:38:9b:e1:fe:9b:81:ce:6b:6f:09:00:
e5:fb:d1:ac:05:65:44:fe:eb:b1:39:fd:d6:65:e8:66:44:82:
3b:cf:e3:b4:79:d8:8f:17:44:11:2c:7d:2e:df:56:9e:9b:3a:
2c:83:51:86:8a:39:5d:be:6b:33:b2:0b:36:ae:b7:39:0b:6b:
76:08:4c:84:e9:8b:07:c0:9c:42:06:e0:40:fc:45:cc:83:3c:
27:01:3e:0f:46:59:e6:73:70:d0:11:1a:e3:97:9e:50:9c:31:
4f:88:22:6b:90:d6:2b:2f:c6:56:d3:6b:d6:50:7c:05:fa:af:
75:b1:28:58:13:4f:a7:54:cc:ac:5f:79:56:76:fe:da:c5:40:
b2:c8:76:6e:71:b5:d0:d4:67:2b:95:50:30:22:27:0e:79:3a:
31:d5:ae:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:11 2024 by rpki-client on console-ams.rpki-client.org