Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lftHFkMPSXBKe8QbMottser2ZMQ.roa
File: lftHFkMPSXBKe8QbMottser2ZMQ.roa (raw, json)
Hash identifier: Bj+Q6affLALtnKJOLNj2u6UAEf/sCyfQv5MCXIGG5v0=
Subject key identifier: 95:FB:47:16:43:0F:49:70:4A:7B:C4:1B:32:8B:6D:B1:EA:F6:64:C4
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018EDC60FCEFD51FF6956368CE4DB77FAAD1
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lftHFkMPSXBKe8QbMottser2ZMQ.roa
Signing time: Sun 14 Apr 2024 11:32:07 +0000
ROA not before: Sun 14 Apr 2024 11:32:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34304
IP address blocks: 81.180.172.0/23 maxlen: 23
81.180.252.0/23 maxlen: 23
85.121.18.0/23 maxlen: 23
194.102.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 03:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:dc:60:fc:ef:d5:1f:f6:95:63:68:ce:4d:b7:7f:aa:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 14 11:32:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95fb4716430f49704a7bc41b328b6db1eaf664c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0d:f1:1c:49:0e:e6:5f:c3:60:7f:19:a8:fe:
94:81:64:b9:1a:51:d0:71:16:f7:09:63:e1:06:12:
57:cb:e3:16:57:22:5f:a6:7a:fb:7a:52:5b:80:0c:
90:5a:ec:8e:ed:fa:75:73:3b:d7:69:0e:e1:44:e3:
f4:90:c3:06:ba:b8:bb:12:f9:8f:86:e6:bd:ec:5f:
91:fd:f5:f3:f1:52:09:da:fb:ea:4e:84:3d:05:33:
de:b1:07:68:d7:8d:9b:60:d1:01:73:17:31:6f:46:
f0:99:34:af:40:49:1a:ce:d5:44:35:8e:47:f8:34:
d0:0f:b4:8e:46:44:c4:52:3c:37:f0:d6:9a:81:45:
6b:15:d8:b2:0e:de:1f:63:ec:6d:b4:c6:e5:e8:2b:
d6:70:fe:d9:80:c4:eb:26:d4:7c:d5:1a:2b:d4:b3:
16:b5:d4:76:64:d6:30:01:c6:a5:90:26:2a:28:30:
23:dc:3f:5f:7a:8a:72:9f:26:bd:b9:f2:34:96:8e:
76:e6:09:c4:f4:42:9f:16:72:6b:84:b9:2e:b4:ad:
38:2f:23:5a:7d:54:69:76:6a:b3:96:f6:4c:0d:57:
51:33:61:26:ca:95:df:de:43:a1:67:d5:aa:16:66:
4a:33:90:cd:bf:b6:5e:98:52:8e:5f:47:69:8e:d5:
07:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FB:47:16:43:0F:49:70:4A:7B:C4:1B:32:8B:6D:B1:EA:F6:64:C4
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lftHFkMPSXBKe8QbMottser2ZMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.172.0/23
81.180.252.0/23
85.121.18.0/23
194.102.217.0/24
Signature Algorithm: sha256WithRSAEncryption
44:d1:97:b3:3a:d1:8a:2c:31:c7:54:85:dc:55:65:e9:0e:cd:
eb:52:90:e6:a5:13:5d:d4:4d:c7:3c:99:2c:75:b7:16:0a:0b:
d0:d4:2a:5e:47:7e:00:63:1c:35:81:e8:75:50:e9:7c:1e:d8:
d4:01:cd:42:b9:3b:0b:df:f8:4e:2e:84:e1:e8:e1:41:b1:74:
32:7d:6e:0f:59:02:14:3a:63:5c:1d:75:7a:e4:58:aa:5f:3c:
80:c8:b4:ae:07:8f:2b:35:fb:25:2a:50:16:a6:60:c2:71:b2:
49:4b:b6:42:79:cb:02:71:08:c6:b0:b8:3c:4c:1d:28:6a:fd:
b2:bc:8f:50:1a:30:83:e0:d7:14:7f:b8:d2:53:c4:1e:ef:db:
74:e9:da:8f:4a:b5:56:c2:7d:84:f3:48:07:ae:9f:16:07:61:
57:75:6e:b4:23:e3:c7:cc:2b:e3:39:9f:59:7f:e6:4e:f1:70:
f1:e9:6d:d9:a8:c2:ea:1f:e2:85:32:b1:85:8d:30:7d:59:3f:
99:61:19:5f:cc:63:59:c5:e8:fc:bf:6b:9d:09:6e:26:fd:fc:
02:44:50:17:19:73:cd:94:67:4d:0d:03:62:7c:1c:47:e4:7d:
38:f4:f6:d6:87:54:f4:e2:31:3c:46:ce:2e:ea:92:29:0d:6e:
e6:62:a1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 05:09:06 2024 by rpki-client on console-ams.rpki-client.org