Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/MSSxB1uBmrMgtNLjT8Liatm7EzY.roa
File: MSSxB1uBmrMgtNLjT8Liatm7EzY.roa (raw, json)
Hash identifier: bb4vTXTVb4Lp3heTJSncPUpi1rAyS0NDJjlTozyurTw=
Subject key identifier: 31:24:B1:07:5B:81:9A:B3:20:B4:D2:E3:4F:C2:E2:6A:D9:BB:13:36
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018A8991A46E7F63F8751A24EB1461BF9B85
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/MSSxB1uBmrMgtNLjT8Liatm7EzY.roa
Signing time: Tue 12 Sep 2023 13:25:37 +0000
ROA not before: Tue 12 Sep 2023 13:25:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212653
IP address blocks: 193.34.79.0/24 maxlen: 24
83.143.117.0/24 maxlen: 24
185.185.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:89:91:a4:6e:7f:63:f8:75:1a:24:eb:14:61:bf:9b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Sep 12 13:25:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3124b1075b819ab320b4d2e34fc2e26ad9bb1336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:5d:05:51:9c:d0:5f:d9:d7:f2:51:c0:00:
e3:2d:b8:fe:d2:db:db:71:3e:61:08:36:b4:34:a4:
62:8b:5d:b7:d3:e3:57:b1:af:59:a4:8b:d1:7f:3c:
33:7b:b1:7b:8e:68:81:00:f3:0b:08:83:c6:57:f1:
93:3d:db:7c:ae:4f:3a:e1:25:ee:d5:13:2a:f3:8a:
4d:e7:49:17:13:a3:da:1b:c8:b7:b9:9a:81:a2:36:
06:4f:89:91:1a:62:b0:c9:81:78:d9:5e:11:17:b1:
24:12:d7:a8:7a:b5:3e:4e:55:3a:a9:f4:47:7a:d0:
9b:aa:91:74:b1:d7:95:90:a9:ca:2c:a4:a5:6e:73:
f9:27:15:0b:80:60:92:a7:e7:51:71:a9:ba:24:be:
ab:3d:04:d5:6e:11:d7:57:8f:c6:84:06:c5:3c:91:
97:87:fa:14:a9:62:04:d4:c0:de:80:9f:eb:6c:d3:
da:da:8c:83:42:cd:62:0d:7c:22:2f:10:11:ea:93:
11:9c:2f:be:ec:ef:fe:4e:f1:a2:26:c1:38:4c:a5:
dd:89:22:21:5f:b0:db:5a:64:61:c4:ce:6d:99:80:
9f:63:ae:a4:43:d6:5c:9f:95:63:76:d2:13:b9:ec:
d8:18:a4:25:2d:5e:ad:a4:98:77:bd:26:2d:82:06:
ea:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:24:B1:07:5B:81:9A:B3:20:B4:D2:E3:4F:C2:E2:6A:D9:BB:13:36
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/MSSxB1uBmrMgtNLjT8Liatm7EzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.117.0/24
185.185.43.0/24
193.34.79.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:2b:d4:38:d7:ef:f9:8a:c3:2d:12:00:89:cd:5d:2c:1c:bb:
fa:7d:84:62:7a:16:df:a0:61:94:d4:59:f0:3a:ec:a5:13:90:
c7:ae:61:56:3c:1b:de:41:ec:b7:f8:a1:d6:a8:f0:e3:59:a2:
bb:8c:5c:69:d1:2c:75:c8:76:cc:38:09:93:22:05:87:20:ba:
a7:c2:86:a0:be:5b:37:a3:18:36:4d:cb:14:72:5c:07:5a:0c:
df:59:da:33:de:48:2d:45:3d:42:d3:7a:0e:81:79:ed:43:a2:
cc:e7:b6:61:9e:b3:3a:f8:58:0e:6c:e0:fb:8d:47:6b:70:1d:
15:b5:84:2a:14:74:76:ca:39:eb:8f:e5:99:c9:c4:96:8a:3c:
77:32:73:e5:33:59:00:a6:1f:8f:ec:84:00:46:c5:8d:5f:39:
da:92:82:57:48:43:fb:27:e1:6d:74:54:0b:48:09:48:a0:87:
ae:6e:ff:14:97:20:1e:21:58:98:cb:cb:d9:db:74:43:b2:f5:
ca:02:be:64:ac:cb:ed:1c:2a:45:71:31:e7:22:67:10:ea:f4:
40:84:99:60:52:c0:28:27:44:e9:37:ef:1e:0a:95:e4:12:21:
f2:e0:fd:ae:d2:55:b2:f9:92:83:5b:da:9c:e6:19:3a:ae:28:
11:ed:3d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:39 2024 by rpki-client on console-ams.rpki-client.org