Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/MwBitqzCf28VLrwqaXimwSnQoxI.roa
File: MwBitqzCf28VLrwqaXimwSnQoxI.roa (raw, json)
Hash identifier: KsyfgYcCDLCwdqipr4w9fM0BRguxfFLRGKEdPhYBGPo=
Subject key identifier: 33:00:62:B6:AC:C2:7F:6F:15:2E:BC:2A:69:78:A6:C1:29:D0:A3:12
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC4255C38E6D297DA7B9721AE3BE91FA1
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/MwBitqzCf28VLrwqaXimwSnQoxI.roa
Signing time: Mon 01 Jan 2024 08:30:31 +0000
ROA not before: Mon 01 Jan 2024 08:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40676
IP address blocks: 193.221.192.0/24 maxlen: 24
193.221.193.0/24 maxlen: 24
193.221.194.0/24 maxlen: 24
83.143.118.0/24 maxlen: 24
45.90.144.0/24 maxlen: 24
212.107.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 17:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5c:38:e6:d2:97:da:7b:97:21:ae:3b:e9:1f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=330062b6acc27f6f152ebc2a6978a6c129d0a312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0b:d1:86:2a:82:98:77:ef:91:22:e8:16:ae:
71:16:0e:3f:36:4a:db:ad:91:70:91:59:bf:62:1d:
70:7b:3f:45:3a:ac:eb:0e:cc:72:56:94:80:c1:a1:
5e:b8:5b:88:65:4c:9a:4b:5d:2e:85:7d:70:0a:d3:
03:7c:c3:30:8d:61:50:50:fc:0f:df:bf:a7:0c:3e:
4a:fc:2d:61:05:40:13:18:1d:14:5c:65:81:aa:48:
b0:67:4b:d8:1a:23:7c:6c:a1:f2:c4:39:0b:40:88:
04:a3:e8:85:7a:5c:3d:ba:ac:51:d2:1d:30:74:ab:
d5:60:bf:47:ac:53:9b:1f:79:37:60:3a:94:55:a3:
78:f8:43:06:84:11:17:d8:34:f6:1e:18:d6:b5:4c:
6a:10:1b:5d:83:e3:b8:94:5a:fd:32:be:cc:c9:75:
38:62:c8:0c:e8:f4:48:ba:f0:74:9e:65:ce:69:cd:
d0:65:a8:83:14:30:7a:f8:ac:8c:e7:03:1f:59:3d:
af:a6:9e:89:75:ed:cc:f6:5c:8c:d1:ee:fa:1e:10:
06:2a:d3:3b:08:9d:d3:35:47:36:18:b3:f3:70:cd:
e1:31:cb:95:46:49:cd:7e:43:f0:69:04:10:aa:dd:
ff:cf:17:54:75:dc:a8:75:6d:ce:42:80:75:c8:1c:
38:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:00:62:B6:AC:C2:7F:6F:15:2E:BC:2A:69:78:A6:C1:29:D0:A3:12
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/MwBitqzCf28VLrwqaXimwSnQoxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.144.0/24
83.143.118.0/24
193.221.192.0-193.221.194.255
212.107.13.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:12:40:d5:62:5c:99:7f:be:36:8a:1a:ad:4b:1a:2b:b1:0f:
95:2b:18:55:fa:0d:1c:8b:05:d6:f2:ce:ff:03:d1:3b:fc:2a:
f4:0e:ce:96:12:a5:1e:19:89:67:e5:ad:9a:5c:b3:74:45:8a:
1d:b6:0d:3b:a4:11:8e:8b:3b:8e:cb:0e:12:16:fe:40:01:f8:
d9:26:66:82:ad:50:29:33:7b:37:8b:c0:56:6b:c0:bf:70:b0:
57:e8:16:63:c4:4c:b7:36:aa:de:66:38:d9:e9:70:48:15:0a:
7c:01:cf:16:6b:0e:3c:34:a5:5d:ea:60:26:7d:59:88:d5:30:
93:ba:d1:8b:ac:5e:5e:12:30:87:b2:f2:b5:14:49:1a:86:06:
1a:dd:13:1a:0b:ad:86:1c:a1:de:d9:34:e8:92:ba:3c:86:77:
7c:0f:d1:fd:1d:93:5d:64:ac:9e:76:c3:82:fb:fc:8a:db:1b:
0e:89:a8:b9:c5:dd:6a:a7:1f:af:3c:e7:c0:d8:9f:8e:f0:ce:
27:b0:da:c9:8e:f4:48:27:96:b0:f6:2d:62:a6:81:9f:0a:9d:
13:24:48:65:ef:b7:10:fb:10:7f:08:67:d3:10:72:5a:19:09:
17:b7:29:17:ec:59:2c:e6:b8:fe:07:37:d8:5d:54:4b:2b:8c:
aa:a7:d1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 20:37:36 2024 by rpki-client on console-ams.rpki-client.org