Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/mbMoLasEOloIYrS4qN_iKK1j_Bs.roa
File: mbMoLasEOloIYrS4qN_iKK1j_Bs.roa (raw, json)
Hash identifier: pGMRrvnnFd+PenmxD57dki8LBv2UufLJ5KuV9H2tKAo=
Subject key identifier: 99:B3:28:2D:AB:04:3A:5A:08:62:B4:B8:A8:DF:E2:28:AD:63:FC:1B
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01906010E795CCDC24C8F7A54841FE8A144F
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/mbMoLasEOloIYrS4qN_iKK1j_Bs.roa
Signing time: Fri 28 Jun 2024 18:17:18 +0000
ROA not before: Fri 28 Jun 2024 18:17:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142594
IP address blocks: 2.56.166.0/24 maxlen: 24
45.90.145.0/24 maxlen: 24
77.83.241.0/24 maxlen: 24
185.234.74.0/24 maxlen: 24
194.31.140.0/24 maxlen: 24
194.56.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 22:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:60:10:e7:95:cc:dc:24:c8:f7:a5:48:41:fe:8a:14:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jun 28 18:17:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99b3282dab043a5a0862b4b8a8dfe228ad63fc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:88:d6:8e:30:ff:0d:df:79:11:12:07:65:
31:a0:7b:14:3e:e8:69:ff:e4:70:7f:60:9f:44:63:
18:58:5c:04:f6:4c:4e:88:2d:29:8a:a9:94:49:3d:
4f:fa:9e:7e:c3:1d:1d:59:49:05:23:00:27:c7:cb:
06:8d:c7:30:63:49:cd:13:94:6b:19:b8:d9:f3:67:
20:c3:92:62:b1:d9:57:82:8b:e7:d0:21:10:bb:02:
68:47:d1:8c:05:18:d0:8f:61:56:12:5c:1b:28:e7:
df:31:9f:78:5b:2b:45:07:8c:f1:7f:11:fd:64:8d:
78:db:99:80:d1:e8:48:9e:5e:3f:9c:98:06:3a:7e:
ff:af:ed:68:f7:80:84:6c:a8:7f:7d:a8:2a:b0:a6:
53:d9:a7:31:88:9a:f1:a7:8a:a2:58:41:96:14:fd:
04:30:f9:9d:2e:87:b6:cf:fd:cf:27:56:3d:a2:2e:
69:2c:8f:88:75:87:23:6f:d2:fc:55:bb:14:41:e3:
96:3c:7f:2b:34:83:fc:bb:92:f1:f8:6a:21:b4:1e:
f5:ed:7e:fe:42:7e:99:db:1d:5d:61:f2:4b:9a:4d:
42:d0:88:90:8f:68:63:23:18:75:87:e4:4d:34:4f:
73:e8:55:59:06:c2:05:d6:3b:c5:39:ca:1a:17:45:
38:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B3:28:2D:AB:04:3A:5A:08:62:B4:B8:A8:DF:E2:28:AD:63:FC:1B
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/mbMoLasEOloIYrS4qN_iKK1j_Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.166.0/24
45.90.145.0/24
77.83.241.0/24
185.234.74.0/24
194.31.140.0/24
194.56.225.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:f9:4d:cc:db:70:f8:ea:4c:50:3c:2d:79:ae:e0:82:66:ba:
20:a0:e3:79:f8:8b:c8:83:e1:c8:37:04:d1:2f:ed:de:ca:8e:
3b:61:ac:0d:c8:4c:f2:d9:29:b1:e1:ef:97:70:b5:20:eb:e5:
fc:a2:03:b0:f3:b7:2d:0a:fb:38:b4:e9:9b:da:0e:bd:a9:d2:
94:c0:16:70:a5:4a:8b:91:01:bf:85:4d:87:e2:c5:bf:49:38:
05:67:6d:55:93:ea:a8:65:ba:7a:55:44:86:43:48:d5:c7:96:
bc:fe:cc:e8:df:34:23:42:0c:3f:b2:45:c0:cd:a3:a6:df:95:
bb:88:e1:70:ab:9d:14:03:f2:12:9d:a2:56:4d:92:f2:d3:c2:
c9:00:45:8a:c2:f4:a8:7a:b9:2f:4a:b2:9a:17:73:be:2b:f2:
32:32:57:16:fe:fc:73:ed:ca:44:cf:02:cb:86:31:68:6e:c3:
0a:ad:e3:de:99:87:0a:56:34:bb:c6:b8:9f:d5:cd:56:b1:a3:
05:6d:24:ee:e0:1b:1b:d0:21:ac:35:44:3c:1c:43:80:fa:c1:
11:15:7e:c7:13:87:f8:e4:2c:39:47:a8:d8:72:5f:9e:53:de:
36:1c:43:3c:d8:47:23:bc:83:cf:54:f7:02:b6:88:98:0d:dc:
7d:1b:64:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 00:27:57 2024 by rpki-client on console-ams.rpki-client.org