Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/MhHtdNOXqCeV-NusufPyJam7EgQ.roa
File: MhHtdNOXqCeV-NusufPyJam7EgQ.roa (raw, json)
Hash identifier: 5AHzGByRvXrcI2DlTI7P3XIAuOaWzNqTclAxGW9xm2I=
Subject key identifier: 32:11:ED:74:D3:97:A8:27:95:F8:DB:AC:B9:F3:F2:25:A9:BB:12:04
Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial: 01869BA100DE8DB109E5577DBCDE90BDE5C5
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/MhHtdNOXqCeV-NusufPyJam7EgQ.roa
Signing time: Wed 01 Mar 2023 05:24:25 +0000
ROA not before: Wed 01 Mar 2023 05:24:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5547
IP address blocks: 77.243.122.0/24 maxlen: 24
77.243.120.0/24 maxlen: 24
77.243.121.0/24 maxlen: 24
77.243.125.0/24 maxlen: 24
77.243.123.0/24 maxlen: 24
77.243.124.0/23 maxlen: 23
77.243.124.0/24 maxlen: 24
77.243.127.0/24 maxlen: 24
46.254.241.0/24 maxlen: 24
46.254.245.0/24 maxlen: 24
46.254.244.0/24 maxlen: 24
46.254.244.0/23 maxlen: 23
46.254.242.0/24 maxlen: 24
46.254.243.0/24 maxlen: 24
185.14.71.0/24 maxlen: 24
46.254.240.0/22 maxlen: 22
46.254.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Mar 2023 05:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9b:a1:00:de:8d:b1:09:e5:57:7d:bc:de:90:bd:e5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
Validity
Not Before: Mar 1 05:24:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3211ed74d397a82795f8dbacb9f3f225a9bb1204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:20:4a:7f:f5:4c:a6:7d:c3:7a:5a:a7:27:
8f:d4:4d:e5:5d:1c:80:b3:40:8f:d7:c5:b5:5f:0d:
32:51:71:5e:cf:6a:89:71:e1:dd:b3:74:b9:fe:68:
00:36:be:76:8d:3b:de:a1:d1:b6:d6:1a:f0:6e:c7:
cb:2e:c8:28:92:5d:15:0c:55:c9:f0:84:35:10:ba:
5b:89:89:e0:dd:9e:43:3c:33:67:07:9b:b1:61:34:
74:d4:38:b5:5b:1e:bc:42:16:19:1f:55:6d:57:6d:
fe:cd:82:9f:b5:4a:76:17:29:5f:03:81:38:ac:95:
6c:4f:62:b9:2a:56:c9:be:8a:3d:a7:fc:1b:c2:a8:
c1:84:e8:9a:65:41:df:56:84:b2:97:21:d3:1b:89:
b7:d1:32:73:a6:6e:11:ba:f8:6e:5f:aa:76:ca:d3:
e2:b4:2d:5c:b7:62:64:56:b8:6b:31:90:02:8a:c0:
34:c7:9e:74:70:59:96:c7:a6:12:a4:b8:c6:ee:aa:
b1:f2:aa:66:32:f1:f2:87:9b:86:9e:3a:97:0c:99:
58:6f:15:61:7a:f6:af:06:af:2d:6a:19:fb:76:ce:
c3:03:44:67:71:ab:b8:00:d5:e4:06:f7:0a:54:6e:
39:db:c2:e7:0b:68:42:9d:6f:55:ef:24:87:c7:b3:
c1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:11:ED:74:D3:97:A8:27:95:F8:DB:AC:B9:F3:F2:25:A9:BB:12:04
X509v3 Authority Key Identifier:
keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/MhHtdNOXqCeV-NusufPyJam7EgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.240.0-46.254.245.255
77.243.120.0-77.243.125.255
77.243.127.0/24
185.14.71.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:3d:19:7c:0f:7a:8b:d0:99:15:55:c6:ba:c7:2a:c0:f4:9a:
68:c8:66:e2:c7:5f:92:33:ba:b2:79:96:fa:3f:6a:61:00:67:
18:15:bf:f9:7a:be:5f:ef:f4:65:53:a2:4f:f2:f1:93:db:1a:
27:4c:69:3f:48:da:f0:39:67:d8:7b:7d:6b:a2:7f:05:d8:96:
71:aa:d7:e3:12:47:94:6e:88:b8:5a:74:52:1b:a4:34:9a:0b:
29:b1:62:c6:e7:7d:37:29:7a:52:7c:1d:5b:70:d6:9b:c6:19:
b4:ab:7a:28:e8:d2:a3:3a:6b:69:d4:5c:48:03:b2:bf:cf:bd:
9c:7b:4a:a0:fb:cd:d4:9f:c2:aa:b5:89:7d:c3:16:d2:6a:13:
4e:b7:39:12:2e:67:30:c7:ac:d6:ba:d5:c7:18:03:da:77:fd:
7c:c3:af:48:fb:92:f4:be:59:0f:a0:c1:a2:59:2e:a7:b0:0c:
8c:f8:91:c3:76:ca:82:92:45:3b:57:e7:00:7a:d7:ff:46:3b:
f8:dc:15:eb:3d:45:7d:d8:40:46:d7:94:c0:86:18:d3:e4:6b:
55:c7:af:da:e0:26:3d:64:90:b2:09:fc:f9:64:6a:02:0b:11:
be:2a:4c:83:f0:5d:49:7a:df:4f:e5:16:b5:0b:f3:b3:a3:d2:
59:92:7a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:06 2024 by rpki-client on console-fra.rpki-client.org