Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/mTUuMouDLgt56unSnw6levDuRcM.roa
File: mTUuMouDLgt56unSnw6levDuRcM.roa (raw, json)
Hash identifier: GNSvneHU6TmAxezIIMdeRg/Prm9OQTocJm9W62UbSlo=
Subject key identifier: 99:35:2E:32:8B:83:2E:0B:79:EA:E9:D2:9F:0E:A5:7A:F0:EE:45:C3
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 018BF0AFE79FABF24116DC070093561590A0
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/mTUuMouDLgt56unSnw6levDuRcM.roa
Signing time: Tue 21 Nov 2023 07:02:21 +0000
ROA not before: Tue 21 Nov 2023 07:02:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202592
IP address blocks: 185.96.56.0/22 maxlen: 24
194.38.48.0/22 maxlen: 24
193.168.200.0/22 maxlen: 24
193.160.220.0/22 maxlen: 24
185.136.16.0/22 maxlen: 24
147.185.196.0/23 maxlen: 24
147.185.206.0/23 maxlen: 24
207.244.196.0/22 maxlen: 24
43.240.148.0/22 maxlen: 24
207.244.208.0/22 maxlen: 24
45.12.100.0/22 maxlen: 24
2a07:5b40::/29 maxlen: 48
2a05:ff00::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:af:e7:9f:ab:f2:41:16:dc:07:00:93:56:15:90:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Nov 21 07:02:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99352e328b832e0b79eae9d29f0ea57af0ee45c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9b:72:8f:0e:eb:da:c3:19:f3:42:6d:b9:e4:
49:c4:9d:62:23:9a:22:09:01:58:d9:b8:08:2f:a7:
e9:2a:e2:1c:33:f3:fe:f1:5e:42:4a:e8:6e:f3:64:
57:88:eb:97:48:cf:5f:15:1f:df:74:d0:74:c8:83:
e0:8b:0a:51:c7:db:9d:f5:a6:04:ad:14:82:c3:6d:
42:4a:e2:97:48:9c:0b:a7:51:f6:5d:69:f8:77:f6:
be:1b:22:3c:68:8b:c0:23:79:0d:29:95:23:74:69:
cd:57:63:95:7c:ba:10:df:4f:9a:fa:21:44:15:15:
60:42:9d:04:0e:b2:84:63:b8:4a:f3:ae:0e:92:18:
a6:4a:f3:74:17:60:65:52:3c:bf:49:dd:6a:35:96:
2f:8b:37:bd:48:d3:4f:42:54:8b:3b:a4:6c:1e:ee:
8e:f2:cc:4d:2a:8a:88:2f:b9:2a:9f:c3:48:06:fc:
2f:87:2e:da:55:60:5f:7b:fb:3b:df:30:af:d9:8a:
d2:46:4f:ac:7f:a2:aa:b8:80:11:e0:21:72:16:5c:
a4:49:b7:c5:f0:c5:d8:a0:7a:d6:ea:26:38:2d:5c:
16:41:f5:cd:42:cc:2f:5b:2c:84:22:21:59:b1:da:
71:23:ba:a0:40:a3:32:dc:58:ae:cf:cc:ea:d9:4f:
9d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:35:2E:32:8B:83:2E:0B:79:EA:E9:D2:9F:0E:A5:7A:F0:EE:45:C3
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/mTUuMouDLgt56unSnw6levDuRcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.148.0/22
45.12.100.0/22
147.185.196.0/23
147.185.206.0/23
185.96.56.0/22
185.136.16.0/22
193.160.220.0/22
193.168.200.0/22
194.38.48.0/22
207.244.196.0/22
207.244.208.0/22
IPv6:
2a05:ff00::/29
2a07:5b40::/29
Signature Algorithm: sha256WithRSAEncryption
85:2b:15:ed:cb:55:09:f1:11:61:6b:0d:01:cd:c6:f6:b3:00:
3d:15:50:3e:7e:68:e9:99:81:ad:fe:de:be:64:5a:90:85:95:
ea:1e:bb:0f:79:df:c6:b4:8d:e8:58:02:9e:8b:5f:bc:b1:c1:
55:9d:62:47:0a:ce:89:a9:c2:67:9a:dd:b4:a5:2f:a9:1a:07:
38:65:ac:3f:73:d6:38:dc:86:d4:0b:58:9e:6c:2a:e5:88:64:
b3:c8:68:89:bd:96:85:54:22:b6:17:87:ef:4f:5f:d7:2c:a0:
d7:25:f8:a1:7e:60:d6:46:7d:0b:fc:6b:64:95:35:ca:72:c0:
bf:5b:67:b2:3e:11:22:65:d1:5c:08:59:d7:0d:32:97:6f:92:
f1:36:6e:71:0d:1e:28:3f:99:5c:8b:b7:07:d0:e9:c0:30:15:
59:6b:12:8e:4e:0a:dd:a3:ac:47:17:f7:79:a3:d0:6b:e9:bf:
c4:97:8c:01:3a:ec:bd:ed:8c:73:5a:de:cd:a3:8d:f0:ba:51:
54:2f:65:7f:1f:1a:23:31:d2:52:71:97:82:86:83:66:be:da:
51:3a:a3:77:65:74:33:67:e7:23:ee:d6:83:95:cc:cb:58:0e:
c3:32:80:f5:cd:7c:48:8f:1f:bd:53:b6:f7:62:b4:4d:f8:f6:
41:67:9c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:07 2024 by rpki-client on console-fra.rpki-client.org