Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/mJvsw3cPDFKtiqGgvdNzZ24CTpw.roa
File: mJvsw3cPDFKtiqGgvdNzZ24CTpw.roa (raw, json)
Hash identifier: Yfmd4eMzBa/ubAoMsxx0Dut8FtG5pvPYZ/f0TkSm9XA=
Subject key identifier: 98:9B:EC:C3:77:0F:0C:52:AD:8A:A1:A0:BD:D3:73:67:6E:02:4E:9C
Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial: 018DA74DAC1321B0C5C9B7C1DE2A22AA544C
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/mJvsw3cPDFKtiqGgvdNzZ24CTpw.roa
Signing time: Wed 14 Feb 2024 11:08:21 +0000
ROA not before: Wed 14 Feb 2024 11:08:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216154
IP address blocks: 45.10.172.0/23 maxlen: 23
45.10.172.0/24 maxlen: 24
84.252.102.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 22 Mar 2024 06:44:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:4d:ac:13:21:b0:c5:c9:b7:c1:de:2a:22:aa:54:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Validity
Not Before: Feb 14 11:08:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=989becc3770f0c52ad8aa1a0bdd373676e024e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bf:ed:b7:2d:a9:78:ed:37:8a:fe:e6:5a:85:
94:2b:de:9c:16:30:34:2d:20:22:5e:85:e4:54:e1:
77:60:cd:b7:3d:d5:c4:d6:d3:ac:b8:a0:62:ca:dc:
0a:aa:36:a0:5d:9b:a6:b9:19:24:b6:1c:e3:86:0a:
9a:ef:a9:f6:0f:ff:b7:f2:71:a2:21:a1:e3:c6:17:
ab:b9:dc:9f:ab:73:81:c7:55:c2:98:1f:ea:61:6e:
f2:84:a4:8e:a6:d0:60:78:01:58:08:19:ef:bf:f3:
d8:ed:7a:00:d2:75:6d:e1:8b:25:0f:92:b2:6d:45:
a1:69:87:38:d6:39:e0:09:4d:c4:3d:12:aa:5c:b6:
ae:5a:9f:fe:98:65:9f:e1:9b:ee:ba:b3:47:dd:ba:
ef:78:37:a8:e9:76:f9:b8:fa:93:c2:39:46:fc:69:
3d:da:33:b8:6d:ba:9f:aa:fe:20:b5:fe:bd:5e:dd:
7b:58:7b:80:bd:88:8e:0f:f1:d9:ef:1b:4f:f1:be:
88:ce:72:84:5a:59:d8:52:eb:0e:f2:69:87:a6:40:
9e:77:09:34:25:67:34:27:bc:1e:7d:7f:1e:50:c1:
b3:ff:c6:40:ac:6b:37:fa:68:35:b0:db:30:8b:99:
77:06:40:31:07:3d:50:23:78:a2:20:05:f4:96:b0:
65:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9B:EC:C3:77:0F:0C:52:AD:8A:A1:A0:BD:D3:73:67:6E:02:4E:9C
X509v3 Authority Key Identifier:
keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/mJvsw3cPDFKtiqGgvdNzZ24CTpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.172.0/23
84.252.102.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:8f:a9:9e:f2:a0:76:c2:1e:6e:6c:de:de:5a:32:7e:3f:01:
e3:03:21:1b:97:37:6d:5d:7c:f6:70:6a:26:93:ea:d6:12:55:
3c:35:94:48:2a:d7:72:75:23:49:7c:b8:cc:e6:b8:d0:23:64:
31:d9:2a:c7:1f:da:b0:a1:90:25:ab:8b:56:1e:d9:1b:51:ea:
b0:a2:81:22:d2:9d:ac:4d:8d:af:2c:c8:09:4e:c2:dd:e8:65:
70:9b:1c:34:c3:7c:e8:80:8b:0b:01:46:ff:cd:23:4b:c8:d3:
66:d4:1d:fe:94:f3:7e:20:5d:34:ef:c6:db:3f:c8:43:69:fd:
d8:96:f0:1f:d3:1d:2d:bc:1c:91:2e:35:bc:8b:10:f8:a1:74:
fe:f7:e9:ce:70:18:cc:9c:2a:c0:fa:53:23:44:8d:f7:0a:3e:
ce:bd:2a:2d:e7:27:58:f9:2e:ab:14:a6:b6:87:c0:b1:3c:2c:
79:75:02:3d:69:ba:4b:f0:0c:ef:9c:6e:58:83:31:0a:29:25:
79:e0:55:ff:89:33:20:e2:52:fd:58:22:f3:93:33:2c:6d:48:
b5:92:21:30:33:33:d1:26:95:0b:ce:7b:2e:e1:07:7c:b0:2f:
ad:52:b0:89:31:85:4b:6d:82:76:bd:7f:b2:f4:f6:d8:3e:27:
fe:15:cb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:39 2024 by rpki-client on console-ams.rpki-client.org