Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/mXrLiy58_pH3vCn5ek8MX_DjgTU.roa
File: mXrLiy58_pH3vCn5ek8MX_DjgTU.roa (raw, json)
Hash identifier: 22UvHYpbmB+1rhn86CyC9I2ZcREUAAlwHE7/I+/0z1k=
Subject key identifier: 99:7A:CB:8B:2E:7C:FE:91:F7:BC:29:F9:7A:4F:0C:5F:F0:E3:81:35
Certificate issuer: /CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Certificate serial: 0185718C413CC718D214885060546B52675E
Authority key identifier: 96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/mXrLiy58_pH3vCn5ek8MX_DjgTU.roa
Signing time: Mon 02 Jan 2023 08:14:55 +0000
ROA not before: Mon 02 Jan 2023 08:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56361
IP address blocks: 46.175.120.0/21 maxlen: 21
31.41.184.0/21 maxlen: 21
176.98.168.0/21 maxlen: 21
176.118.128.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:41:3c:c7:18:d2:14:88:50:60:54:6b:52:67:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Validity
Not Before: Jan 2 08:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=997acb8b2e7cfe91f7bc29f97a4f0c5ff0e38135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0c:e6:9e:0e:5d:c1:8f:be:40:31:46:df:55:
31:fe:01:07:a0:2e:72:46:7c:95:18:69:5a:ea:64:
6b:4b:9a:89:88:88:e3:fa:7d:9e:37:7b:9d:e8:9b:
8d:ee:9a:10:11:82:ee:a6:41:3e:9e:43:a3:20:0d:
09:9e:8f:c5:a5:42:7e:8b:07:fa:cd:03:d4:a6:3d:
64:70:f1:e1:2d:99:14:3f:f7:6b:38:7f:64:c0:fe:
a2:1c:77:df:f5:57:8b:26:08:76:5a:43:00:8f:67:
f8:a8:0b:a2:23:25:87:8c:1d:32:d0:c9:67:b1:d6:
df:03:c1:9c:64:1c:96:10:10:62:08:83:a1:af:46:
c0:44:5e:53:b1:1b:59:2a:93:c5:54:79:66:fe:6f:
7f:59:45:5c:b3:d4:96:24:ac:86:d4:26:a3:c1:36:
ef:ee:d9:0b:20:da:21:9c:b5:5e:58:1d:38:1e:05:
47:8d:f8:0e:76:41:07:1e:a1:f8:30:ee:e2:4e:d8:
54:09:b0:f2:da:25:6a:27:c4:73:f2:be:1b:27:bb:
bf:b7:1e:b1:86:5d:74:9b:9b:6a:b3:32:15:97:50:
df:8c:bc:44:73:92:de:83:14:5a:92:f4:c6:50:90:
b6:66:24:c4:07:1b:63:02:92:55:ba:d5:23:0c:aa:
f2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7A:CB:8B:2E:7C:FE:91:F7:BC:29:F9:7A:4F:0C:5F:F0:E3:81:35
X509v3 Authority Key Identifier:
keyid:96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/mXrLiy58_pH3vCn5ek8MX_DjgTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.184.0/21
46.175.120.0/21
176.98.168.0/21
176.118.128.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:07:95:6d:89:8e:e0:8e:d5:58:19:4d:04:fd:35:23:b9:c7:
fe:be:44:3a:f8:40:66:d2:12:dd:6d:2a:5b:e3:e1:ca:7d:d8:
3f:3d:8c:69:d8:90:4c:be:90:3b:ac:ba:99:da:fe:33:52:dc:
87:43:6b:62:7a:8f:86:d9:b5:4b:9f:75:5a:59:c2:70:d9:38:
2c:c8:04:c2:9d:00:84:b8:5a:4e:7a:e5:64:e3:52:b6:d9:84:
90:31:19:9a:1a:0f:41:de:d6:17:5b:c4:2f:44:cf:98:39:77:
c2:87:9a:ae:29:50:2f:c1:94:c5:d4:03:27:59:05:53:79:48:
79:84:37:96:5f:82:bf:cc:35:aa:06:e5:ac:f4:df:ef:23:76:
00:23:ee:a4:e0:ca:2e:a6:85:cc:d4:d9:53:d2:c2:5f:22:b1:
e9:95:18:9d:5f:99:e6:29:74:64:df:d4:02:ce:2d:5f:a0:ac:
bd:53:fb:37:18:df:4e:80:8c:c2:d6:5c:fa:7f:dc:c9:97:79:
23:99:ba:63:c0:3d:6c:b9:ad:27:6d:df:a9:bc:21:5d:49:f6:
1d:03:79:31:bc:79:f3:68:00:13:ec:a4:ae:01:0a:ad:e0:2f:
7b:61:aa:7c:bc:6e:ec:88:68:df:a1:b0:d3:55:22:34:8c:54:
d8:87:4a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:23 2024 by rpki-client on console-fra.rpki-client.org