Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/mfsJHB9A-fuWiA8hK_9mEBquHcM.roa
File: mfsJHB9A-fuWiA8hK_9mEBquHcM.roa (raw, json)
Hash identifier: 24E86mNkRnK2J+8zOifbeHQTHg/HNJ1qkvKZ2FowUo0=
Subject key identifier: 99:FB:09:1C:1F:40:F9:FB:96:88:0F:21:2B:FF:66:10:1A:AE:1D:C3
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0193BD4B81E95146A7A0414F67A17B20304E
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/mfsJHB9A-fuWiA8hK_9mEBquHcM.roa
Signing time: Thu 12 Dec 2024 23:54:22 +0000
ROA not before: Thu 12 Dec 2024 23:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 45.88.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bd:4b:81:e9:51:46:a7:a0:41:4f:67:a1:7b:20:30:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Dec 12 23:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99fb091c1f40f9fb96880f212bff66101aae1dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dc:dd:8e:e2:63:7f:4e:de:5e:99:3b:b8:b8:
1f:7c:19:31:52:82:f1:22:ec:a6:20:0e:b9:a7:a3:
98:c3:9f:de:01:eb:61:2f:ea:9a:3e:9c:fd:c1:10:
f6:e6:5b:72:ac:a1:67:74:de:0b:97:95:41:ab:65:
37:6d:4d:74:bb:82:dc:a4:70:64:86:f8:1a:61:fa:
e0:b4:23:17:a3:6c:cd:9d:60:eb:4e:38:bf:a0:0c:
49:56:3a:5d:c5:d8:94:04:97:c0:de:3f:6f:ed:2e:
39:c4:4c:59:14:14:ad:e6:6c:1c:6a:98:70:cf:07:
df:56:ef:3f:7d:2e:06:1e:b4:4b:ab:cf:49:c1:61:
83:58:00:8a:63:f9:10:02:ac:17:00:df:cc:01:7e:
41:dd:5f:ed:d4:78:ed:da:7d:4b:c7:4b:5f:5f:c0:
ee:50:75:ae:9f:a8:10:ca:de:1b:a9:e4:6c:3c:bc:
4d:c1:b1:a0:16:64:8b:39:c5:e9:82:97:82:f7:af:
d7:79:cb:2e:1a:91:c0:e6:90:0c:8c:77:d2:c1:65:
71:79:0e:0f:30:48:55:56:ab:b6:94:93:fc:eb:0b:
7e:10:f7:a8:d8:84:40:7c:2c:24:35:12:53:66:fd:
f0:e7:c4:c6:48:f5:f5:80:f4:bf:1d:7a:d0:87:9f:
56:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FB:09:1C:1F:40:F9:FB:96:88:0F:21:2B:FF:66:10:1A:AE:1D:C3
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/mfsJHB9A-fuWiA8hK_9mEBquHcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.144.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:6b:fc:6b:e3:4b:23:f1:b8:14:33:bf:62:95:bf:4e:9e:c6:
ac:9f:10:8e:2f:b2:12:59:10:10:3e:d8:f8:f6:e0:10:21:51:
fb:88:59:59:73:7a:5d:f3:9a:49:d5:98:67:e6:b2:3a:58:69:
2d:5c:91:bd:38:ec:9a:2a:d7:45:83:19:49:46:82:97:25:2c:
85:a5:c2:40:74:f3:11:9f:76:fa:08:15:75:94:50:a0:86:f7:
da:45:47:5f:15:b8:e6:1c:8d:71:c0:da:d5:ec:e8:c9:35:07:
dd:72:05:19:42:4e:de:b5:83:df:cc:09:ee:19:10:6b:5c:6e:
93:ed:e0:f3:27:5e:a9:2d:51:df:76:de:8d:22:02:86:75:a8:
60:72:fb:bf:24:0d:c2:d2:cb:28:59:bf:0a:25:8a:ea:2a:b5:
39:b6:da:a6:f3:d6:90:bb:9a:70:74:33:4e:96:6f:dc:01:40:
49:4a:2e:8e:d4:21:a7:e4:90:83:03:e1:29:70:58:9b:33:49:
7d:2f:10:d2:db:6c:ce:9e:64:57:5b:c5:7f:b0:bb:58:f5:47:
65:eb:81:21:36:5c:f3:ff:36:ef:17:f0:d8:d9:30:ef:a9:9e:
23:33:18:f4:07:4d:32:e1:44:b3:4b:d5:99:f9:a6:88:9f:11:
27:d0:f5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:44:09 2025 by rpki-client