Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/MMQ6L_YY5XUBQF1At5os5dqnKcs.roa
File: MMQ6L_YY5XUBQF1At5os5dqnKcs.roa (raw, json)
Hash identifier: LT+iMsacPpxbXtliPwLQkqReOBYuTw0DkHRAG7POkJI=
Subject key identifier: 30:C4:3A:2F:F6:18:E5:75:01:40:5D:40:B7:9A:2C:E5:DA:A7:29:CB
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018ABCDD0A7660B8218392BBD04A60EB5A52
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/MMQ6L_YY5XUBQF1At5os5dqnKcs.roa
Signing time: Fri 22 Sep 2023 12:28:37 +0000
ROA not before: Fri 22 Sep 2023 12:28:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208161
IP address blocks: 87.248.138.0/24 maxlen: 24
87.248.139.0/24 maxlen: 24
87.248.137.0/24 maxlen: 24
87.248.152.0/23 maxlen: 24
87.248.150.0/24 maxlen: 24
87.248.155.0/24 maxlen: 24
87.248.156.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:dd:0a:76:60:b8:21:83:92:bb:d0:4a:60:eb:5a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Sep 22 12:28:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30c43a2ff618e57501405d40b79a2ce5daa729cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bb:de:d4:4e:77:66:b9:2f:5d:3b:00:60:11:
e5:06:8b:08:9d:3b:18:19:14:2a:8c:6d:93:58:d0:
b7:a0:57:8b:a0:41:2e:86:36:bf:f4:13:05:07:57:
6e:4c:61:60:37:2d:96:07:29:ad:cd:8c:eb:99:7d:
a6:a2:30:e2:51:09:3a:75:f3:7f:66:bf:8b:e9:5c:
2e:4b:38:9f:4b:ec:f0:7f:00:79:2f:ab:a6:4d:91:
71:23:19:0c:05:51:c8:c3:31:e5:d6:11:dc:a7:b4:
8a:97:c4:3d:41:8c:b9:22:0d:19:70:f8:08:f7:ca:
bb:98:41:05:b7:8e:ca:fb:a5:b0:6b:8e:46:ab:64:
41:bd:4f:2b:b7:07:20:9e:ae:6f:38:13:af:dd:be:
77:f0:f6:a6:5c:6b:78:cb:48:41:c2:5c:a0:0a:3d:
e5:32:23:14:68:97:01:cf:8e:15:f2:00:05:4b:07:
4d:dc:28:9f:d8:f6:48:11:a5:19:cd:22:53:88:cb:
e2:af:6d:70:86:cf:29:98:e6:09:3a:a2:de:34:a6:
3d:e1:6f:5d:6f:86:0a:df:cf:2d:5e:5b:ae:7c:41:
6f:5e:8d:0d:4b:14:7b:87:da:86:01:2d:d6:52:cc:
22:85:84:f3:54:cb:a5:8e:a1:55:03:13:64:d5:45:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C4:3A:2F:F6:18:E5:75:01:40:5D:40:B7:9A:2C:E5:DA:A7:29:CB
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/MMQ6L_YY5XUBQF1At5os5dqnKcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.137.0-87.248.139.255
87.248.150.0/24
87.248.152.0/23
87.248.155.0-87.248.156.255
Signature Algorithm: sha256WithRSAEncryption
08:8d:3b:d2:b2:f2:a3:46:3d:66:54:2d:9c:a3:c9:74:62:05:
6f:74:36:e2:24:51:16:b5:d3:6b:ed:89:ce:42:25:28:2e:03:
b4:59:5a:53:1b:17:f3:3a:50:4c:5c:63:2f:ff:d6:ad:d7:6f:
55:64:5d:19:bf:79:4f:6f:24:b9:2f:71:e6:e8:28:c7:35:15:
dd:e8:fd:7a:e2:68:98:4a:d6:8c:83:a8:a2:fe:f6:32:cd:5a:
17:9a:2f:56:97:85:01:93:58:26:24:4e:00:49:6a:21:44:fc:
bb:97:a5:55:c8:21:31:60:ac:a5:80:c4:d1:0f:91:9e:8c:44:
17:44:e4:54:47:08:f7:35:07:a8:f9:78:01:5b:4f:23:42:06:
7a:50:0b:8a:f1:b7:36:0d:54:96:aa:37:1e:5e:4b:83:5a:ab:
a6:e1:ef:55:b6:b4:e5:1a:4d:1b:21:01:ce:0e:34:8e:62:20:
cd:d6:03:31:87:e1:66:c6:0f:1e:82:ec:27:82:71:c3:cb:f8:
34:22:73:48:ff:2a:3f:6e:64:66:63:30:1a:bc:b6:cc:46:a8:
c2:68:6a:17:9f:56:8c:1e:6e:80:d9:8f:17:c6:44:5a:eb:06:
81:58:21:b5:e4:a2:74:ae:a6:d1:cf:9d:82:c3:41:b1:a6:dc:
36:d9:4b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:19 2024 by rpki-client on console-fra.rpki-client.org