Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/MZbU_grW4itQUekO3JpWkPtKfR4.roa
File: MZbU_grW4itQUekO3JpWkPtKfR4.roa (raw, json)
Hash identifier: 1+bO1pa9xMBU8j2YOi23ivpaeMgzFWAXjYxaQdOVbHk=
Subject key identifier: 31:96:D4:FE:0A:D6:E2:2B:50:51:E9:0E:DC:9A:56:90:FB:4A:7D:1E
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01879558DC2EF5DF0B079A96DE1A522E6CB3
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/MZbU_grW4itQUekO3JpWkPtKfR4.roa
Signing time: Tue 18 Apr 2023 17:10:41 +0000
ROA not before: Tue 18 Apr 2023 17:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.150.174.0/24 maxlen: 24
193.239.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Aug 2023 00:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:95:58:dc:2e:f5:df:0b:07:9a:96:de:1a:52:2e:6c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Apr 18 17:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3196d4fe0ad6e22b5051e90edc9a5690fb4a7d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:6f:e9:dc:04:27:42:6f:a3:fb:34:a8:c4:
66:86:dd:df:76:42:f8:f0:b9:fd:bb:72:d7:88:a4:
87:fe:79:0d:c8:c5:10:fc:12:c5:8e:17:f8:06:73:
3b:e3:86:90:d1:ab:c9:0d:f1:09:e1:10:98:50:f9:
fe:98:9a:db:1e:15:15:54:4e:48:0f:9a:fb:94:fe:
e8:67:17:b1:01:70:49:c4:b5:1d:8b:f8:53:c7:f7:
b0:b1:c2:b4:06:ae:46:53:ce:66:fa:f4:f2:8d:c0:
14:2a:3b:04:9b:cf:9d:6d:aa:2f:f2:c3:20:fb:33:
99:fb:a3:bb:64:36:2b:08:1c:48:1a:2c:5e:1d:b3:
a9:c4:f0:79:b1:fc:35:46:70:76:c6:ae:75:dd:33:
ea:24:22:1e:67:84:fb:a3:21:b4:07:96:33:ba:f1:
ef:cb:ad:77:4d:e5:1c:f0:37:7e:32:1b:df:9b:3e:
1b:fd:78:e5:bf:51:3b:9c:65:3d:13:2c:16:5b:b7:
3c:90:c5:ed:c3:f5:03:cf:92:2d:06:49:0b:4f:ed:
03:c6:86:be:17:46:c8:9a:bb:e4:47:9a:ad:b7:0a:
21:0d:a5:15:05:98:06:9c:bd:a4:aa:6a:f2:0c:82:
c1:11:c5:e8:e7:10:8d:32:6f:ff:8f:35:ec:7e:0f:
02:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:96:D4:FE:0A:D6:E2:2B:50:51:E9:0E:DC:9A:56:90:FB:4A:7D:1E
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/MZbU_grW4itQUekO3JpWkPtKfR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.174.0/24
193.239.196.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:21:32:9a:b6:20:02:12:f2:cd:cd:cb:a4:e0:2d:2c:55:21:
77:ab:c2:f8:c1:c4:0a:fb:af:50:65:e4:e2:86:c3:25:e8:47:
2d:59:8d:0f:fa:d0:c2:66:43:b8:8b:b0:70:05:06:a5:af:7d:
3f:e1:fa:ed:13:30:94:2e:3b:33:0b:a0:7d:bb:9d:99:a8:e3:
7c:7a:e7:2f:cd:91:0e:7a:ae:f4:fe:ab:7f:e3:51:ac:4a:d2:
18:46:a3:52:8a:69:c1:cf:31:c3:da:09:22:14:49:09:9d:ab:
8a:ee:9f:9b:9f:41:ea:bd:c1:be:70:d5:d0:11:51:10:9f:65:
1a:1c:50:32:4e:75:53:35:6a:1d:b3:b2:4d:31:80:4c:c9:cd:
fa:02:c6:21:85:82:e0:cd:46:da:22:80:b3:e6:db:19:26:f3:
d1:b9:4c:f3:5b:b8:b1:81:ea:58:f0:aa:c5:eb:e0:51:63:66:
0e:e4:32:44:4d:88:cd:03:64:a8:af:4f:af:af:20:5f:6b:01:
d0:e3:78:69:21:59:4b:ed:69:3c:bf:82:ba:63:87:4c:83:44:
48:bd:7b:b7:f1:97:7e:2e:80:80:07:4c:75:dd:ba:f9:8a:03:
8b:f4:c5:bd:13:6f:b3:95:37:f4:2f:09:69:f7:08:e0:43:38:
b2:b1:d8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:46 2024 by rpki-client on console-fra.rpki-client.org