Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/mukolLKQBzUb7E82vCRK26Bc4FI.roa
File: mukolLKQBzUb7E82vCRK26Bc4FI.roa (raw, json)
Hash identifier: +SixxSILSBDmKOhPCNJv53k6AcILZMrXDrU4rJXjigY=
Subject key identifier: 9A:E9:28:94:B2:90:07:35:1B:EC:4F:36:BC:24:4A:DB:A0:5C:E0:52
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01856EAA2BD2838E1AF5328BC9E01A0492D5
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/mukolLKQBzUb7E82vCRK26Bc4FI.roa
Signing time: Sun 01 Jan 2023 18:48:44 +0000
ROA not before: Sun 01 Jan 2023 18:48:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397423
IP address blocks: 45.150.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:aa:2b:d2:83:8e:1a:f5:32:8b:c9:e0:1a:04:92:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 1 18:48:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ae92894b29007351bec4f36bc244adba05ce052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cb:52:e2:1e:2f:6d:dd:6b:5b:de:48:d9:c4:
92:71:3a:87:b8:2f:fd:b5:40:69:67:5d:ee:2e:a3:
0b:fd:3d:2d:23:e2:d4:04:b6:7c:1e:49:1e:38:d0:
60:ad:6d:f4:f0:fb:09:f9:6a:6e:71:f7:3a:f1:30:
d6:2d:9a:78:89:aa:1e:3f:13:c8:cc:e9:1f:ce:cc:
03:17:05:5d:de:13:96:45:a9:45:dc:42:a6:81:e0:
91:3d:bb:66:40:4f:b2:79:ac:a0:5d:6c:1b:72:b5:
c1:15:c9:13:22:ae:fe:5e:7a:eb:79:a0:e3:2f:43:
ce:69:23:a2:e2:db:37:2a:31:8a:6d:93:90:0e:93:
27:0b:bb:97:89:35:79:a4:0c:7d:6d:59:c6:f3:0c:
94:03:57:04:b4:22:aa:42:9a:c4:6f:e1:08:bd:fd:
a5:72:22:2f:a8:6e:f1:99:9a:75:f7:75:90:a0:4c:
24:d2:e9:9a:45:ff:d2:4f:51:5d:68:44:a4:8c:a7:
88:b7:c5:3a:8c:f1:61:90:df:32:df:7b:c0:6c:03:
ef:7f:b8:c3:28:c1:bd:ca:f9:fd:fe:d3:7a:28:a6:
b7:4a:09:21:f5:34:e2:16:84:21:08:46:25:21:fe:
7d:9b:3a:35:cb:84:21:7e:52:05:d4:ae:1c:d8:a1:
cd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E9:28:94:B2:90:07:35:1B:EC:4F:36:BC:24:4A:DB:A0:5C:E0:52
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/mukolLKQBzUb7E82vCRK26Bc4FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.173.0/24
Signature Algorithm: sha256WithRSAEncryption
60:09:a5:a3:24:2f:11:30:9b:dd:c8:fa:28:f1:17:ec:3f:99:
d8:b8:66:bf:bf:85:bc:8e:3e:e8:2f:f5:da:15:25:d0:88:ad:
37:31:41:66:ab:1b:13:1f:88:71:9a:92:ce:25:f4:4d:73:92:
a1:fa:75:c1:9b:8d:d1:56:3b:e0:99:5c:ad:60:07:f6:fc:b8:
10:9c:e2:eb:56:02:ff:09:5d:62:ee:d7:61:45:f4:45:59:bb:
04:16:72:b8:f7:85:b2:08:22:8c:26:e6:a4:4e:cb:dd:6d:c7:
22:9f:50:00:13:8a:2a:df:f7:fe:88:3e:01:d3:9a:3a:62:3c:
52:15:88:7b:0b:fe:9f:bd:9d:3b:7b:03:cc:90:c2:c5:2b:eb:
cf:60:d2:c2:2d:14:26:0d:2e:e3:33:95:c2:7b:2a:a6:c1:f1:
6b:86:aa:0f:03:61:cd:f4:40:a1:a0:2a:86:6a:fc:ec:d8:d0:
a6:b9:67:75:99:21:53:3b:e1:42:28:45:5b:e3:fc:48:45:cc:
dd:30:38:5f:1a:f4:80:f0:4e:3c:84:b5:21:f9:01:f4:fe:28:
0e:6f:bd:d0:6c:1d:b0:20:81:bd:44:3d:5d:3b:b5:9f:5e:94:
9c:0b:71:60:bd:b6:50:7e:1e:5c:5c:a1:86:01:50:47:6a:f2:
bb:b6:4d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:47 2024 by rpki-client on console-fra.rpki-client.org