Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/MIyYEXeFqnu4-jOpnEHBBTeKhnM.roa
File: MIyYEXeFqnu4-jOpnEHBBTeKhnM.roa (raw, json)
Hash identifier: bRzu/VxKU9JjjZ+NN0RRqM3wtdZnl7QY/tUFIH6o4tY=
Subject key identifier: 30:8C:98:11:77:85:AA:7B:B8:FA:33:A9:9C:41:C1:05:37:8A:86:73
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0187233FCD85D7634050D8B4580BCC00FF76
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/MIyYEXeFqnu4-jOpnEHBBTeKhnM.roa
Signing time: Mon 27 Mar 2023 13:26:36 +0000
ROA not before: Mon 27 Mar 2023 13:26:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25098
IP address blocks: 31.40.196.0/22 maxlen: 22
212.115.100.0/22 maxlen: 22
212.107.4.0/22 maxlen: 22
141.98.48.0/22 maxlen: 22
188.119.68.0/22 maxlen: 22
85.8.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 12 Apr 2023 19:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:3f:cd:85:d7:63:40:50:d8:b4:58:0b:cc:00:ff:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Mar 27 13:26:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=308c98117785aa7bb8fa33a99c41c105378a8673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ca:b6:b2:7e:9e:3d:a5:cc:0a:c7:c1:75:53:
2c:ba:2e:5a:2a:0d:20:09:0c:aa:c7:cb:a5:57:19:
02:3c:db:0e:ba:35:dc:1f:2b:32:5f:21:aa:39:ad:
19:6c:57:f6:97:03:4d:52:65:d6:35:ba:42:27:f1:
b2:b9:92:df:fb:01:a5:57:fa:6e:4a:28:50:99:a2:
9a:13:42:eb:62:dc:49:e1:59:19:f8:79:22:92:b7:
47:03:28:a0:cb:91:08:09:5a:4f:57:0a:81:6b:f5:
26:2c:1b:a7:87:fd:51:90:be:ac:22:e0:0d:d9:77:
0a:1f:af:87:ad:8c:1b:83:f2:eb:ac:02:dc:ee:26:
55:74:4a:ad:7c:9b:93:b0:02:01:2b:ed:05:22:37:
53:f0:16:45:95:6e:7d:3d:3c:24:2e:d8:e5:08:1d:
f8:00:6f:3f:71:94:0d:f0:e7:1d:66:0d:05:b0:f7:
ee:43:64:9d:b2:90:84:44:18:24:d1:f0:84:3e:96:
c5:d9:5d:f3:aa:8d:36:50:c5:30:89:80:c8:6e:7b:
9b:d5:07:d7:aa:91:12:e6:1d:40:bc:00:67:7d:4a:
79:e8:c6:b2:39:84:3c:32:28:3b:42:48:58:4b:b7:
ee:c7:59:64:0d:e0:53:41:0d:f7:d7:bf:37:e1:65:
d9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8C:98:11:77:85:AA:7B:B8:FA:33:A9:9C:41:C1:05:37:8A:86:73
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/MIyYEXeFqnu4-jOpnEHBBTeKhnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.196.0/22
85.8.144.0/22
141.98.48.0/22
188.119.68.0/22
212.107.4.0/22
212.115.100.0/22
Signature Algorithm: sha256WithRSAEncryption
26:82:1b:28:2c:19:43:fc:9b:6f:1e:fd:ef:a9:b0:b4:de:04:
1e:4d:2b:95:de:a9:66:b5:a8:3f:58:a9:26:d6:cb:27:75:7e:
90:d8:9f:5e:f3:00:88:d3:91:c6:bb:fe:76:09:b5:41:84:02:
d2:35:e2:d8:01:f0:0d:ec:aa:5b:93:f3:99:75:b2:9d:c9:11:
b9:66:f1:a1:ef:dc:32:5a:67:54:9e:c7:64:3f:fb:83:2c:be:
4a:f2:99:2a:7b:97:17:5f:33:51:21:d3:ba:13:cb:d7:d9:f8:
72:1f:54:45:2d:d9:0f:af:16:c0:33:cc:ae:a0:6d:e3:8d:da:
14:14:0e:33:30:e5:5d:3a:4e:2b:db:81:96:b5:42:a2:c8:57:
3f:f5:6e:36:63:ce:5a:96:25:36:10:c0:08:49:30:37:7a:e4:
ef:b5:04:76:62:11:0c:06:42:5c:29:08:e7:e5:58:ea:73:3a:
85:4c:65:9e:15:f5:68:7e:71:52:29:62:07:fc:a3:c5:da:3d:
97:03:9e:30:7f:a0:4c:de:b0:b7:37:a6:29:68:f9:dc:05:b4:
bd:3b:22:f1:ac:e7:a2:fc:2f:25:14:c6:79:51:86:26:86:d0:
e8:5e:5b:8d:5e:4f:6c:51:c9:32:ba:d2:cf:00:f6:47:53:74:
6d:47:c1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:50 2024 by rpki-client on console-fra.rpki-client.org