Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/MSLPL3-0p5u9fc6vQjYOBRHZlxo.roa
File: MSLPL3-0p5u9fc6vQjYOBRHZlxo.roa (raw, json)
Hash identifier: Z4MZnxPdlSZFRcwYPbSK3gVZ/xutxOHdE8Xt0ZSkVos=
Subject key identifier: 31:22:CF:2F:7F:B4:A7:9B:BD:7D:CE:AF:42:36:0E:05:11:D9:97:1A
Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Certificate serial: 01856E66701E7F7B9C07146CC80ED8046F65
Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/MSLPL3-0p5u9fc6vQjYOBRHZlxo.roa
Signing time: Sun 01 Jan 2023 17:34:45 +0000
ROA not before: Sun 01 Jan 2023 17:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59545
IP address blocks: 92.63.163.0/24 maxlen: 24
92.63.162.0/24 maxlen: 24
92.63.160.0/24 maxlen: 24
92.63.160.0/21 maxlen: 24
92.63.161.0/24 maxlen: 24
109.205.199.0/24 maxlen: 32
185.69.100.0/22 maxlen: 24
178.20.248.0/21 maxlen: 24
141.138.144.0/21 maxlen: 24
141.138.145.0/24 maxlen: 24
141.138.151.0/24 maxlen: 24
141.138.148.0/24 maxlen: 24
141.138.149.0/24 maxlen: 24
141.138.146.0/24 maxlen: 24
141.138.147.0/24 maxlen: 24
2a01:a680:a1::/48 maxlen: 64
2a01:a680::/32 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:66:70:1e:7f:7b:9c:07:14:6c:c8:0e:d8:04:6f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Validity
Not Before: Jan 1 17:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3122cf2f7fb4a79bbd7dceaf42360e0511d9971a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e6:28:cc:6b:a1:17:37:f4:3b:61:bb:b7:5c:
56:44:db:ad:73:36:19:e4:17:b7:7b:11:aa:1b:6d:
ce:89:f3:fd:f5:87:25:fd:fa:d7:0e:17:5e:ce:11:
90:86:b8:bc:09:73:7e:72:ee:9e:d6:01:d3:40:de:
63:59:3b:98:bb:80:c2:cf:7b:0f:7a:f3:2a:0a:a3:
87:8d:da:59:d5:ba:01:e9:da:28:d6:33:c4:a9:8c:
c1:7e:4c:f3:df:70:30:4b:50:f6:0b:7d:77:74:a8:
c0:e1:7f:8c:2a:80:a4:f2:23:ad:84:f9:b8:f9:3a:
90:88:b8:c8:84:89:ec:39:19:80:e8:9b:2f:f0:9d:
86:02:82:0b:12:09:9c:6b:09:db:d0:c3:d6:c4:49:
0c:ba:c2:56:f9:10:45:d8:2d:f1:76:81:a4:c1:9c:
d1:74:76:3e:98:a9:48:e9:14:00:d0:0a:e0:01:c1:
32:20:01:f6:61:c7:bc:b7:a0:17:f9:88:28:c5:1a:
d4:37:13:2f:6d:32:ca:e9:8a:a1:cf:26:54:6a:95:
a5:1f:d3:02:c8:21:03:eb:7d:c5:5f:86:c5:dd:55:
40:9e:9b:19:7d:f6:3a:1e:1a:8e:9d:b8:a0:6b:2f:
0e:7e:a0:ec:a0:34:5c:00:a0:8f:ce:c0:10:5b:06:
c5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:22:CF:2F:7F:B4:A7:9B:BD:7D:CE:AF:42:36:0E:05:11:D9:97:1A
X509v3 Authority Key Identifier:
keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/MSLPL3-0p5u9fc6vQjYOBRHZlxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.160.0/21
109.205.199.0/24
141.138.144.0/21
178.20.248.0/21
185.69.100.0/22
IPv6:
2a01:a680::/32
Signature Algorithm: sha256WithRSAEncryption
8b:e2:52:a7:a0:d5:ff:2a:93:e2:ac:e3:a6:72:04:2a:03:96:
c9:ab:33:ed:24:9c:9e:4b:db:f1:18:c2:c0:e0:b7:46:b0:0e:
60:58:93:87:ca:02:0d:d8:a4:e1:e6:b4:7b:ea:e0:9f:9b:06:
ba:4d:d2:e3:78:4d:f2:15:3b:67:e8:f9:cd:16:b4:81:39:2d:
d0:a0:5c:98:1e:4e:b3:82:9d:3a:46:f1:80:6d:d4:91:d4:5c:
91:81:7f:48:6e:a4:67:a7:4f:66:5b:be:4e:72:60:ba:57:d3:
bc:de:bf:0a:4b:c9:53:e2:ba:ce:69:35:34:34:b5:94:26:4a:
34:04:c1:53:c4:da:80:2c:96:b9:9a:f8:9d:b9:f2:57:ad:8c:
00:1e:be:36:2f:36:3b:0b:eb:23:a6:c6:ba:94:ff:4c:49:ef:
91:09:b4:45:02:9d:cc:2f:11:37:eb:72:56:86:02:48:1c:e9:
05:a1:27:89:ef:c1:13:01:18:36:06:14:2a:ff:98:cf:7c:1d:
c7:c8:3c:fb:ac:1f:4a:53:b1:69:78:5c:07:7d:f7:ae:07:83:
a2:db:77:d4:2e:a6:aa:48:42:b2:ba:3e:9d:47:9e:6b:6e:ec:
b3:71:21:94:bc:d6:9c:17:24:2e:9b:50:48:02:c2:42:a5:d1:
86:51:6a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:20 2024 by rpki-client on console-ams.rpki-client.org