Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/MFUaeaUTIpIfBHGRsexOaKpfTNw.roa
File: MFUaeaUTIpIfBHGRsexOaKpfTNw.roa (raw, json)
Hash identifier: jeMeEeYa8Tbm71sGxO63JAFSyIFsy9QpcdcknP8Oq60=
Subject key identifier: 30:55:1A:79:A5:13:22:92:1F:04:71:91:B1:EC:4E:68:AA:5F:4C:DC
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0185A534E4B7434B005134B2EBC740D79957
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/MFUaeaUTIpIfBHGRsexOaKpfTNw.roa
Signing time: Thu 12 Jan 2023 08:59:45 +0000
ROA not before: Thu 12 Jan 2023 08:59:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 46.151.32.0/24 maxlen: 24
46.151.35.0/24 maxlen: 24
93.120.38.0/24 maxlen: 24
93.120.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Jan 2023 11:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a5:34:e4:b7:43:4b:00:51:34:b2:eb:c7:40:d7:99:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 12 08:59:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30551a79a51322921f047191b1ec4e68aa5f4cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:04:0d:0f:3b:fc:dc:6d:5f:52:9a:f0:b1:c6:
26:d1:95:60:c6:32:6e:10:d5:0d:09:b9:64:6a:a1:
50:b8:8e:85:c0:dc:f3:c9:ba:de:91:aa:fe:01:61:
50:c5:6c:75:48:0a:2b:1e:21:33:68:36:43:e5:87:
f2:fa:c4:80:92:5c:20:4b:f3:4c:23:4e:89:dd:e7:
1c:77:52:12:ad:e0:a9:32:40:07:71:1b:7b:94:b2:
42:59:4a:14:dc:51:bc:b2:45:41:d4:b5:5a:62:66:
e5:5f:0e:10:00:23:b0:18:cd:14:ca:41:0d:55:a4:
a7:4d:07:bc:7c:d7:27:94:29:22:6b:af:6c:4f:89:
6a:80:1e:9c:4c:9b:3a:d0:a4:90:8a:01:57:60:06:
30:5f:70:83:b5:d4:d5:b3:bf:40:ee:bc:57:fd:32:
3a:db:25:29:d7:16:d2:d2:da:15:61:11:c8:9f:52:
96:33:40:d1:9d:9a:45:73:43:ed:bf:5c:66:1a:88:
6c:a0:14:d5:9e:83:fc:9e:69:23:5f:60:5d:f2:48:
1f:d3:a8:ae:98:6d:f4:51:c7:9d:45:94:1c:7e:d1:
85:c9:7c:e1:10:93:94:b6:a8:47:e1:8a:56:85:13:
2c:1f:11:88:a4:5b:30:7a:90:86:03:3d:4c:45:1e:
b0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:55:1A:79:A5:13:22:92:1F:04:71:91:B1:EC:4E:68:AA:5F:4C:DC
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/MFUaeaUTIpIfBHGRsexOaKpfTNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.32.0/24
46.151.35.0/24
93.120.36.0/24
93.120.38.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:86:5b:74:31:e4:7e:86:78:ae:d8:e6:bb:96:3a:07:f0:e7:
ec:71:ba:40:37:9f:1e:3c:78:5f:6a:64:43:eb:e0:de:13:c1:
4f:fc:04:d4:fa:39:61:1d:33:06:ed:73:a6:cd:eb:cb:e6:49:
75:4d:e1:31:d5:e7:1c:d1:76:f5:8f:ce:c6:4f:df:e8:ed:b1:
52:91:81:6e:89:4f:31:3c:d5:0e:a8:5a:e5:eb:fe:d4:23:19:
c1:0f:78:dc:7d:f3:8e:8f:a0:6e:f9:ac:5e:0b:fa:6e:89:e1:
04:ad:98:55:29:13:8a:43:04:17:c1:16:66:eb:93:fc:06:6e:
40:a5:56:64:48:43:0f:89:a0:f6:99:26:ba:94:46:3e:2f:2e:
f2:dd:03:19:50:ee:2b:74:7a:26:a5:74:38:5a:47:70:b4:c3:
e5:64:7c:9e:2b:2c:dd:a3:79:93:02:94:e2:f3:65:3f:87:3d:
6a:b1:4f:f8:e1:9e:49:52:2a:9d:86:19:9b:94:56:de:91:b1:
eb:e7:2a:5d:28:2f:27:62:d7:d8:df:e0:5d:db:6d:fa:7f:96:
c4:de:8c:22:2a:2b:5d:7b:3a:eb:d4:68:76:ed:0f:f2:50:5d:
db:05:11:69:83:05:3d:c9:04:5f:ba:7c:9a:38:d5:6c:bf:74:
48:bf:d7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org