Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/M_L1BDhw-w6pv_E53rpBA46GgjM.roa
File: M_L1BDhw-w6pv_E53rpBA46GgjM.roa (raw, json)
Hash identifier: 826Zkr+Fdo5WH84ENXasQJeogINHdFoKCq3/tMjLgCo=
Subject key identifier: 33:F2:F5:04:38:70:FB:0E:A9:BF:F1:39:DE:BA:41:03:8E:86:82:33
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 019294E337850EB658392332B626B4803961
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/M_L1BDhw-w6pv_E53rpBA46GgjM.roa
Signing time: Wed 16 Oct 2024 10:32:51 +0000
ROA not before: Wed 16 Oct 2024 10:32:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 2.57.28.0/22 maxlen: 22
139.28.226.0/24 maxlen: 24
194.93.32.0/24 maxlen: 24
194.93.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 21:22:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:e3:37:85:0e:b6:58:39:23:32:b6:26:b4:80:39:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Oct 16 10:32:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33f2f5043870fb0ea9bff139deba41038e868233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a4:4d:95:2c:9a:87:b8:90:6a:de:62:bd:cc:
8d:a1:ee:9d:82:12:00:16:49:23:ea:77:5c:8a:62:
bb:53:62:f3:29:24:d3:d3:79:62:d9:ba:b1:2f:a5:
a3:5f:8d:75:b3:0f:1c:38:2b:89:09:5f:b0:07:2a:
bc:02:20:1f:dc:d9:00:81:89:e1:43:02:d0:09:b2:
1d:0e:d4:75:cb:87:d2:2e:66:68:75:a4:89:f6:9b:
ac:8f:4b:40:05:f8:2c:e0:0c:42:93:e9:7d:2c:32:
19:d4:72:d9:d9:34:e0:b2:be:e4:84:5c:16:b3:87:
dd:4d:fd:03:42:9c:b3:89:72:56:9d:ad:62:5b:01:
66:13:22:07:ca:3c:bd:24:ec:5e:1f:22:2e:3d:25:
31:b5:d5:24:3c:2a:37:46:a0:71:c4:ae:45:f8:5e:
96:be:96:9d:fe:19:d8:01:9b:01:c4:12:41:d2:f6:
96:83:1f:a2:6e:bd:27:ee:9f:c9:2d:80:c9:73:30:
f7:d8:19:58:b8:f1:69:aa:5f:d2:0c:a5:59:0d:62:
8c:78:d8:4a:5b:d3:7f:33:d6:bc:cd:5a:97:da:a4:
d2:8c:45:61:65:5e:c7:9c:85:18:fe:f3:1a:59:98:
9a:d0:b0:71:54:1b:c5:ba:d8:f0:f8:ed:38:c6:f7:
eb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F2:F5:04:38:70:FB:0E:A9:BF:F1:39:DE:BA:41:03:8E:86:82:33
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/M_L1BDhw-w6pv_E53rpBA46GgjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.28.0/22
139.28.226.0/24
194.93.32.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:8b:1b:35:c8:60:54:43:3e:f6:52:15:c5:bc:30:f0:b0:46:
7c:54:16:75:02:1f:78:96:9a:78:ea:04:36:27:39:45:c4:6c:
1d:82:03:1a:8f:8a:8c:49:47:36:0d:a9:90:f8:c9:20:83:9c:
82:35:53:25:a6:9b:b1:fc:0a:50:20:2b:07:bc:00:d6:1a:dd:
0f:ef:38:03:9e:6b:7c:a4:1c:95:98:fd:16:69:12:b2:a4:b7:
c8:de:cc:76:b2:87:1b:e7:28:ec:84:fa:17:d5:87:52:72:21:
5d:66:e4:a5:c6:0c:a0:54:c5:a1:34:2a:82:c5:a1:0a:9c:43:
2e:83:49:77:01:01:d2:61:87:29:e0:8a:e1:54:06:0a:8f:e7:
56:60:21:c5:1f:a5:45:68:ac:4d:4c:9a:62:bb:fa:ed:79:46:
95:65:62:6f:64:ba:41:1b:16:91:55:26:32:4e:39:7b:f8:f8:
98:ee:c6:26:99:a7:c7:26:b0:3e:c8:da:20:23:bc:c9:c0:ff:
24:f5:6e:a6:15:a6:35:1c:49:ec:7e:74:11:4f:ba:cf:74:44:
13:24:c3:1c:88:3a:bf:d0:ea:a0:fe:2c:1b:4a:29:8c:4f:a8:
26:49:bb:8e:93:36:fe:ce:e3:4a:f4:bd:ba:73:ce:c5:87:97:
35:a0:e1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 23:10:07 2024 by rpki-client on console-ams.rpki-client.org