Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/mNLrIEHX0Gcvqv8AbQC2QUsUS40.roa
File: mNLrIEHX0Gcvqv8AbQC2QUsUS40.roa (raw, json)
Hash identifier: ROs4k8Hbe4MIAeI4Fp4Ta/y7MBRtKXabFY/5maoND8U=
Subject key identifier: 98:D2:EB:20:41:D7:D0:67:2F:AA:FF:00:6D:00:B6:41:4B:14:4B:8D
Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial: 018CC9BC3740D9D164CA2C94CD72EAAA85DA
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/mNLrIEHX0Gcvqv8AbQC2QUsUS40.roa
Signing time: Tue 02 Jan 2024 10:33:24 +0000
ROA not before: Tue 02 Jan 2024 10:33:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28875
IP address blocks: 185.104.16.0/22 maxlen: 24
45.15.80.0/22 maxlen: 24
2a00:f740::/32 maxlen: 48
2a0e:2b80::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:37:40:d9:d1:64:ca:2c:94:cd:72:ea:aa:85:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
Validity
Not Before: Jan 2 10:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98d2eb2041d7d0672faaff006d00b6414b144b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f1:30:cd:57:58:0f:cb:9d:97:6b:6e:6c:12:
cb:9d:f5:dc:e0:b5:e9:6f:95:76:aa:6b:72:84:1b:
d4:cf:12:e6:9d:72:b0:d4:bb:d8:0b:8f:69:23:29:
13:c6:da:cd:34:df:42:33:ec:5e:44:93:f6:c0:3e:
11:79:87:52:49:ed:d5:47:d9:cc:76:8d:fb:37:f6:
c6:4e:b8:2b:a3:f9:20:9f:81:ae:ed:d9:3d:e3:d5:
12:82:86:94:53:35:fd:83:e8:22:7a:59:1d:85:a3:
c7:35:4a:54:53:fa:12:79:38:55:23:4e:fb:b8:c6:
07:33:fb:19:a0:1b:50:89:75:ca:96:33:35:a0:01:
50:25:dd:54:28:5d:0e:48:13:63:c2:53:78:c5:2a:
d9:b9:7b:3b:82:9f:14:06:57:2b:7f:52:19:e7:39:
30:8c:c7:93:64:00:72:72:27:ad:d2:23:29:42:4c:
22:b5:46:09:dc:1a:0a:d4:55:8b:cc:37:fb:fd:c8:
96:56:87:c9:72:f7:e7:04:eb:7e:72:97:63:c0:fa:
df:f4:44:08:a4:28:0a:d1:cc:81:93:89:a7:01:3b:
78:7c:ca:02:7c:d5:27:c3:6f:4f:94:17:8c:6d:52:
17:35:96:a0:17:3a:a8:67:28:7b:96:a9:0e:70:23:
31:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D2:EB:20:41:D7:D0:67:2F:AA:FF:00:6D:00:B6:41:4B:14:4B:8D
X509v3 Authority Key Identifier:
keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/mNLrIEHX0Gcvqv8AbQC2QUsUS40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.80.0/22
185.104.16.0/22
IPv6:
2a00:f740::/32
2a0e:2b80::/32
Signature Algorithm: sha256WithRSAEncryption
9d:be:e1:6f:8d:18:c3:40:59:26:a6:e9:5e:f0:81:f7:31:49:
a8:62:33:c8:57:06:f9:1a:57:a7:10:04:47:4b:39:bf:c9:49:
a3:bc:e5:55:38:b1:74:30:70:88:84:fe:de:40:c6:4e:e7:df:
62:be:a5:73:8b:4e:8e:2d:59:44:74:04:97:48:a6:00:d7:da:
c1:79:95:ce:35:66:87:d0:2e:30:82:20:61:89:7f:2c:0e:9c:
86:60:b5:14:fa:b8:0f:ec:fb:6f:8e:d1:06:5e:78:91:af:c6:
97:11:f5:9f:4a:40:12:0b:e9:9f:33:c2:60:6e:5f:45:6b:e2:
61:58:c0:c8:46:c2:78:92:e3:a1:47:30:00:b2:94:a0:6b:a5:
34:9c:d2:f7:20:db:20:b0:bd:8a:62:14:8d:b6:4c:14:dd:13:
42:c6:28:e7:fc:35:bb:14:33:14:3c:bf:3a:2b:c6:af:f1:ef:
b5:43:6e:31:35:d5:2c:47:08:ca:5a:84:6d:97:cd:30:2f:f7:
fb:f9:b8:74:ff:31:30:e4:13:6f:31:6d:fc:d3:81:86:8a:dc:
6b:4f:e0:c0:1f:3f:40:98:c4:d5:d1:92:50:8e:ef:c1:76:48:
b1:89:33:ee:b3:37:46:6b:07:d2:da:56:1c:53:62:76:0e:f8:
b9:4c:0c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:46 2025 by rpki-client