Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/MwJjYmve23PoG-d-1pMPYhKndxU.roa
File: MwJjYmve23PoG-d-1pMPYhKndxU.roa (raw, json)
Hash identifier: sbkL1rnph6d5BqIKqyAeKnOaZInsQg1TWdpAAU9paDU=
Subject key identifier: 33:02:63:62:6B:DE:DB:73:E8:1B:E7:7E:D6:93:0F:62:12:A7:77:15
Certificate issuer: /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Certificate serial: 018EE052CDF0A053D7DA4B3BEBDDA2DD3640
Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/MwJjYmve23PoG-d-1pMPYhKndxU.roa
Signing time: Mon 15 Apr 2024 05:55:06 +0000
ROA not before: Mon 15 Apr 2024 05:55:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203089
IP address blocks: 45.148.214.0/24 maxlen: 24
45.148.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e0:52:cd:f0:a0:53:d7:da:4b:3b:eb:dd:a2:dd:36:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Validity
Not Before: Apr 15 05:55:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=330263626bdedb73e81be77ed6930f6212a77715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:5c:68:d8:c3:86:ac:cc:17:41:2c:d8:5e:
4f:f4:18:84:f5:9f:5b:29:ad:65:16:5a:57:de:71:
44:d4:1b:21:3e:ac:e1:56:7c:a2:c2:37:af:1d:bc:
08:31:98:77:32:db:06:c3:42:15:5e:d6:6d:9e:c1:
06:84:15:fe:1d:64:53:a0:5c:c0:f1:32:9a:5c:b4:
eb:1c:d1:36:2f:47:71:4a:77:94:54:13:d0:0c:1f:
97:67:e6:ab:64:a2:be:a3:d5:53:f2:5b:e3:95:36:
b3:3b:56:b2:5a:c9:ab:17:2e:8e:6a:9b:4d:30:9f:
59:8d:6b:0c:09:b2:27:04:80:a0:dd:53:1b:e8:bb:
89:3a:16:49:f4:a7:5c:84:b9:5d:49:47:6b:0b:d0:
16:65:9c:4e:67:db:d3:fb:a0:22:84:f2:18:80:52:
53:79:12:cd:77:4c:58:7f:5f:5a:1d:bc:ea:87:b2:
57:64:d7:00:30:a6:3c:c3:18:5f:7f:e2:92:28:fd:
ce:34:3f:d9:27:f5:c4:3b:cd:1f:f3:c9:93:30:08:
a9:ae:97:4a:7b:6c:5f:07:60:50:ab:c0:ab:c4:66:
70:d6:c0:5f:93:15:46:ef:f5:42:75:7a:b7:9f:91:
9c:ed:7f:43:26:5e:f7:33:ff:39:48:69:78:a6:14:
8f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:02:63:62:6B:DE:DB:73:E8:1B:E7:7E:D6:93:0F:62:12:A7:77:15
X509v3 Authority Key Identifier:
keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/MwJjYmve23PoG-d-1pMPYhKndxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.214.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:f7:38:93:cf:ba:c5:90:4e:f8:da:af:17:92:ab:71:af:e7:
44:16:c8:b6:5c:41:19:50:a3:ce:0e:86:5e:55:6a:f3:b8:6e:
a8:d3:9f:b1:b6:75:50:33:ae:2c:be:d1:d2:de:3c:48:0a:dd:
13:40:cd:bd:4c:24:cd:ab:51:58:78:87:c7:94:30:c4:ea:8d:
fb:7e:8b:cf:b7:54:83:48:6c:90:14:cb:a5:e1:e9:93:18:dc:
60:23:0b:6d:9f:85:ce:57:27:93:1b:2e:91:26:39:6a:1e:97:
6f:f3:f2:14:30:d3:8c:fa:06:8f:d9:b4:c4:32:80:b7:0b:a5:
a5:70:5c:26:43:9f:9e:60:15:16:f5:72:94:8f:4e:88:9c:73:
cf:1d:e7:be:88:7a:d2:c3:7b:d5:57:65:72:61:a8:e8:0f:ff:
12:77:c1:3e:73:76:e9:6c:74:2b:9a:5b:fb:d7:ee:29:19:f2:
f3:51:48:20:7d:d0:a9:99:fc:0d:93:f7:75:dd:87:17:24:8a:
f9:9f:80:f3:4e:c2:28:1a:9a:ae:4e:b6:79:8a:cf:f6:4c:cd:
c7:f5:13:ff:21:31:df:ab:9a:11:72:99:d8:7b:94:be:4c:89:
9b:28:90:f5:0f:0b:b2:e1:2a:1a:5c:c1:05:d2:79:bf:01:db:
68:a9:49:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:09:16 2025 by rpki-client