Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/muAQgu3dd30r4p9pNw0MuPVJt5M.roa
File: muAQgu3dd30r4p9pNw0MuPVJt5M.roa (raw, json)
Hash identifier: eLVJwm3ug7r1dqqeiuJZ/KazSBoc/jtFvPFDyvKl7B4=
Subject key identifier: 9A:E0:10:82:ED:DD:77:7D:2B:E2:9F:69:37:0D:0C:B8:F5:49:B7:93
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 018CC348943662EAFA690D41E7D2511E55C9
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/muAQgu3dd30r4p9pNw0MuPVJt5M.roa
Signing time: Mon 01 Jan 2024 04:29:22 +0000
ROA not before: Mon 01 Jan 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34430
IP address blocks: 195.242.96.0/23 maxlen: 24
37.220.144.0/23 maxlen: 24
37.220.146.0/24 maxlen: 24
193.43.89.0/24 maxlen: 24
81.18.240.0/20 maxlen: 24
45.145.196.0/22 maxlen: 24
188.95.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:94:36:62:ea:fa:69:0d:41:e7:d2:51:1e:55:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: Jan 1 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ae01082eddd777d2be29f69370d0cb8f549b793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0f:27:96:f2:21:e3:a3:b2:80:4e:b0:bb:a2:
0d:44:0a:54:c2:9c:5b:48:32:4e:0c:90:fd:03:ab:
e3:e0:b4:24:41:db:4f:fc:4d:90:3c:32:d8:e4:bd:
19:7d:29:1d:89:f1:9e:6b:50:7d:53:88:b6:1a:89:
7f:8f:62:30:a7:31:2d:0a:82:0f:64:e1:e8:28:aa:
72:0a:81:2a:75:96:e4:65:7e:ad:58:1f:2a:52:e7:
00:dc:c2:24:c9:88:f1:0e:c8:ad:f9:5b:5b:7b:cd:
cc:27:e9:54:06:06:aa:12:ff:1f:24:58:c4:65:a6:
c4:35:73:9c:00:e3:42:84:01:05:7d:18:0e:5d:b3:
3d:ad:df:58:6c:09:d5:a0:ce:07:7d:22:da:1b:c4:
ef:3e:86:1b:1e:60:d3:ca:16:43:10:67:ac:55:45:
79:f8:76:95:e3:f1:4c:08:61:06:13:44:35:af:a4:
59:93:1e:07:8a:e5:ec:0c:05:fe:6c:a7:3e:e1:30:
ac:02:08:82:27:e8:a3:9d:52:5d:fc:17:57:c2:93:
5a:43:21:32:ca:c6:de:67:70:a7:27:c9:00:6a:8f:
b2:6a:09:92:88:59:86:2d:36:79:67:64:07:f6:00:
bf:0f:c2:37:c9:37:f5:36:67:1a:8f:92:89:82:98:
31:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E0:10:82:ED:DD:77:7D:2B:E2:9F:69:37:0D:0C:B8:F5:49:B7:93
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/muAQgu3dd30r4p9pNw0MuPVJt5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.220.144.0-37.220.146.255
45.145.196.0/22
81.18.240.0/20
188.95.168.0/21
193.43.89.0/24
195.242.96.0/23
Signature Algorithm: sha256WithRSAEncryption
28:e4:4a:05:25:17:f0:71:e1:d2:9b:5b:bc:1d:3d:56:92:4f:
7a:97:68:c4:3c:20:78:2d:3b:bb:7e:1e:d3:95:26:61:73:f3:
a7:32:26:9d:59:4e:9c:74:9b:82:c1:f3:fb:5e:48:ea:f4:60:
4d:3b:f7:37:2a:72:bf:bc:5a:3f:ce:08:3d:ba:30:96:2c:76:
fb:a9:48:aa:59:de:95:a6:00:4a:0e:6b:c8:64:b8:f1:94:fe:
2d:63:fc:95:e0:6d:9c:00:b8:fa:61:9c:2e:d0:f6:3a:94:fc:
24:4a:a8:be:70:80:f6:01:a3:27:1b:77:8c:f2:39:ce:d6:fc:
1b:bd:12:87:fc:98:7a:3a:b9:76:c0:8b:9a:da:c5:af:b0:5f:
51:ef:72:27:39:fa:2c:6c:be:c8:25:77:37:c0:d8:ce:b5:4a:
ec:c5:6c:ea:12:0e:06:78:9d:f1:31:54:a0:27:fd:dc:3d:3b:
03:b5:46:d4:3f:68:db:42:91:c4:0b:30:6b:f1:ba:a7:e4:9b:
83:56:3f:d9:6f:52:fc:2e:28:e9:1a:af:ef:e8:c2:a3:c1:67:
37:b9:4d:0a:ab:b1:3c:08:1e:38:60:d9:6a:cf:0a:b5:f7:fb:
2b:cf:88:8a:69:10:19:60:5d:f3:78:0f:42:0c:7d:b0:80:d4:
4f:23:d8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:20 2025 by rpki-client