Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/MIpY6x-0KXX50APAvTDZFtMgHjo.roa
File: MIpY6x-0KXX50APAvTDZFtMgHjo.roa (raw, json)
Hash identifier: F250u9QaGCICuAn51fDu4n/daPAVEXFO/aqkIrsmkNY=
Subject key identifier: 30:8A:58:EB:1F:B4:29:75:F9:D0:03:C0:BD:30:D9:16:D3:20:1E:3A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018F291BDBE136F5981C8798B5573B9E48D6
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/MIpY6x-0KXX50APAvTDZFtMgHjo.roa
Signing time: Mon 29 Apr 2024 09:07:22 +0000
ROA not before: Mon 29 Apr 2024 09:07:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 93.186.69.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.128.0/24 maxlen: 24
188.255.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 08:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:29:1b:db:e1:36:f5:98:1c:87:98:b5:57:3b:9e:48:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 29 09:07:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=308a58eb1fb42975f9d003c0bd30d916d3201e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:3f:14:95:38:af:f9:ca:29:ac:67:f0:7a:
58:8f:4f:5f:24:9f:a9:eb:31:65:95:0e:c6:2e:96:
ad:db:81:9d:fd:49:2a:a3:ba:8a:21:38:b1:42:b9:
6c:6f:62:cb:e9:6c:60:e9:bf:00:16:8c:47:8a:1a:
c2:76:ca:bd:51:bc:1f:97:7b:e9:9a:65:12:c4:d6:
90:20:12:37:e0:e5:33:a4:42:c7:bd:07:2b:64:b0:
cb:ed:c7:51:44:a6:ab:f9:cc:ec:09:27:23:42:ec:
5b:b0:cf:8b:d9:45:17:ab:62:c9:5d:d7:40:c1:50:
c4:39:e8:7d:af:c9:e8:bd:33:ee:34:b1:cf:a4:9f:
77:ee:b7:0c:57:b9:d8:e5:7a:59:f5:db:36:1f:0a:
11:5d:86:52:54:ce:94:44:bd:a1:f0:96:3a:c2:da:
7b:7d:12:9e:b9:f8:b4:f9:82:d7:15:c5:74:ad:01:
69:ee:63:6c:06:0b:7b:81:99:7d:72:59:cf:02:6a:
40:05:c9:f4:11:07:0f:ae:3f:8b:db:5d:96:ad:42:
0e:34:5a:6e:45:90:22:5a:2c:62:01:30:a7:bd:fd:
30:50:e1:dd:3a:2e:ab:98:35:a3:62:61:1c:81:a5:
7e:2c:38:cb:02:14:d8:96:c7:4a:6f:b4:20:a4:de:
47:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8A:58:EB:1F:B4:29:75:F9:D0:03:C0:BD:30:D9:16:D3:20:1E:3A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/MIpY6x-0KXX50APAvTDZFtMgHjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.186.69.0/24
109.121.43.0/24
185.47.91.0/24
188.255.128.0/24
188.255.200.0/24
Signature Algorithm: sha256WithRSAEncryption
42:53:8f:b3:a8:81:30:62:8c:bb:4e:08:b3:90:b8:73:2a:2d:
83:b4:f6:16:a7:d6:cf:62:dd:f7:cf:9d:b7:25:c5:f7:2f:a7:
9c:f6:8c:22:c1:50:bf:b2:0f:0c:d1:db:d6:46:c2:be:88:54:
9a:99:0f:45:4c:a5:c1:51:e0:da:6b:2d:cf:6f:10:35:4a:a8:
17:f4:7c:d3:56:78:4e:0b:54:0d:af:72:22:97:d5:79:d0:52:
58:ae:52:80:81:8f:d9:88:8a:44:20:49:24:b0:17:8a:15:a9:
94:f7:a8:b1:d2:08:a7:86:81:54:85:75:d7:ea:ab:d5:9b:9f:
90:25:d4:3b:dd:e5:44:95:f4:fe:f5:12:16:b8:fa:91:e8:d3:
83:75:78:3a:ef:25:b7:cf:70:c8:6b:4b:39:a2:f8:e5:d1:bb:
90:22:21:d3:54:bc:47:93:d6:b3:da:83:bf:4c:c2:10:c8:03:
02:9c:e4:36:19:50:fa:e0:11:35:13:1e:bc:ba:d6:33:94:fa:
66:fc:72:a0:69:73:7a:37:24:5e:13:ad:d7:de:e2:a2:b9:18:
76:bd:29:c5:c0:2f:a6:51:d1:5e:8d:85:24:b9:61:d8:5f:ea:
71:96:7b:c0:c4:e4:c4:78:20:39:cd:31:96:fc:aa:4e:b5:1e:
6b:00:50:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:33:28 2024 by rpki-client on console-ams.rpki-client.org