Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/MX-EdYJ1vbi3cg0VEXg2IB-l9Ys.roa
File: MX-EdYJ1vbi3cg0VEXg2IB-l9Ys.roa (raw, json)
Hash identifier: xe9hV29x+0wLEdcTo6NuRwUOChODNB3BJu7rNW9/9Pw=
Subject key identifier: 31:7F:84:75:82:75:BD:B8:B7:72:0D:15:11:78:36:20:1F:A5:F5:8B
Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2
Certificate serial: 018953D233D1C602133F122C8C2CD5B396FA
Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/MX-EdYJ1vbi3cg0VEXg2IB-l9Ys.roa
Signing time: Fri 14 Jul 2023 09:53:52 +0000
ROA not before: Fri 14 Jul 2023 09:53:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200220
IP address blocks: 79.132.135.0/24 maxlen: 24
78.138.9.0/24 maxlen: 24
185.178.231.0/24 maxlen: 24
2a0b:7140:9::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:53:d2:33:d1:c6:02:13:3f:12:2c:8c:2c:d5:b3:96:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2
Validity
Not Before: Jul 14 09:53:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=317f84758275bdb8b7720d15117836201fa5f58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:ff:83:12:a0:ec:48:c1:22:5c:28:d0:ae:
84:b8:08:24:14:1a:0c:5d:fa:24:92:75:f3:cf:64:
da:a7:67:67:44:85:a4:5f:f4:2e:4e:06:1d:19:da:
87:ca:7b:81:5b:d3:04:71:c5:7c:ef:59:6a:e1:32:
88:8c:18:4f:46:84:5b:c8:26:00:f4:13:9a:53:88:
43:ac:3a:c8:7f:6d:19:cb:f6:00:3a:00:94:20:b3:
96:8f:bc:15:63:1b:0e:35:d5:16:11:bf:6d:44:36:
0c:da:08:0c:c0:93:dc:0a:68:9e:7c:92:bf:a9:1b:
45:de:fc:40:a3:22:c8:3c:dd:38:b9:73:14:77:10:
8b:7f:e8:0c:13:87:e0:4e:16:06:b9:c0:72:7f:e4:
c9:94:08:cf:a6:19:a5:81:7a:12:82:4a:4d:5b:bb:
2a:6f:00:57:bb:64:8b:08:f4:b5:2b:21:34:fe:88:
91:c7:87:36:6e:cb:03:79:d7:a4:03:45:23:ac:6e:
f9:d9:30:ee:78:a0:a6:2c:46:b8:b2:57:ed:5f:84:
0b:de:4d:58:18:b9:93:ed:42:5f:de:c4:5a:45:e9:
80:69:48:69:01:82:f9:25:b4:09:ec:e6:03:98:15:
9c:4b:dd:b9:fe:26:61:a1:91:f4:9a:f9:aa:0c:68:
33:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7F:84:75:82:75:BD:B8:B7:72:0D:15:11:78:36:20:1F:A5:F5:8B
X509v3 Authority Key Identifier:
keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/MX-EdYJ1vbi3cg0VEXg2IB-l9Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.138.9.0/24
79.132.135.0/24
185.178.231.0/24
IPv6:
2a0b:7140:9::/48
Signature Algorithm: sha256WithRSAEncryption
50:61:f2:97:65:de:ff:57:5e:c4:1f:0e:1c:81:8e:2f:06:59:
ac:6b:50:90:7d:11:76:81:f6:31:79:d1:93:5e:cd:4d:71:04:
f8:cb:5b:9a:34:ef:34:96:c5:dc:2a:94:0c:52:fa:a5:4e:fb:
c0:e0:22:99:5a:f8:76:a3:63:76:c7:cc:27:32:05:22:07:ae:
47:e3:47:6e:75:4d:94:94:be:70:60:da:fd:e3:aa:74:bd:88:
be:c7:4e:1d:c0:89:cf:5f:29:d1:61:9c:22:83:31:77:16:bd:
10:01:12:84:e9:16:12:cf:5b:fa:35:a3:b4:57:ca:6d:73:21:
59:ef:56:21:7b:52:9f:6c:3e:94:85:1a:a9:47:0e:03:c1:bc:
d3:97:d9:c1:9b:31:cf:c7:01:58:6a:02:10:65:a1:4f:0b:d7:
ee:5e:a2:46:a1:f7:5c:19:27:48:c5:39:3a:dd:bd:71:64:9b:
a9:89:5c:37:e3:a1:09:37:8b:54:d5:9a:80:1f:77:e8:b6:68:
5d:e1:6c:24:d9:68:51:2f:97:d1:ee:80:10:65:e0:72:a6:4e:
89:98:fe:1e:de:d5:49:67:04:1b:d7:f1:60:44:12:82:75:91:
a2:8c:40:97:c9:db:f0:6f:04:a3:64:95:28:1f:40:d5:c4:4b:
5a:89:88:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:08 2024 by rpki-client on console-ams.rpki-client.org