Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/mbv53S4rEfLmYRoBaK2uLzXWbEE.roa
File: mbv53S4rEfLmYRoBaK2uLzXWbEE.roa (raw, json)
Hash identifier: J20x5z02N4EF9T37gQ3M7t8hCjuoYluq7K2qNxMSkz8=
Subject key identifier: 99:BB:F9:DD:2E:2B:11:F2:E6:61:1A:01:68:AD:AE:2F:35:D6:6C:41
Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2
Certificate serial: 018584781A5A8AD7A57059E172AC27F5F55A
Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/mbv53S4rEfLmYRoBaK2uLzXWbEE.roa
Signing time: Fri 06 Jan 2023 00:25:41 +0000
ROA not before: Fri 06 Jan 2023 00:25:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39378
IP address blocks: 194.76.226.0/24 maxlen: 24
79.132.130.0/24 maxlen: 24
79.132.131.0/24 maxlen: 24
185.219.220.0/23 maxlen: 23
185.219.222.0/24 maxlen: 24
185.219.223.0/24 maxlen: 24
185.158.251.0/24 maxlen: 24
185.212.44.0/24 maxlen: 24
185.212.45.0/24 maxlen: 24
185.212.46.0/24 maxlen: 24
185.212.47.0/24 maxlen: 24
91.241.93.0/24 maxlen: 24
2a0b:7140::/48 maxlen: 48
2a07:fc00::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 10 Jan 2023 20:42:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:84:78:1a:5a:8a:d7:a5:70:59:e1:72:ac:27:f5:f5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2
Validity
Not Before: Jan 6 00:25:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99bbf9dd2e2b11f2e6611a0168adae2f35d66c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:50:9a:f0:55:af:28:c6:96:ac:5e:ee:e8:
fa:8e:06:ba:97:cc:87:e5:f7:50:0b:88:95:2b:8f:
d1:09:76:d2:ad:cd:31:fd:c3:52:a8:3a:7f:3e:4a:
e3:51:28:c1:67:64:ff:9b:42:6e:c3:92:de:db:73:
e3:05:2b:de:59:98:92:77:3f:97:58:93:a0:9e:93:
99:d2:05:1c:40:eb:42:dd:27:a8:da:f3:ee:13:0d:
ca:d9:42:38:2c:6a:25:14:5f:0e:03:a9:ba:12:fc:
e4:11:18:60:ef:79:f7:d4:56:7e:04:2f:31:45:39:
10:6c:3e:c5:39:d0:4d:b9:23:8a:cf:1a:75:f3:8d:
7a:76:f1:96:3b:fc:11:4b:a7:9f:25:c2:41:33:18:
51:3b:98:4d:2f:d4:35:53:56:40:21:3a:5d:5b:6f:
57:0d:cc:92:13:64:ef:d5:4e:83:a9:31:24:de:68:
5a:22:74:48:13:21:c1:61:78:aa:04:07:20:31:fd:
29:36:64:b3:88:d8:da:13:fa:fa:57:d0:42:53:d6:
40:c1:e3:c6:90:8a:6e:41:b3:74:bb:99:d1:eb:c9:
2e:11:75:69:b3:c9:6b:0d:8f:7a:60:3c:f0:07:cf:
db:d5:d3:43:2c:6a:23:0a:44:bd:ec:40:58:64:ef:
66:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BB:F9:DD:2E:2B:11:F2:E6:61:1A:01:68:AD:AE:2F:35:D6:6C:41
X509v3 Authority Key Identifier:
keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/mbv53S4rEfLmYRoBaK2uLzXWbEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.130.0/23
91.241.93.0/24
185.158.251.0/24
185.212.44.0/22
185.219.220.0/22
194.76.226.0/24
IPv6:
2a07:fc00::/48
2a0b:7140::/48
Signature Algorithm: sha256WithRSAEncryption
2d:f1:87:d4:d8:6d:74:b7:0e:92:46:02:26:1b:84:0d:c1:86:
36:9f:86:8f:94:6f:90:11:b1:ee:f5:77:c3:b8:5f:9b:98:59:
34:eb:bb:2c:3f:0f:10:b0:bf:15:66:24:8e:8c:ff:12:e8:09:
96:82:71:21:c4:b0:67:3c:7e:bd:ef:46:76:fa:fe:07:9a:13:
f0:4a:cd:cd:86:0b:56:f4:59:d8:82:8e:59:cd:fb:1c:f0:ee:
9a:16:f2:0a:02:25:ec:2e:ad:d7:cf:61:f9:c5:f0:0c:d0:13:
b5:29:53:e8:71:1d:27:d9:31:00:01:77:70:f9:77:fd:19:ad:
e8:80:fb:83:e8:1a:e3:84:a9:c4:92:78:ab:9f:18:2d:c7:05:
7b:42:ee:63:de:44:79:d3:45:fa:47:8f:d1:22:6c:74:12:5a:
63:7d:1f:d0:b2:b8:01:07:74:b8:ec:82:78:a7:90:da:b3:6a:
0d:d4:c2:cf:33:20:63:3a:67:d0:79:b2:e0:ec:58:59:a4:06:
76:a8:54:cf:a0:10:9a:57:c2:15:b8:d2:31:51:e5:57:29:ce:
fe:61:3f:b3:9a:d9:ce:36:8c:76:54:03:de:07:79:4e:38:f1:
bf:47:87:20:32:fb:25:70:bb:23:11:ae:71:b6:8f:ac:9d:d5:
24:f6:3d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:56 2024 by rpki-client on console-ams.rpki-client.org