Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Mtjh5Rdw8v6uz9le9JZCU9uxROM.roa
File: Mtjh5Rdw8v6uz9le9JZCU9uxROM.roa (raw, json)
Hash identifier: wv1a4W/m3ZMolW2WLkhF3ENvGdrFlbuOUoQ7q/7Mv9E=
Subject key identifier: 32:D8:E1:E5:17:70:F2:FE:AE:CF:D9:5E:F4:96:42:53:DB:B1:44:E3
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0187EFCBD71574F55F3E56604DF180B9BB78
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Mtjh5Rdw8v6uz9le9JZCU9uxROM.roa
Signing time: Sat 06 May 2023 06:42:06 +0000
ROA not before: Sat 06 May 2023 06:42:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31733
IP address blocks: 85.92.115.0/24 maxlen: 24
45.135.236.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 10 May 2023 03:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ef:cb:d7:15:74:f5:5f:3e:56:60:4d:f1:80:b9:bb:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: May 6 06:42:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32d8e1e51770f2feaecfd95ef4964253dbb144e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7e:f3:6d:c5:7d:d9:8b:41:b9:a1:2a:12:61:
b5:ac:6b:22:51:11:3e:9c:bd:8d:92:81:f7:4f:e2:
21:1d:73:02:e7:0d:a1:81:87:00:ec:76:af:1c:d7:
77:9e:0f:91:46:22:38:21:7b:9f:4e:42:fd:9b:8f:
31:9d:62:75:e5:21:78:7f:02:6c:2a:51:48:dc:96:
2b:2e:60:65:04:54:f9:1c:fb:cf:fa:5d:1c:8c:4f:
87:ed:31:89:e6:83:42:39:b6:fb:04:57:eb:41:64:
a1:00:5c:ca:af:e4:41:96:e6:c4:55:30:ee:6e:46:
81:18:69:9b:50:42:06:c9:f6:b5:98:0e:ad:7e:a6:
35:c9:10:7b:16:6b:dd:11:7f:13:d9:18:8d:f4:31:
40:0b:de:60:50:82:56:bd:b5:68:39:63:76:46:a9:
f5:06:20:bc:30:e7:6d:2d:c0:f4:fc:74:54:d6:ce:
73:e9:87:87:dc:64:2a:37:48:f3:6d:f3:21:07:63:
82:d5:d1:12:3a:7d:e3:b2:26:b6:a4:09:15:87:11:
fe:2a:5c:cc:c6:43:68:3c:72:8d:44:ba:29:0a:88:
a8:67:64:de:b0:85:09:fd:7d:70:0c:f3:16:10:35:
49:c2:e7:14:81:b9:57:1f:dd:1b:52:5f:0a:80:0c:
05:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D8:E1:E5:17:70:F2:FE:AE:CF:D9:5E:F4:96:42:53:DB:B1:44:E3
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Mtjh5Rdw8v6uz9le9JZCU9uxROM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.236.0/23
85.92.115.0/24
Signature Algorithm: sha256WithRSAEncryption
36:3d:f4:d9:7b:14:a2:6b:b9:28:63:f6:06:0e:94:27:98:06:
95:1e:34:5e:57:bf:2e:37:d8:b0:b0:d3:4f:4f:4b:7a:08:61:
3f:7e:ba:ff:86:c3:5d:83:bf:18:ee:07:3a:a3:29:9b:03:9c:
de:bb:45:e4:84:bf:e2:e4:6f:ff:90:c8:12:78:b1:84:47:e3:
ba:78:e8:ec:e2:ae:0b:2d:33:41:3e:69:f7:27:fb:b7:1e:17:
43:ae:d7:d6:53:16:1c:80:5b:11:9a:6e:92:0c:70:60:92:57:
f2:d8:6a:1e:5d:ca:b7:93:26:a3:64:df:b4:54:b9:0e:b6:3d:
f2:c9:82:17:78:a8:b3:0c:19:9b:17:83:e6:0a:76:7f:21:69:
02:69:80:9c:35:4e:10:62:92:0d:ff:8c:ca:2d:25:d3:f6:b2:
9f:ec:90:5d:d1:d0:f7:fa:19:5c:fa:7a:0c:25:e5:bf:2c:eb:
53:9d:b8:33:dc:a8:2c:5c:0a:5c:f9:64:39:70:32:7d:66:da:
e6:67:ca:30:fb:d3:d2:8f:f6:e2:95:ed:a6:73:30:87:d1:b1:
65:ba:3a:b0:6c:02:a9:9d:76:24:3d:c9:03:90:81:f9:c7:ef:
95:12:53:f8:f1:ca:32:a0:5a:d4:1c:55:3e:4b:63:4b:3c:33:
af:35:f2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org