Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/M8_0MR3qUg72D1vYWQWXY3a2034.roa
File: M8_0MR3qUg72D1vYWQWXY3a2034.roa (raw, json)
Hash identifier: OzcQA90TlgVlrv8siC8QAwoquJOBeqskTVPivEqOiW4=
Subject key identifier: 33:CF:F4:31:1D:EA:52:0E:F6:0F:5B:D8:59:05:97:63:76:B6:D3:7E
Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial: 018DA114A79A80B72145F7AE43E34344D72A
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/M8_0MR3qUg72D1vYWQWXY3a2034.roa
Signing time: Tue 13 Feb 2024 06:08:21 +0000
ROA not before: Tue 13 Feb 2024 06:08:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58289
IP address blocks: 91.147.111.0/24 maxlen: 24
185.162.234.0/24 maxlen: 24
193.43.251.0/24 maxlen: 24
194.31.133.0/24 maxlen: 24
194.31.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 06:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a1:14:a7:9a:80:b7:21:45:f7:ae:43:e3:43:44:d7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Validity
Not Before: Feb 13 06:08:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33cff4311dea520ef60f5bd85905976376b6d37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:59:e3:e1:3d:8d:65:cd:30:3b:14:8a:19:88:
4a:08:45:60:78:ff:7c:7e:c5:07:21:47:e7:aa:f2:
be:59:47:18:1a:b7:59:a0:1d:c4:32:9a:ce:4d:bb:
ff:76:ad:52:30:f1:b0:e6:69:7f:de:6e:69:d3:d6:
fa:1a:5c:79:67:f6:19:b9:be:7d:6e:1e:c1:9c:58:
76:c3:df:97:1a:cc:9d:66:6b:8b:ff:b6:c6:4b:04:
0a:62:fe:80:c8:3b:ae:36:94:ba:59:af:35:7b:ec:
55:bf:d8:77:09:80:3b:f1:16:60:0b:b1:0c:57:7a:
38:75:44:4f:2f:f1:33:d2:76:a0:49:7f:2c:b5:0f:
e5:c9:9f:c4:77:83:61:1c:db:15:63:f9:9f:23:98:
bd:26:74:da:e2:d4:c5:e4:6e:1d:96:f8:9f:44:7e:
a5:7d:35:4f:39:48:23:52:3d:91:0a:6a:8a:56:7b:
16:b3:87:84:8a:fb:8a:31:1f:3c:3c:71:ec:e6:70:
f0:d2:2c:b0:49:d5:45:24:f4:2f:45:55:56:f2:ef:
38:dd:f0:e0:15:2c:30:f7:5d:74:07:89:86:61:4d:
85:44:b9:85:99:b1:8f:1c:71:09:e9:2d:79:c4:81:
4c:46:b9:5a:c3:c2:ed:c3:3e:98:8e:3e:12:8b:80:
6c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CF:F4:31:1D:EA:52:0E:F6:0F:5B:D8:59:05:97:63:76:B6:D3:7E
X509v3 Authority Key Identifier:
keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/M8_0MR3qUg72D1vYWQWXY3a2034.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.111.0/24
185.162.234.0/24
193.43.251.0/24
194.31.133.0/24
194.31.135.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:22:43:20:07:7d:0a:da:91:ac:74:47:bc:87:96:7f:bb:86:
a9:ab:2a:2b:1b:16:65:6f:12:30:c9:eb:df:b4:4a:36:5a:c4:
16:25:b5:34:a8:86:03:b8:31:ab:75:fc:e7:f8:6a:0e:4a:91:
5e:73:1e:c0:dd:db:0a:d2:a6:1c:7a:d2:56:6e:e2:7a:00:a3:
de:2f:a7:3a:f1:52:dc:d3:f8:66:71:66:27:96:c5:cd:b5:58:
f7:6f:f8:5f:e3:61:75:bf:c3:23:ee:53:92:97:8f:72:c4:26:
59:80:27:9a:5b:1f:0c:f8:59:f1:cb:9a:7d:09:8a:e8:be:28:
f6:7a:bd:b8:11:cd:a5:6a:67:20:56:12:83:cc:d2:68:c9:2d:
2f:0f:3c:34:ad:6c:ed:f1:07:2f:50:ae:15:20:4c:0b:bb:7d:
6d:99:36:65:a3:e3:31:b4:c3:93:65:66:45:d0:b8:0b:68:41:
5c:40:58:10:11:1a:12:22:c0:62:67:11:39:cc:ad:44:c4:5d:
27:b9:10:66:1c:46:ca:e1:a7:08:31:3b:5c:9f:23:af:29:3a:
77:bd:77:24:bf:86:d6:99:9b:cd:57:e9:38:dd:07:cc:18:06:
21:a7:80:72:17:9f:11:a7:07:08:43:89:44:c1:06:8f:1a:93:
b6:24:08:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:06 2024 by rpki-client on console-ams.rpki-client.org