Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/mFHh5WmqPQgs8gzUZGM_ibMUJwM.roa
File: mFHh5WmqPQgs8gzUZGM_ibMUJwM.roa (raw, json)
Hash identifier: inaoX/6Iy6Nl+JYDsYSJ9QwTQoGBPnAdG3ZY56FE8gI=
Subject key identifier: 98:51:E1:E5:69:AA:3D:08:2C:F2:0C:D4:64:63:3F:89:B3:14:27:03
Certificate issuer: /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial: 018FE276CD150A6EE2F69F62BDECED278F68
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/mFHh5WmqPQgs8gzUZGM_ibMUJwM.roa
Signing time: Tue 04 Jun 2024 08:56:27 +0000
ROA not before: Tue 04 Jun 2024 08:56:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 80.86.192.0/24 maxlen: 24
80.86.193.0/24 maxlen: 24
81.221.250.0/24 maxlen: 24
81.221.252.0/24 maxlen: 24
81.221.254.0/24 maxlen: 24
194.191.16.0/24 maxlen: 24
194.191.17.0/24 maxlen: 24
194.191.18.0/24 maxlen: 24
194.191.19.0/24 maxlen: 24
194.191.20.0/24 maxlen: 24
194.191.24.0/24 maxlen: 24
194.191.25.0/24 maxlen: 24
194.191.26.0/24 maxlen: 24
194.191.28.0/24 maxlen: 24
194.191.29.0/24 maxlen: 24
194.191.30.0/24 maxlen: 24
195.49.16.0/24 maxlen: 24
2a01:2a8:2001::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Jun 2024 08:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e2:76:cd:15:0a:6e:e2:f6:9f:62:bd:ec:ed:27:8f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Validity
Not Before: Jun 4 08:56:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9851e1e569aa3d082cf20cd464633f89b3142703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:cd:85:54:2f:2f:32:45:1e:31:3d:f9:e0:
7f:67:4c:2f:f7:b7:32:76:4b:fb:03:d5:ef:21:56:
7e:70:82:a7:e9:dc:69:85:44:98:b3:d0:ba:d0:df:
e6:ac:25:d1:7d:64:67:65:1d:9a:69:35:4a:31:16:
ad:cd:8c:a2:92:b3:f8:40:2b:1b:56:34:f4:e7:44:
ab:10:ed:be:c3:f8:bb:ff:73:90:08:ad:d8:55:04:
d9:08:6a:81:ff:54:a3:76:fa:eb:13:47:c7:91:d4:
b4:fa:a5:58:1e:2d:94:c7:b9:e1:51:35:40:34:88:
5d:91:64:16:81:c9:94:0f:ae:1a:bd:c8:36:44:60:
6b:47:7f:81:b1:80:73:b0:dd:c4:c2:b3:4d:11:c2:
c2:2d:3b:45:d4:75:0d:51:9e:53:d5:36:d4:f1:d2:
f0:da:79:de:e0:21:98:79:13:b4:e4:c0:02:ac:26:
72:e1:01:b9:82:be:57:5b:f7:fb:e9:84:26:d5:13:
a4:71:cb:b9:4e:db:bf:0e:ed:a2:9d:0f:2d:68:6e:
33:59:a3:b9:b8:14:3b:55:be:b3:eb:cb:30:3d:4d:
35:80:f2:7c:4f:57:6f:54:fc:73:1c:43:28:62:37:
02:f0:33:2d:c2:0f:5b:15:07:04:64:2f:19:c6:21:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:51:E1:E5:69:AA:3D:08:2C:F2:0C:D4:64:63:3F:89:B3:14:27:03
X509v3 Authority Key Identifier:
keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/mFHh5WmqPQgs8gzUZGM_ibMUJwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.192.0/23
81.221.250.0/24
81.221.252.0/24
81.221.254.0/24
194.191.16.0-194.191.20.255
194.191.24.0-194.191.26.255
194.191.28.0-194.191.30.255
195.49.16.0/24
IPv6:
2a01:2a8:2001::/48
Signature Algorithm: sha256WithRSAEncryption
25:b0:62:3f:35:0a:16:08:5d:22:e5:d2:ee:a4:92:df:28:0b:
75:ab:cb:04:9c:48:2f:71:94:ee:42:af:6c:3b:37:9f:f7:f9:
b5:d4:84:8f:85:95:f5:3c:56:5f:bd:af:a0:40:14:c8:8e:e6:
cf:9a:66:a7:2a:e1:2b:35:60:6f:0b:38:90:65:43:c4:3f:33:
21:33:a1:a9:71:86:5b:03:6b:cf:44:63:c0:e9:28:63:e4:1d:
e7:41:30:9b:a9:80:25:e7:e9:04:04:36:d2:2a:54:b9:5e:1b:
7d:98:f6:1b:67:66:e8:60:78:db:c9:84:85:ca:f4:3b:0e:a0:
c3:a9:d2:4a:e7:99:f7:74:cc:a4:0d:a5:d2:bf:a2:ac:a1:bb:
c3:49:5f:13:dc:ed:20:c9:f5:20:66:c2:9c:ac:f5:5d:bf:a3:
76:b2:a6:5e:f0:6e:37:c8:8a:63:f4:6d:6f:b0:e6:a2:c4:31:
15:e8:26:32:85:39:02:09:be:1a:97:0f:80:b8:cf:ff:33:dd:
e6:1b:ff:2f:58:66:57:2d:fd:d3:6e:8a:a9:6c:0c:72:4c:b4:
6b:3d:43:48:b0:5a:f6:fa:2e:8f:be:64:f9:5f:d8:2f:bd:9b:
48:3a:0e:a9:e2:69:c4:b3:ea:84:98:33:85:40:69:d7:89:eb:
f7:14:3e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:02 2025 by rpki-client