Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/mninB2ty17MdtfGXPhl19ky3X2M.roa
File: mninB2ty17MdtfGXPhl19ky3X2M.roa (raw, json)
Hash identifier: XyqYb+3dk43WA1FpbthMG8JN53UehEM0wB7d373dvJc=
Subject key identifier: 9A:78:A7:07:6B:72:D7:B3:1D:B5:F1:97:3E:19:75:F6:4C:B7:5F:63
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 018C589BFA362E1C8DAB34D709AAEC359865
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/mninB2ty17MdtfGXPhl19ky3X2M.roa
Signing time: Mon 11 Dec 2023 11:21:06 +0000
ROA not before: Mon 11 Dec 2023 11:21:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8814
IP address blocks: 91.135.246.0/24 maxlen: 24
91.135.245.0/24 maxlen: 24
91.135.251.0/24 maxlen: 24
91.135.250.0/24 maxlen: 24
91.135.249.0/24 maxlen: 24
91.135.248.0/24 maxlen: 24
91.135.247.0/24 maxlen: 24
158.181.36.0/24 maxlen: 24
158.181.35.0/24 maxlen: 24
158.181.33.0/24 maxlen: 24
158.181.32.0/24 maxlen: 24
158.181.44.0/22 maxlen: 22
158.181.40.0/22 maxlen: 22
91.135.255.0/24 maxlen: 24
91.135.254.0/24 maxlen: 24
212.47.132.0/22 maxlen: 22
212.47.128.0/22 maxlen: 22
212.47.136.0/22 maxlen: 22
212.47.144.0/22 maxlen: 22
212.47.140.0/22 maxlen: 22
80.69.52.0/24 maxlen: 24
80.69.58.0/24 maxlen: 24
80.69.55.0/24 maxlen: 24
80.69.54.0/24 maxlen: 24
80.69.63.0/24 maxlen: 24
80.69.62.0/24 maxlen: 24
80.69.61.0/24 maxlen: 24
80.69.59.0/24 maxlen: 24
92.39.95.0/24 maxlen: 24
212.47.148.0/22 maxlen: 22
212.47.159.0/24 maxlen: 24
92.39.89.0/24 maxlen: 24
92.39.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:58:9b:fa:36:2e:1c:8d:ab:34:d7:09:aa:ec:35:98:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Dec 11 11:21:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a78a7076b72d7b31db5f1973e1975f64cb75f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:77:92:e3:87:45:1b:29:82:12:a0:18:20:
39:7f:11:a7:9a:04:21:44:d6:98:09:e7:9c:b1:6c:
31:e1:e0:e8:43:5a:47:79:91:5c:a0:5f:15:62:79:
71:6e:bf:cf:be:b0:d5:d4:df:89:e8:f7:d5:af:c6:
1c:da:70:00:ae:1b:3c:c0:be:ef:f2:14:3c:63:26:
e9:59:f4:c1:93:06:96:bb:b5:72:46:5c:56:2d:98:
da:f2:77:44:bf:05:15:81:1f:33:b0:bd:98:7a:f8:
2d:3e:46:80:40:fc:e7:1c:6f:66:32:af:d7:3a:6b:
d5:ed:6b:e7:9b:03:23:5d:3b:14:d5:4c:e8:77:d9:
25:40:be:1d:da:0d:84:dc:36:4b:56:04:7c:0c:47:
28:52:47:cd:16:7b:bf:63:de:50:07:26:8e:33:9e:
e1:10:a8:ab:8c:76:c3:88:f6:3e:0d:6e:ae:d8:26:
05:b9:10:4e:b2:9e:25:af:99:5e:64:35:84:74:b6:
17:f5:91:8c:63:67:0d:87:7b:94:60:fd:c6:d7:3c:
25:c1:09:83:35:33:a0:6b:e7:47:83:4c:ff:ce:f4:
9c:b7:20:f9:c2:e9:09:fa:62:19:f3:24:8a:c7:52:
50:d5:9a:9c:fa:08:62:87:b8:97:e9:31:af:46:f0:
a2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:78:A7:07:6B:72:D7:B3:1D:B5:F1:97:3E:19:75:F6:4C:B7:5F:63
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/mninB2ty17MdtfGXPhl19ky3X2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.69.52.0/24
80.69.54.0/23
80.69.58.0/23
80.69.61.0-80.69.63.255
91.135.245.0-91.135.251.255
91.135.254.0/23
92.39.88.0/23
92.39.95.0/24
158.181.32.0/23
158.181.35.0-158.181.36.255
158.181.40.0/21
212.47.128.0-212.47.151.255
212.47.159.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:49:00:96:40:f3:77:30:87:ed:87:2e:3b:66:02:5b:7a:d3:
ed:32:b8:88:01:cb:28:f6:68:79:93:64:db:9b:69:d8:7a:6e:
35:f3:64:76:23:3e:81:bf:24:35:d7:f2:b3:6b:1c:e9:45:2f:
9b:8d:6d:d5:e4:9a:27:05:8f:65:6e:ba:de:8e:9a:c6:74:c0:
a0:f2:9e:25:01:c3:55:75:91:02:60:2b:64:a4:98:8d:dd:77:
d7:e9:cb:44:1e:b8:fd:7c:3e:b5:fa:29:a6:ac:92:a3:f9:e8:
d6:90:e0:c5:f1:ab:e3:65:11:e7:09:87:62:f9:29:0a:da:f5:
76:95:66:77:13:d8:59:52:10:6a:70:74:fd:1d:42:04:64:08:
3c:ea:bb:5b:be:b7:5e:54:49:7a:68:2c:83:ea:27:84:0c:9d:
a2:ff:99:85:5d:ef:19:5f:38:6c:0d:60:87:0d:c8:51:0d:d1:
cf:58:30:08:6b:52:1d:90:c1:05:65:88:f5:ed:b4:4b:82:26:
a2:48:f5:53:be:50:c6:59:44:29:cb:6b:3c:ec:b6:03:6c:76:
ef:33:20:aa:af:35:69:42:ca:71:84:b2:3e:40:ca:d3:23:9f:
c4:be:e0:d8:74:ba:ea:57:7e:58:cb:c4:6a:c8:c2:34:82:e8:
fe:3c:97:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:51 2024 by rpki-client on console-ams.rpki-client.org