Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/MSiPBjQeEQmk2o5wOjRwpvVgMRM.roa
File: MSiPBjQeEQmk2o5wOjRwpvVgMRM.roa (raw, json)
Hash identifier: AZOdJHT+e5+8SkIucgBd/LR/39Z8O2RYSs3XqKqB1dI=
Subject key identifier: 31:28:8F:06:34:1E:11:09:A4:DA:8E:70:3A:34:70:A6:F5:60:31:13
Certificate issuer: /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial: 018F0F650171BDC59800228479C5A84D069C
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/MSiPBjQeEQmk2o5wOjRwpvVgMRM.roa
Signing time: Wed 24 Apr 2024 09:17:08 +0000
ROA not before: Wed 24 Apr 2024 09:17:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211381
IP address blocks: 62.233.53.0/24 maxlen: 24
109.107.157.0/24 maxlen: 24
194.26.232.0/24 maxlen: 24
194.62.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 May 2024 10:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0f:65:01:71:bd:c5:98:00:22:84:79:c5:a8:4d:06:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Validity
Not Before: Apr 24 09:17:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31288f06341e1109a4da8e703a3470a6f5603113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8a:a5:f8:98:20:21:61:1e:ac:30:a1:ff:fd:
9e:dc:6e:01:50:a2:69:b2:ea:4d:40:20:4a:83:18:
36:31:6f:fc:d4:2d:ac:b7:d4:cb:0c:6e:95:46:80:
6d:4e:d9:04:39:d0:24:cb:44:23:52:af:90:37:63:
3a:29:5c:07:f5:f7:6d:a5:51:7d:82:2f:98:39:b7:
70:c3:a6:9e:59:3a:10:ee:36:d9:50:e3:13:ce:3d:
8c:8a:08:a6:76:c3:9b:ee:ac:ac:59:c1:42:fb:7f:
1c:5a:f0:ed:d6:87:c5:42:4d:86:da:94:f3:ac:bb:
20:ce:53:bf:8d:bd:0c:32:10:6a:87:b2:08:83:0c:
fb:42:99:6b:f8:60:87:de:30:78:b2:cc:27:1d:b8:
1f:93:0e:01:e4:b0:da:e9:de:1c:f2:53:a5:8e:94:
19:ff:f7:2b:f1:24:cf:78:4f:93:59:b6:19:8f:73:
0c:42:33:c5:aa:00:33:b0:96:58:58:53:af:63:20:
d6:7a:13:4f:3d:13:cc:08:2a:1d:d6:44:86:d4:a1:
37:6d:99:ac:fe:03:1d:0f:6d:0f:b9:a0:38:d0:86:
aa:49:57:d4:09:19:24:41:ef:6a:ee:e0:b2:da:a0:
a2:d8:fc:d6:29:40:05:5f:ac:e2:be:e7:fe:6e:b9:
8f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:28:8F:06:34:1E:11:09:A4:DA:8E:70:3A:34:70:A6:F5:60:31:13
X509v3 Authority Key Identifier:
keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/MSiPBjQeEQmk2o5wOjRwpvVgMRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.53.0/24
109.107.157.0/24
194.26.232.0/24
194.62.105.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2f:33:c1:95:ae:aa:3c:f9:ec:60:bc:34:79:63:9d:fc:e1:
7f:b7:f3:22:6e:b3:0c:5c:67:3f:f7:46:f3:fe:39:fd:9b:65:
ae:f6:8c:d4:5f:f7:6b:3a:f7:7f:46:11:82:d3:b3:25:8f:08:
12:07:61:a7:63:5e:ff:8c:96:96:6a:c7:1a:ba:41:bd:a7:8e:
02:29:db:c8:c7:95:fd:13:9c:48:6a:4f:6a:5b:94:8b:66:ef:
02:07:9c:86:e4:02:8d:e6:75:8c:f8:1b:bb:1c:f4:a1:3d:65:
7c:1c:55:88:f7:7a:33:14:a4:e1:46:94:c1:f3:4b:3b:6c:67:
64:f5:a9:55:ce:4b:10:dc:6d:20:1d:a5:c0:69:1b:ff:69:6c:
b6:b3:c2:8d:b1:59:55:49:61:c8:15:2d:30:6e:e4:f8:47:65:
76:c9:2a:17:7e:cf:7e:ab:02:88:2c:20:25:e4:b4:6d:d3:9c:
2f:b0:39:fd:2e:8d:75:9a:40:4a:a7:05:79:ce:be:bf:67:41:
66:22:8d:46:c3:05:49:32:9a:ed:1c:1e:98:c1:c7:13:d2:7d:
cc:d3:a2:eb:5d:6f:9f:43:56:0a:f9:12:07:71:53:f9:4f:23:
fd:03:ce:23:d9:2a:7d:71:43:3b:02:3f:e1:d6:b2:d7:bb:4c:
ba:94:45:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:20 2024 by rpki-client on console-ams.rpki-client.org