Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/mRGkrHkMyitMWbbTSbFZiAFhAjc.roa
File: mRGkrHkMyitMWbbTSbFZiAFhAjc.roa (raw, json)
Hash identifier: rV/MnJQMXzADT9mzo1K7qzFYbSsWNr8uAhLa65UQlxo=
Subject key identifier: 99:11:A4:AC:79:0C:CA:2B:4C:59:B6:D3:49:B1:59:88:01:61:02:37
Certificate issuer: /CN=49eb8ab4e3d79de27dd1fd692196e2e39e1a3ba3
Certificate serial: 018572557A1A3AE1DB6DA06A6FCC231A2BAC
Authority key identifier: 49:EB:8A:B4:E3:D7:9D:E2:7D:D1:FD:69:21:96:E2:E3:9E:1A:3B:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeuKtOPXneJ90f1pIZbi454aO6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/mRGkrHkMyitMWbbTSbFZiAFhAjc.roa
Signing time: Mon 02 Jan 2023 11:54:42 +0000
ROA not before: Mon 02 Jan 2023 11:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50064
IP address blocks: 45.146.236.0/22 maxlen: 22
45.146.239.0/24 maxlen: 24
45.146.238.0/24 maxlen: 24
45.146.237.0/24 maxlen: 24
2a0f:4800::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:7a:1a:3a:e1:db:6d:a0:6a:6f:cc:23:1a:2b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49eb8ab4e3d79de27dd1fd692196e2e39e1a3ba3
Validity
Not Before: Jan 2 11:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9911a4ac790cca2b4c59b6d349b1598801610237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:55:de:1e:d5:2c:af:a2:01:8d:65:a6:5d:f9:
1e:1b:eb:7a:4a:f9:f0:08:17:41:8b:9d:71:13:71:
6f:e7:ba:52:2a:c8:e1:dd:c8:4f:06:5c:b0:a3:b6:
7f:51:41:62:ba:b6:a4:db:8c:fd:c3:be:c5:97:6e:
58:6d:3a:8d:14:b5:b9:cc:d3:f8:39:1a:97:a7:18:
65:94:54:88:74:48:64:c5:c1:bd:a2:0d:b9:e4:3b:
22:70:db:47:af:1e:fd:5c:56:de:00:ef:ea:8d:1d:
01:16:42:c4:84:0b:03:51:f7:48:02:30:57:40:8a:
51:5b:ad:cf:c0:52:97:c3:04:2b:72:2f:b9:ba:ea:
69:de:6d:8d:6f:a0:2b:04:2d:53:a4:23:11:af:ac:
97:60:30:58:c3:fa:9c:91:c4:b4:4f:2b:a7:bb:6f:
f3:3f:95:4e:7a:ff:da:be:5e:7e:26:f9:83:d2:e6:
94:3e:57:60:47:92:9a:02:73:d4:82:95:70:e4:80:
e1:4c:8b:9c:b1:7f:31:12:95:e3:db:9e:df:02:d0:
ef:e8:43:62:61:74:86:07:b2:85:2b:cc:84:80:30:
e1:06:fd:51:4a:2f:92:17:f7:d9:2e:ae:06:54:9f:
d4:80:68:23:26:10:a4:23:b5:04:1e:98:73:91:50:
79:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:11:A4:AC:79:0C:CA:2B:4C:59:B6:D3:49:B1:59:88:01:61:02:37
X509v3 Authority Key Identifier:
keyid:49:EB:8A:B4:E3:D7:9D:E2:7D:D1:FD:69:21:96:E2:E3:9E:1A:3B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeuKtOPXneJ90f1pIZbi454aO6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/mRGkrHkMyitMWbbTSbFZiAFhAjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.236.0/22
IPv6:
2a0f:4800::/29
Signature Algorithm: sha256WithRSAEncryption
48:cf:29:7b:bf:9a:50:a9:79:a1:ef:bd:b0:79:f6:6e:1a:7d:
94:c8:33:93:af:26:c0:d0:70:c0:b3:56:22:e5:b6:db:6d:30:
a5:7b:7e:c3:71:96:eb:ad:f9:67:ad:b9:03:e8:b3:19:87:74:
5c:73:90:bd:a1:48:6a:4c:aa:47:8f:6c:d1:91:dd:02:63:2d:
de:3e:17:9a:ea:6e:80:a0:d6:61:36:0e:3d:b4:22:6d:06:5c:
c9:c9:cd:db:87:52:ae:02:c6:a5:20:ef:a8:09:ac:67:98:52:
11:d2:14:64:20:65:4f:fd:06:e8:0b:10:28:ec:51:c4:e2:c4:
b6:63:78:5e:49:27:6a:f2:5b:12:30:83:59:e5:9c:64:4e:be:
29:ce:ad:34:d8:59:29:8b:d7:d1:07:91:fe:28:76:8a:e6:2e:
7f:81:30:42:15:99:6f:00:78:d4:ac:49:59:ce:34:8c:e8:59:
44:1d:c0:71:e8:b7:54:a3:3f:3c:b9:3c:3b:0e:50:c9:d9:26:
9d:a5:39:09:a4:80:73:08:bf:d2:07:f2:34:af:ed:60:de:44:
6a:88:df:25:97:5e:78:ba:bb:c7:a6:c4:8e:89:44:18:ce:17:
35:46:07:2a:56:e3:9f:c9:f7:b9:da:01:d6:8a:56:80:a7:f7:
0c:34:85:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:11 2024 by rpki-client on console-fra.rpki-client.org