Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/MUPrQq3UB5mlgcw3A9AlGHpikD4.roa
File: MUPrQq3UB5mlgcw3A9AlGHpikD4.roa (raw, json)
Hash identifier: hT7rM8gh3btlbnsvE3ezUYKBrV13lQxpWbThIxQHTYE=
Subject key identifier: 31:43:EB:42:AD:D4:07:99:A5:81:CC:37:03:D0:25:18:7A:62:90:3E
Certificate issuer: /CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Certificate serial: 018CC726F312317D08C7AA91599ADB20544F
Authority key identifier: B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/MUPrQq3UB5mlgcw3A9AlGHpikD4.roa
Signing time: Mon 01 Jan 2024 22:31:07 +0000
ROA not before: Mon 01 Jan 2024 22:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56855
IP address blocks: 185.51.100.0/24 maxlen: 24
185.51.101.0/24 maxlen: 24
91.226.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:f3:12:31:7d:08:c7:aa:91:59:9a:db:20:54:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Validity
Not Before: Jan 1 22:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3143eb42add40799a581cc3703d025187a62903e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2f:92:c2:fc:4b:c8:3b:00:17:27:e3:1a:7a:
da:8e:bf:b3:e4:a2:0f:49:fe:93:d0:b3:63:c0:b9:
3a:b4:75:0d:40:8e:f9:f0:1b:d4:a4:2c:98:1a:78:
74:6e:d2:41:5f:9d:ce:fd:f1:82:77:3f:1f:cc:18:
1c:42:f9:7a:49:cc:7b:1d:74:16:a1:4e:59:04:bb:
90:f2:1c:93:bd:a0:2f:6c:6c:ca:fe:fd:75:11:69:
c9:74:cc:43:c5:c9:04:7a:8f:fc:49:05:35:d0:f9:
6f:2d:54:dd:be:23:bf:ee:14:98:73:1b:6b:aa:82:
b0:c5:46:09:35:e3:1b:78:67:b5:c3:e4:99:5c:12:
c0:f6:b4:de:eb:f6:50:6d:d6:cc:f8:82:e3:9c:5d:
5b:21:a3:42:ec:ef:8b:e5:cb:fb:16:11:60:4e:a4:
f0:17:a5:13:7e:a3:16:f1:df:0c:6c:5b:3a:a7:d9:
4f:13:bb:a3:86:b4:4d:6d:f9:f7:46:cc:23:0e:3d:
38:56:19:54:3a:89:56:e0:b6:8f:06:ae:70:1f:f3:
a2:99:d3:17:68:85:1e:cf:42:cd:ac:04:51:2f:f4:
8e:e2:5a:e8:ae:4d:dd:02:ad:52:2f:2b:59:94:5c:
3e:21:1a:aa:3c:34:a0:7b:20:b6:54:8a:b8:9a:cf:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:43:EB:42:AD:D4:07:99:A5:81:CC:37:03:D0:25:18:7A:62:90:3E
X509v3 Authority Key Identifier:
keyid:B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/MUPrQq3UB5mlgcw3A9AlGHpikD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.179.0/24
185.51.100.0/23
Signature Algorithm: sha256WithRSAEncryption
63:b2:79:5a:bc:e3:0d:23:5c:d7:7d:a3:2f:1e:b5:8c:1f:b4:
73:e2:a6:de:ef:f8:ce:39:36:8f:7a:81:a8:4c:72:4f:09:49:
b0:dd:73:e0:f5:45:bf:ca:60:53:70:1e:1e:a5:c2:db:78:08:
d3:3b:e2:ea:d2:00:4e:4d:4b:83:a8:d7:24:14:c6:85:04:0f:
d7:50:9f:d2:b3:71:4b:da:f0:59:3d:bc:44:a8:93:ab:b5:ba:
31:23:cf:e6:06:1c:70:36:84:54:29:6a:fa:06:8a:19:f4:b9:
a0:f1:14:9b:76:39:ee:ab:da:25:c6:33:36:c0:66:d4:b7:30:
56:a4:91:df:b9:ca:7b:46:1c:d2:0f:d6:10:f1:c2:39:bc:68:
82:b2:04:a7:97:1d:c5:e3:b0:58:91:de:88:33:30:9e:91:e7:
10:5b:8f:a3:47:09:dc:c4:38:b2:7b:99:cc:f9:37:f0:c6:c0:
6d:a8:e4:75:47:7f:bf:11:a5:3e:81:cc:79:74:8e:ac:54:0e:
47:f0:26:79:51:5a:04:5e:71:35:f6:25:e7:1d:ad:8e:77:d7:
f0:1c:9a:5c:f4:21:6d:00:c2:41:af:8c:79:40:c2:7d:aa:95:
9f:ff:6e:41:24:52:e8:a9:0c:84:9f:c7:31:86:a1:6f:5c:3b:
a4:98:3b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:04 2025 by rpki-client