Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/M0WJibirmZqGNUNMChz6fxdWAlM.roa
File: M0WJibirmZqGNUNMChz6fxdWAlM.roa (raw, json)
Hash identifier: ICs+D1pMCvjv/glweO/uOG+/qO2SrQAfbVjxr4bIrvk=
Subject key identifier: 33:45:89:89:B8:AB:99:9A:86:35:43:4C:0A:1C:FA:7F:17:56:02:53
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0189F90B3377B268A212ADCE8EFDFCF8CC24
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/M0WJibirmZqGNUNMChz6fxdWAlM.roa
Signing time: Tue 15 Aug 2023 11:53:28 +0000
ROA not before: Tue 15 Aug 2023 11:53:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 2.57.241.0/24 maxlen: 24
176.126.174.0/24 maxlen: 24
93.115.203.0/24 maxlen: 24
45.88.12.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Aug 2023 14:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f9:0b:33:77:b2:68:a2:12:ad:ce:8e:fd:fc:f8:cc:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 15 11:53:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33458989b8ab999a8635434c0a1cfa7f17560253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:89:92:1c:39:b6:62:33:9f:a9:5c:70:29:
ef:54:45:a2:75:5e:cd:41:dd:d4:9c:17:39:a3:e9:
e4:bb:64:90:1e:3b:61:59:e8:e5:f7:48:c1:6d:98:
7e:a7:0d:e5:05:11:af:b5:39:3a:8b:4c:8a:d2:3f:
3f:07:ea:54:6b:36:e6:6b:c2:da:ac:fc:22:ba:9f:
f4:42:85:4c:23:73:2c:d5:85:2d:ea:c9:59:e3:ee:
7e:e3:04:a0:17:13:1c:a3:cf:1c:1b:1e:5e:2b:16:
ea:ca:f8:34:dc:1a:7e:f9:e0:4a:ee:5e:35:26:96:
88:1e:fc:57:9a:e0:7d:e8:0d:c3:1f:6b:d5:f0:dc:
45:da:e1:54:12:fe:84:b0:04:f4:3d:8a:13:3d:3c:
bd:17:e7:33:f4:f2:1d:80:63:c8:bc:05:cf:0b:57:
e1:d3:8f:39:de:2a:73:e3:ad:fe:24:a1:5c:03:31:
13:f6:46:81:c3:99:3d:20:12:49:47:93:68:77:03:
c1:7e:17:61:1c:4c:0d:ba:45:4c:ba:7c:37:70:c9:
23:7f:dc:83:cf:54:28:49:68:9b:3c:3d:4c:2b:e9:
8a:3c:3b:53:42:69:c7:8e:a8:d4:e4:a7:ff:03:bf:
a1:af:bc:40:9f:d2:36:75:58:5d:c8:2d:28:6f:71:
f8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:45:89:89:B8:AB:99:9A:86:35:43:4C:0A:1C:FA:7F:17:56:02:53
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/M0WJibirmZqGNUNMChz6fxdWAlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.241.0/24
45.88.12.0/24
93.115.203.0/24
94.177.106.0/24
176.126.174.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:bf:ee:04:df:df:8a:e6:b2:0a:0c:da:04:98:c1:25:06:ef:
22:09:95:cb:4a:bf:cd:76:7a:5a:98:19:e2:4a:2b:fd:b2:8e:
24:ec:af:96:11:15:4a:f6:37:a5:c4:ff:c5:3a:7d:cd:9f:0e:
e9:0a:f4:74:4e:ae:05:61:13:83:9e:15:bc:f8:3e:e3:cd:3c:
3a:6d:c8:a6:1e:62:5e:da:64:e3:8b:ac:bc:b7:7f:12:c9:ae:
81:56:91:18:31:a8:55:da:04:1e:d5:f7:22:8a:9f:79:b5:05:
ce:86:80:64:da:db:ae:d7:46:aa:c0:0b:57:b4:08:32:49:59:
4d:ea:37:7a:7f:06:30:7c:61:68:d4:c9:ef:6d:77:b1:8d:93:
82:06:13:cc:43:70:28:cb:c1:7d:95:85:3a:67:ba:62:c3:d1:
e5:6b:0e:2d:fb:1f:9f:b5:10:d1:0b:10:82:be:cd:6f:99:bd:
a4:11:a5:fe:65:ee:9b:5b:43:c9:9d:7a:2b:bc:b7:48:a2:a8:
85:6a:0f:b6:aa:77:83:33:1b:10:50:4f:4a:ed:cc:dc:c0:c2:
b7:ad:a8:4e:f4:32:5c:43:45:fe:a8:ca:30:22:89:38:af:89:
f0:02:7f:27:37:e1:f4:32:55:2f:f5:4e:b4:18:78:ee:b2:75:
eb:55:cc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org