Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MgHwPLJBHxngZWkk-6xbqXHrEoM.roa
File: MgHwPLJBHxngZWkk-6xbqXHrEoM.roa (raw, json)
Hash identifier: NPrVW2hM8PLSTaThjwVQMGTHZWwe7QoE4kp+K3rTktE=
Subject key identifier: 32:01:F0:3C:B2:41:1F:19:E0:65:69:24:FB:AC:5B:A9:71:EB:12:83
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018F9D5D8C55F590BE43FFC3E141502F0F23
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MgHwPLJBHxngZWkk-6xbqXHrEoM.roa
Signing time: Tue 21 May 2024 22:55:04 +0000
ROA not before: Tue 21 May 2024 22:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201949
IP address blocks: 86.107.50.0/24 maxlen: 24
89.35.131.0/24 maxlen: 24
89.40.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jun 2024 12:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9d:5d:8c:55:f5:90:be:43:ff:c3:e1:41:50:2f:0f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 21 22:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3201f03cb2411f19e0656924fbac5ba971eb1283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:b1:39:ee:4e:86:50:f2:b1:5f:bc:de:0c:
ab:b0:46:d6:93:6c:da:a8:e6:aa:96:a3:5b:6e:53:
9c:a5:c8:d5:91:ad:c1:4d:9d:37:7b:14:96:79:37:
c0:2e:43:45:7f:54:67:e1:19:af:74:3c:19:a6:3a:
86:2e:be:e7:0c:9c:00:9b:d2:99:d2:fa:92:0e:12:
d8:01:c4:07:6f:14:72:7a:58:46:f7:a7:5b:0b:3f:
18:4d:9b:d9:99:97:a5:34:d6:cd:cb:05:83:ee:f4:
a0:fc:55:c6:33:54:fc:e1:32:94:a7:80:ea:4b:4c:
48:00:6d:0f:0b:46:11:d5:29:b9:1b:97:e3:15:45:
66:4b:fe:6f:24:06:8d:d6:c1:26:1b:76:5a:ee:c5:
55:29:02:f1:20:91:52:e7:9e:83:d2:2e:a0:f3:0c:
70:02:9a:09:36:ed:31:8a:2e:5d:61:5c:78:4e:1a:
0a:ae:39:a3:29:b7:a8:9c:cd:5b:4e:b9:43:c9:56:
1b:ef:80:c4:6b:3f:96:07:30:7b:34:51:ad:73:20:
34:dd:ce:19:4c:e9:30:19:47:1e:52:22:03:b0:56:
71:5e:ad:47:6a:1c:14:1e:eb:d1:84:fb:c9:f1:34:
ed:0d:c8:b8:9e:e1:c9:5f:58:c8:c1:6a:32:a1:43:
54:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:01:F0:3C:B2:41:1F:19:E0:65:69:24:FB:AC:5B:A9:71:EB:12:83
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MgHwPLJBHxngZWkk-6xbqXHrEoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.50.0/24
89.35.131.0/24
89.40.70.0/24
Signature Algorithm: sha256WithRSAEncryption
90:71:a5:a4:36:a2:a1:ea:8f:fb:5f:34:14:ea:28:c1:49:46:
44:86:b6:b1:39:cd:d7:47:70:22:91:aa:97:90:9d:7e:27:fd:
df:7b:f5:1c:9e:94:91:48:17:b4:c2:1c:d6:0f:df:59:91:24:
b3:f1:54:2f:72:a5:b3:80:dd:d8:5d:0b:33:c1:7d:72:5d:94:
e3:45:28:fd:d9:80:6e:05:72:00:62:7c:a8:3c:60:c4:d6:4d:
91:ed:b6:82:de:b1:0c:13:eb:61:da:a9:95:17:d2:6f:34:56:
82:22:3b:21:dc:a6:c7:c0:1f:93:11:7b:23:2c:fe:3e:ed:a5:
79:c6:84:45:da:1d:8f:6f:3d:6c:02:5c:6d:d5:4b:e7:cf:b5:
6f:16:1e:d6:72:d3:c9:f1:a4:63:db:2d:25:2c:fb:21:52:e7:
45:03:77:9a:e6:ce:00:56:d4:b6:3e:fd:fc:aa:fd:35:2d:6d:
42:eb:46:32:63:0f:ab:17:c7:41:91:f8:98:96:67:f5:7a:a2:
51:87:43:48:1e:7a:f7:47:a6:20:12:df:72:25:20:93:09:a2:
21:f8:09:65:47:fc:58:b9:b3:76:95:5f:d3:73:dd:da:7a:58:
6f:20:53:d3:36:a5:ce:4d:3d:9c:eb:26:d8:cb:37:55:28:d3:
57:e4:56:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org