Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mWlwoCRNUOi8R4nb1nwQtY2MzRM.roa
File: mWlwoCRNUOi8R4nb1nwQtY2MzRM.roa (raw, json)
Hash identifier: DSAKuc/Jaw9kvFXoVo5BJzHs7umSgCTMxhpKex18Rqw=
Subject key identifier: 99:69:70:A0:24:4D:50:E8:BC:47:89:DB:D6:7C:10:B5:8D:8C:CD:13
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0187D2162E33AAE6671EBEABB32598BBCB9C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mWlwoCRNUOi8R4nb1nwQtY2MzRM.roa
Signing time: Sun 30 Apr 2023 12:14:41 +0000
ROA not before: Sun 30 Apr 2023 12:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 86.107.51.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
89.35.131.0/24 maxlen: 24
188.241.136.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
77.81.88.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
77.81.100.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 May 2023 04:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d2:16:2e:33:aa:e6:67:1e:be:ab:b3:25:98:bb:cb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 30 12:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=996970a0244d50e8bc4789dbd67c10b58d8ccd13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:38:7a:11:02:8a:89:c8:a3:1d:12:cf:27:
07:21:1d:eb:82:50:0b:03:17:72:24:66:da:31:a3:
56:54:a9:2c:80:50:2a:02:8b:e0:f8:05:e0:1f:8b:
fd:e4:4f:3f:38:39:7e:73:77:9f:6b:9f:3d:1b:c9:
4d:29:a9:6e:4c:07:bd:19:8a:c2:bd:71:70:73:e7:
3e:58:41:36:cb:65:f2:ff:e3:68:2f:c6:34:6e:c2:
9f:29:41:80:f0:27:dd:a8:81:7d:bf:8e:c4:56:74:
f0:82:f6:76:0e:9b:66:99:63:ba:37:39:88:10:14:
fa:11:70:40:54:e1:e0:61:bf:f0:32:dd:4d:6a:77:
c1:21:91:a4:71:5f:78:7a:b6:21:27:6b:88:87:99:
75:3d:4e:72:10:2f:09:52:46:b2:f0:3f:48:6c:e9:
6d:6f:5d:c0:f9:66:d0:11:f2:d7:56:f5:9d:2a:21:
6e:dc:9f:6f:29:3a:7f:6a:46:ae:c9:98:19:8d:88:
c8:14:df:a9:92:46:69:26:ca:2b:28:11:2b:05:6a:
b9:6f:2b:99:82:f1:04:30:c1:98:2d:8b:c8:c7:8f:
cb:8c:dd:fc:29:47:4a:ad:56:a4:7d:a2:52:67:aa:
49:69:9d:0b:d9:13:51:0e:f3:39:dc:e1:03:76:65:
b7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:69:70:A0:24:4D:50:E8:BC:47:89:DB:D6:7C:10:B5:8D:8C:CD:13
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mWlwoCRNUOi8R4nb1nwQtY2MzRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
77.81.88.0/24
77.81.100.0/24
86.107.51.0/24
89.34.219.0/24
89.35.129.0-89.35.131.255
89.45.35.0/24
94.198.171.0/24
176.223.188.0/24
188.214.107.0/24
188.241.136.0/23
Signature Algorithm: sha256WithRSAEncryption
54:81:22:9c:01:5b:a7:7d:26:0a:8c:c6:22:a0:71:cb:e4:a3:
a8:9a:7f:3b:d3:fd:10:5c:a7:ba:6e:66:07:1f:f2:b2:3e:9b:
8e:98:ff:0a:4d:e2:73:97:72:58:6c:70:6b:90:c5:a4:e8:c9:
8e:00:2f:1b:30:59:20:04:96:be:76:ff:4a:5c:9b:7a:1c:89:
99:a0:ac:82:2c:fa:ca:ed:97:c7:0b:43:5b:52:63:6a:90:6a:
58:b3:95:6c:c5:eb:1f:71:9f:90:12:7b:85:5e:ba:0b:6c:12:
c0:0d:3d:d4:10:f9:a0:fe:8f:8e:9e:21:88:a9:36:9d:ba:3e:
f0:28:c2:c7:bc:51:8a:fc:6b:0d:56:5f:f1:6d:f0:db:1d:22:
1b:60:22:73:4f:e4:64:25:a2:37:b3:6f:99:4d:14:cc:34:b7:
02:24:87:bb:d3:cb:88:2e:91:e2:c3:54:fa:99:8b:da:da:10:
d6:64:aa:8f:b9:49:a2:ec:73:54:43:92:22:1c:db:94:e3:71:
90:78:7b:9a:49:b6:74:8f:e2:a8:da:da:e5:de:43:ee:11:25:
3f:15:ad:ea:8f:c1:1a:1b:6b:04:1c:d1:b9:fe:8d:0a:c9:8a:
9b:24:2a:39:99:c9:ee:c5:b2:ba:96:23:3f:53:42:cb:bb:0f:
54:6d:2e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org