Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/MREHrW-vyRiuKiebSSzeK-L-On8.roa
File: MREHrW-vyRiuKiebSSzeK-L-On8.roa (raw, json)
Hash identifier: Dl5YvvLYl/ozCUJvi94VVTqkbYMu+nheZL0/8uQqnAE=
Subject key identifier: 31:11:07:AD:6F:AF:C9:18:AE:2A:27:9B:49:2C:DE:2B:E2:FE:3A:7F
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 0186E47300795993BBBA38317033A7FD9D2E
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/MREHrW-vyRiuKiebSSzeK-L-On8.roa
Signing time: Wed 15 Mar 2023 08:46:27 +0000
ROA not before: Wed 15 Mar 2023 08:46:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 216.194.80.0/20 maxlen: 32
103.225.128.0/22 maxlen: 32
43.252.28.0/22 maxlen: 32
103.211.184.0/23 maxlen: 32
45.130.120.0/22 maxlen: 32
37.61.226.0/24 maxlen: 32
193.151.52.0/22 maxlen: 32
180.94.216.0/22 maxlen: 32
85.208.148.0/22 maxlen: 32
103.30.12.0/22 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:73:00:79:59:93:bb:ba:38:31:70:33:a7:fd:9d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: Mar 15 08:46:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=311107ad6fafc918ae2a279b492cde2be2fe3a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f1:66:60:cb:e3:db:dd:45:34:4d:c1:53:18:
d0:bd:e7:db:78:1d:0d:66:f2:39:1f:67:e2:d8:b8:
e5:05:21:20:a2:b6:a7:4d:b5:13:9c:8d:33:ee:2d:
07:b9:5d:cb:1a:22:49:07:ad:2d:b5:77:21:57:64:
0d:5e:2d:c2:f2:1f:c6:c3:6b:37:53:fe:d0:85:52:
33:2f:f3:ee:a5:db:e3:70:ed:2b:3a:7e:a6:b2:5c:
30:9a:6c:fe:72:36:2d:a7:d8:ab:ad:e0:d2:94:b2:
08:e4:9f:a4:88:23:98:af:39:6c:62:fa:2e:c9:03:
45:9e:bd:93:74:2d:75:1e:5e:1c:6e:27:f0:e0:b5:
c4:01:58:01:f9:f7:13:97:74:09:81:d4:2c:1d:7a:
d3:40:26:ec:74:49:36:b8:66:42:b4:6d:f6:51:4c:
82:8c:cc:47:2a:0a:53:d6:4c:8f:18:2d:aa:6c:21:
60:d9:77:83:6a:fc:09:6d:fa:e2:20:c4:2e:e0:9a:
15:8a:67:a1:43:b5:aa:eb:1b:81:36:01:bf:fd:e3:
90:d8:4b:f2:9c:8c:68:66:65:6a:c2:09:7e:5c:25:
20:fb:c3:1f:b4:ba:35:b3:91:a1:ba:cd:a8:06:46:
61:db:e0:25:22:99:3c:80:e3:a3:fe:45:ff:77:04:
85:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:11:07:AD:6F:AF:C9:18:AE:2A:27:9B:49:2C:DE:2B:E2:FE:3A:7F
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/MREHrW-vyRiuKiebSSzeK-L-On8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.226.0/24
43.252.28.0/22
45.130.120.0/22
85.208.148.0/22
103.30.12.0/22
103.211.184.0/23
103.225.128.0/22
180.94.216.0/22
193.151.52.0/22
216.194.80.0/20
Signature Algorithm: sha256WithRSAEncryption
45:fb:f7:d4:0a:2e:2b:5d:f9:32:95:fc:22:d3:d6:d4:cf:57:
f2:9e:e9:34:88:a7:72:77:62:62:22:66:72:35:77:14:2d:fc:
e0:6e:50:b4:89:57:f3:75:d1:f9:6a:15:fe:b3:88:c1:6c:b2:
62:8c:6b:be:9f:d2:8a:fe:30:3f:33:4a:f4:63:5a:f9:c7:e6:
73:98:cb:8f:97:2c:a1:1e:a0:99:6c:07:f5:0c:c6:6f:62:4d:
d2:b1:f2:5e:ef:39:8e:a4:12:c8:39:64:b2:cc:09:f5:97:c4:
4d:94:17:b1:80:53:10:33:10:ef:ec:0e:75:00:fc:ac:35:25:
e7:ef:28:bb:f7:61:bd:66:d0:39:45:c5:46:6c:29:60:46:b5:
a3:f1:05:f6:03:94:94:20:b0:12:ce:51:d4:fe:1e:50:20:6f:
a5:24:b4:e0:29:c1:32:a5:1e:fa:3a:28:eb:8d:80:f0:ea:3c:
dd:5c:45:f1:49:63:83:6d:3d:56:10:d8:30:d8:48:b3:25:bb:
18:96:38:28:62:55:c3:a4:42:e2:42:ef:f5:5c:59:8b:4c:af:
57:54:b8:03:f4:6c:66:73:83:fc:0e:a3:6e:68:d6:d3:26:94:
46:49:be:0f:d0:32:99:ec:e4:be:35:c6:2b:41:9d:ea:e3:6c:
79:b5:91:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:00 2023 by rpki-client on console-ams.rpki-client.org