Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/MJwhm_acAyuzXhOVeyuMmUMJG6A.roa
File: MJwhm_acAyuzXhOVeyuMmUMJG6A.roa (raw, json)
Hash identifier: 3aj7vSGGTbgyCQERU1FlIjptGesG6r+TL/QdlBJV0Wo=
Subject key identifier: 30:9C:21:9B:F6:9C:03:2B:B3:5E:13:95:7B:2B:8C:99:43:09:1B:A0
Certificate issuer: /CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8
Certificate serial: 01857183120810BFD772A1E92DC1BE930182
Authority key identifier: EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/MJwhm_acAyuzXhOVeyuMmUMJG6A.roa
Signing time: Mon 02 Jan 2023 08:04:53 +0000
ROA not before: Mon 02 Jan 2023 08:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44525
IP address blocks: 212.45.71.0/24 maxlen: 24
212.45.70.0/24 maxlen: 24
212.45.68.0/22 maxlen: 22
212.45.69.0/24 maxlen: 24
212.45.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:12:08:10:bf:d7:72:a1:e9:2d:c1:be:93:01:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8
Validity
Not Before: Jan 2 08:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=309c219bf69c032bb35e13957b2b8c9943091ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:6c:ed:8b:51:cd:c0:ff:8b:7e:98:63:ae:
bd:ac:df:52:29:2e:f3:75:49:28:d0:2a:25:31:8d:
4e:4e:e8:2b:28:32:56:18:dd:94:2e:1e:58:61:9c:
da:22:7e:66:86:16:a6:55:96:08:c5:8b:ed:f8:6b:
e1:1c:ed:2e:62:90:f7:1c:88:26:bc:39:94:05:3d:
fe:2c:b9:8a:6b:21:9b:da:cd:37:7f:20:72:b0:da:
97:e1:9b:27:6f:63:4e:73:88:ea:ca:02:27:92:d4:
ff:de:fc:06:f2:22:a0:b4:7b:69:fb:85:a6:e6:98:
2d:cd:c6:25:1a:da:6c:13:53:28:03:b8:db:7e:0d:
46:00:1d:70:24:6f:93:b4:27:88:99:55:cf:cf:10:
f7:4b:fe:7e:63:ae:0b:6d:9d:a7:22:95:44:18:3d:
5e:3c:92:36:48:b7:58:47:af:51:d6:8a:5f:a2:90:
31:da:9f:8f:ac:af:02:0b:86:e5:d7:54:77:e9:91:
07:44:77:f3:ab:cd:0c:0b:bd:cb:15:da:af:68:94:
1e:92:18:32:39:58:89:d5:72:01:ff:ea:64:7a:fc:
8a:47:94:fe:aa:bb:eb:d6:e1:b1:27:ae:cf:76:87:
5a:99:ad:55:e4:7b:81:31:bc:6a:07:5c:bd:83:93:
2c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9C:21:9B:F6:9C:03:2B:B3:5E:13:95:7B:2B:8C:99:43:09:1B:A0
X509v3 Authority Key Identifier:
keyid:EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/MJwhm_acAyuzXhOVeyuMmUMJG6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.45.68.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:23:c5:52:b1:2d:e6:8d:d1:26:bd:23:75:7f:39:b0:1b:b1:
e6:49:e3:04:af:ba:37:2a:03:28:74:6f:2c:1e:fe:9c:89:33:
d0:d9:f0:84:c0:17:10:ea:1d:44:b3:a1:68:9e:af:47:13:41:
d4:11:fe:98:2a:6a:68:86:18:68:6f:c7:cc:06:a0:56:ce:84:
12:17:55:9d:f2:dd:4b:55:7a:d9:fe:a5:26:ce:65:b4:4c:83:
8a:66:b4:32:be:11:a7:ef:04:e7:e9:b5:d1:39:d8:63:11:22:
6d:0c:da:3e:17:84:f6:95:87:3f:de:58:ed:f3:33:cf:87:21:
91:ab:d9:3b:03:fd:73:de:6a:24:b0:26:74:3d:5d:63:37:79:
ef:f9:57:a5:53:2c:10:3c:89:45:49:ea:12:08:b6:e2:9f:4e:
91:49:ab:98:d8:98:c3:87:92:99:03:e7:52:04:82:5d:d6:bb:
fd:62:2f:61:68:c6:57:9c:73:00:5d:6c:70:f4:00:06:fe:66:
cd:a6:54:97:43:b5:dd:1a:77:c5:61:32:29:d4:36:9b:8b:bf:
b5:d8:36:12:7f:4d:9e:fe:d4:74:1d:97:b5:ca:29:b7:e1:e8:
92:b1:fb:3d:28:a3:05:a3:c9:6e:a3:21:6f:3d:ea:a4:f8:3f:
ce:7c:3d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:33 2024 by rpki-client on console-fra.rpki-client.org