Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/MksearU6VPNkz41FLgamrnIvvHQ.roa
File: MksearU6VPNkz41FLgamrnIvvHQ.roa (raw, json)
Hash identifier: k5J5u2EeU24K21FM8mMv2F48THQABMZ1yPCATndZ/no=
Subject key identifier: 32:4B:1E:6A:B5:3A:54:F3:64:CF:8D:45:2E:06:A6:AE:72:2F:BC:74
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0190C0136317D0793D5245107853A1193F10
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/MksearU6VPNkz41FLgamrnIvvHQ.roa
Signing time: Wed 17 Jul 2024 09:43:34 +0000
ROA not before: Wed 17 Jul 2024 09:43:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.102.96.0/20 maxlen: 24
5.102.96.0/21 maxlen: 24
46.20.216.0/21 maxlen: 24
89.46.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jul 2024 13:43:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c0:13:63:17:d0:79:3d:52:45:10:78:53:a1:19:3f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jul 17 09:43:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=324b1e6ab53a54f364cf8d452e06a6ae722fbc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:4b:1b:2b:b7:34:33:64:43:79:4c:8f:19:
ca:c1:95:88:b3:0e:e4:61:1d:80:26:39:0e:8f:89:
59:90:96:93:60:1d:aa:72:de:6d:25:cc:8e:6f:72:
41:39:8e:87:0c:8f:5e:ff:fd:21:15:d5:7a:59:83:
da:66:de:e2:2d:bc:40:71:0b:61:55:b6:89:68:77:
16:96:2b:0a:a4:ee:9d:3f:fc:4c:ff:54:58:71:1d:
5d:ff:54:04:a2:b8:b0:ad:14:8e:2d:ca:88:ee:36:
e9:89:7c:b4:81:fb:0e:fc:51:ad:e3:d7:d3:84:a4:
1e:e3:0f:1c:a3:28:b3:bd:4a:11:2c:8f:7b:2a:f0:
ec:d3:9d:55:aa:37:a7:ed:2b:fc:50:cd:d8:76:77:
29:77:d7:49:c2:20:84:8f:bf:92:f3:ff:47:c5:9c:
65:b3:20:a7:92:16:f4:f8:6b:e7:bc:ba:92:85:12:
91:c5:cd:7f:83:e3:6d:8c:76:50:4d:3d:8e:a2:cf:
e6:72:8a:e1:8b:fc:bb:b7:c8:32:07:f3:21:09:e8:
df:e8:0d:13:3a:95:6a:0c:af:d1:4e:6b:98:15:ad:
e8:42:02:91:be:8e:dc:15:0f:8c:30:64:a9:30:61:
5e:c8:c3:73:03:59:89:02:58:66:18:11:7a:8b:13:
b9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4B:1E:6A:B5:3A:54:F3:64:CF:8D:45:2E:06:A6:AE:72:2F:BC:74
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/MksearU6VPNkz41FLgamrnIvvHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.96.0/20
46.20.216.0/21
89.46.180.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:ba:40:43:e7:ae:1b:66:48:15:88:4c:41:41:9e:c1:e9:ae:
8d:27:48:b9:66:92:a2:ea:1a:df:ae:25:60:a7:7f:f0:a7:82:
64:b5:42:2f:b5:e0:18:77:1c:8f:9c:21:b9:11:a1:ca:31:b1:
21:cc:35:81:14:95:17:50:33:da:bf:70:1c:39:c4:b0:07:03:
5c:cb:03:41:22:ee:dd:e5:3d:52:43:e9:c6:ab:6b:69:30:f6:
a5:ca:74:03:5b:db:87:d3:b0:03:28:0a:6f:05:f5:83:5e:bd:
ce:3c:14:2c:cd:24:57:c9:d6:2f:a9:53:58:13:87:89:61:c1:
1c:63:66:1c:b0:0b:09:47:48:1f:6e:4d:43:71:94:9e:24:58:
60:84:04:a9:4d:93:b9:32:5b:40:06:bf:d5:96:5f:30:74:22:
db:52:53:6a:c4:c4:6b:75:9c:3e:a2:f5:23:15:1d:01:9a:bf:
66:eb:2f:d9:5e:3f:1e:11:ab:77:cd:e2:5d:a8:34:6b:57:6f:
39:29:2c:55:2c:65:78:82:53:79:41:f8:17:97:fb:98:b5:ea:
9d:7e:9c:a2:f7:90:fd:47:7b:a5:46:29:50:08:73:77:c9:c4:
ee:94:b1:a7:7e:74:4b:66:56:5f:f4:45:a7:b5:a1:96:35:19:
18:74:cf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 19:05:00 2024 by rpki-client on console-ams.rpki-client.org