Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/MwM7V7mUCm7rrx3CJk7NXzDjSCE.roa
File: MwM7V7mUCm7rrx3CJk7NXzDjSCE.roa (raw, json)
Hash identifier: cQR7lzRwflpUMTSUNquY6dqxSggF5+upvpvDq0DCDqE=
Subject key identifier: 33:03:3B:57:B9:94:0A:6E:EB:AF:1D:C2:26:4E:CD:5F:30:E3:48:21
Certificate issuer: /CN=50f88e05c898796c82ff0147568816e933420e18
Certificate serial: 01857169AC8A69FD50882F9BAC6F3F82CC9A
Authority key identifier: 50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/MwM7V7mUCm7rrx3CJk7NXzDjSCE.roa
Signing time: Mon 02 Jan 2023 07:37:08 +0000
ROA not before: Mon 02 Jan 2023 07:37:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 185.211.155.0/24 maxlen: 24
185.211.154.0/24 maxlen: 24
178.18.21.0/24 maxlen: 24
178.18.20.0/22 maxlen: 22
178.18.24.0/23 maxlen: 23
178.18.24.0/24 maxlen: 24
178.18.23.0/24 maxlen: 24
178.18.22.0/24 maxlen: 24
178.18.27.0/24 maxlen: 24
178.18.31.0/24 maxlen: 24
178.18.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:ac:8a:69:fd:50:88:2f:9b:ac:6f:3f:82:cc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f88e05c898796c82ff0147568816e933420e18
Validity
Not Before: Jan 2 07:37:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33033b57b9940a6eebaf1dc2264ecd5f30e34821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:32:36:a1:56:39:26:b8:a1:6b:7b:f4:43:df:
9e:18:04:1c:f2:a8:4f:a6:b7:d8:70:b1:38:7c:76:
b3:ee:17:12:7b:7d:c4:de:fb:0e:ec:62:3c:54:0d:
a7:49:f6:21:cc:50:db:17:3e:3d:13:27:a9:0d:53:
d4:34:f9:e3:37:3f:69:4f:5a:bb:00:8b:19:38:3b:
40:e9:ac:70:ca:b6:f9:d7:24:05:bf:ce:b3:25:f2:
5b:eb:dc:8c:52:cd:26:76:45:78:cc:c5:78:e8:bf:
b1:4b:e0:8c:88:c8:83:e9:fc:fd:e5:e1:bb:7f:ac:
40:73:63:63:f3:06:11:5a:5e:09:8d:c7:26:14:20:
ab:6e:98:66:ef:d5:56:01:31:90:09:91:ae:1d:f9:
6e:4e:fe:14:12:bb:dc:e2:ae:ad:3f:50:b8:8c:6f:
a7:e8:ce:fd:53:ea:ef:b4:73:1f:dd:c8:9f:54:00:
bf:c2:66:af:88:7e:90:a8:6c:ea:56:33:6b:5b:bb:
91:26:68:dd:f5:13:b1:29:91:d8:75:15:f0:95:9c:
cb:d5:9e:e5:40:bf:8a:c1:65:2e:3d:82:10:50:71:
7d:66:6a:4f:bb:ba:0f:9f:b1:5a:87:6f:ca:03:4c:
17:a1:5a:12:3d:de:80:ec:4d:01:75:d9:97:0b:3b:
53:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:03:3B:57:B9:94:0A:6E:EB:AF:1D:C2:26:4E:CD:5F:30:E3:48:21
X509v3 Authority Key Identifier:
keyid:50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/MwM7V7mUCm7rrx3CJk7NXzDjSCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.18.20.0-178.18.25.255
178.18.27.0/24
178.18.30.0/23
185.211.154.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:44:bb:46:1c:b1:e5:4f:2f:dd:a8:0f:bb:9b:65:10:8a:80:
a5:24:db:60:8c:be:43:ab:c5:7a:98:09:10:7a:da:d4:0d:e9:
f9:a1:5c:2d:9e:7d:23:71:ac:3b:c6:2c:22:67:d6:5d:26:2a:
db:9a:2a:40:2d:87:c1:b2:fa:db:e2:12:d0:27:da:9b:62:cd:
8a:b4:22:76:74:9b:8b:02:18:ce:7f:57:29:a4:ca:20:0c:ca:
fc:de:0f:9f:df:91:2a:3c:fd:b7:94:da:d1:84:58:12:03:d6:
46:91:f9:1c:09:c5:24:ac:3b:c0:58:cd:3d:76:06:b8:8e:04:
0c:b6:fc:a7:bd:a5:4a:dc:c1:62:4c:6d:89:d2:df:59:e1:bb:
46:da:61:2f:e2:27:59:b7:01:36:39:54:b8:05:34:43:9b:55:
fe:ac:1a:46:3e:93:d3:a3:7e:77:10:e9:31:7e:4b:65:58:cb:
06:24:2a:94:c9:20:5c:48:9e:55:e0:bc:90:00:79:fc:77:4e:
5b:68:ae:b2:2d:13:03:0f:95:b5:6d:2b:46:d5:17:e6:8e:92:
8f:84:9a:d4:e0:6d:8c:0b:e1:d7:fa:05:4f:c4:70:c7:29:0f:
15:59:ae:69:c3:39:13:f3:3c:fe:0b:46:a3:2f:9c:fb:1b:53:
76:5b:5b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:45 2024 by rpki-client on console-ams.rpki-client.org