Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/mMB_NCFnF2pIimWiOCvnLSP5s5E.roa
File: mMB_NCFnF2pIimWiOCvnLSP5s5E.roa (raw, json)
Hash identifier: TU+vvzVTY9YcuyYQGsqzNgaGhKhnJsgekiXrL3TjkcI=
Subject key identifier: 98:C0:7F:34:21:67:17:6A:48:8A:65:A2:38:2B:E7:2D:23:F9:B3:91
Certificate issuer: /CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Certificate serial: 01856CAF20FE3390A3A2C6493DC51C2C14FC
Authority key identifier: BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/mMB_NCFnF2pIimWiOCvnLSP5s5E.roa
Signing time: Sun 01 Jan 2023 09:34:54 +0000
ROA not before: Sun 01 Jan 2023 09:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31272
IP address blocks: 109.104.160.0/19 maxlen: 32
212.92.224.0/19 maxlen: 32
77.247.16.0/20 maxlen: 32
80.252.240.0/20 maxlen: 32
217.77.208.0/20 maxlen: 32
185.147.196.0/22 maxlen: 32
185.148.56.0/22 maxlen: 32
185.35.100.0/22 maxlen: 32
37.25.96.0/19 maxlen: 32
46.33.224.0/19 maxlen: 32
185.147.60.0/22 maxlen: 32
141.101.0.0/19 maxlen: 32
5.255.32.0/20 maxlen: 32
185.159.160.0/22 maxlen: 32
2a00:bc00::/32 maxlen: 128
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:20:fe:33:90:a3:a2:c6:49:3d:c5:1c:2c:14:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Validity
Not Before: Jan 1 09:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98c07f342167176a488a65a2382be72d23f9b391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2d:85:1e:3b:50:18:0c:16:fb:0a:24:51:02:
2f:ae:63:54:0f:4d:92:70:1f:ef:5c:02:e2:5d:a7:
83:2e:b1:f8:96:f2:c3:af:98:87:7d:29:01:7e:12:
b5:ee:a0:91:08:f2:a5:a7:b8:6c:d2:3c:24:c2:fd:
b0:f6:50:da:64:6e:f9:1a:cb:b9:3e:75:aa:6b:7a:
e1:de:60:42:71:37:e1:b6:94:c8:22:0a:e5:8b:13:
14:3d:19:c9:d1:c0:c3:46:d6:43:d9:51:92:5b:6a:
ca:11:7d:27:a2:92:69:ac:05:3a:05:69:90:7c:70:
b2:d5:b8:77:0c:33:3b:0b:45:3b:57:13:c3:c0:ed:
23:4d:97:c6:d7:3a:4a:89:87:46:40:c5:2c:61:4e:
79:3d:0e:1f:06:f0:ac:4c:80:a4:c9:1e:08:11:b8:
80:84:c0:ca:03:15:e6:1b:92:b3:98:12:5a:28:64:
4e:27:5d:b2:4b:45:fc:9d:12:db:30:7d:c5:55:3c:
72:b6:8d:94:a7:99:e2:46:58:62:d7:6b:65:9a:df:
a6:71:00:50:7c:46:8c:db:02:98:77:86:57:26:4b:
e7:f3:97:d3:1f:64:d1:d0:55:5f:59:e6:7f:f5:46:
81:fb:20:67:3b:ff:65:6a:4c:f3:3b:c0:29:38:d8:
2a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C0:7F:34:21:67:17:6A:48:8A:65:A2:38:2B:E7:2D:23:F9:B3:91
X509v3 Authority Key Identifier:
keyid:BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/mMB_NCFnF2pIimWiOCvnLSP5s5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.32.0/20
37.25.96.0/19
46.33.224.0/19
77.247.16.0/20
80.252.240.0/20
109.104.160.0/19
141.101.0.0/19
185.35.100.0/22
185.147.60.0/22
185.147.196.0/22
185.148.56.0/22
185.159.160.0/22
212.92.224.0/19
217.77.208.0/20
IPv6:
2a00:bc00::/32
Signature Algorithm: sha256WithRSAEncryption
31:0a:c8:63:8e:a6:79:55:b5:6a:ec:f1:f3:61:83:48:1f:5c:
29:06:c2:6b:ba:e8:36:ed:84:c4:1a:40:4e:97:33:54:13:06:
1f:b6:2d:fc:1c:d1:a6:57:65:ec:20:8f:11:06:0a:ef:ae:ec:
09:c8:2f:2b:a3:54:2d:ac:0f:68:08:29:e2:81:82:c5:63:3c:
78:c5:0f:c5:b3:37:8c:6a:51:fa:ad:a9:1f:50:be:76:c6:45:
68:d1:3d:c9:99:bb:5a:8d:9f:24:28:76:2c:44:f8:39:4d:3e:
7c:9c:6b:fa:04:85:a9:b2:ea:98:39:d8:3d:18:e8:30:e5:de:
90:41:f5:7e:7e:28:ec:ac:2d:42:18:05:13:a7:08:b9:a5:df:
69:54:ca:28:70:72:09:eb:f9:41:e6:71:1e:a0:51:88:b5:6e:
d9:bd:05:4d:05:c8:1b:48:d7:d1:e9:8e:0e:72:8a:c6:4d:9f:
67:37:d0:90:52:0b:30:34:24:34:ea:92:bc:1e:04:cb:73:af:
ef:24:37:88:69:b6:a7:8f:09:47:1e:aa:3e:1e:2d:7a:c8:06:
80:ad:8d:9b:20:87:68:e4:b5:1e:75:45:c6:1b:ce:ed:f9:71:
54:25:b8:1c:f9:6b:1a:6d:2e:19:3e:0c:dc:1e:dc:ce:6a:61:
b6:09:14:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:18 2024 by rpki-client on console-ams.rpki-client.org