Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/MF0ak507BVI99C1cDRE2Yydm2Dk.roa
File: MF0ak507BVI99C1cDRE2Yydm2Dk.roa (raw, json)
Hash identifier: 0hUZWsJupobxkCbkXy6WcVK+buU8PTCVTZuoPpDTPGw=
Subject key identifier: 30:5D:1A:93:9D:3B:05:52:3D:F4:2D:5C:0D:11:36:63:27:66:D8:39
Certificate issuer: /CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
Certificate serial: 01856C1CA142EA55F273D349A72C5AB838E2
Authority key identifier: 72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/MF0ak507BVI99C1cDRE2Yydm2Dk.roa
Signing time: Sun 01 Jan 2023 06:54:53 +0000
ROA not before: Sun 01 Jan 2023 06:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25291
IP address blocks: 185.46.136.0/22 maxlen: 24
37.44.0.0/21 maxlen: 24
151.252.40.0/21 maxlen: 24
45.153.81.0/24 maxlen: 24
45.153.82.0/23 maxlen: 24
185.56.128.0/21 maxlen: 24
176.74.56.0/21 maxlen: 24
185.54.232.0/22 maxlen: 24
109.68.224.0/21 maxlen: 24
37.49.152.0/21 maxlen: 24
185.56.104.0/23 maxlen: 24
37.123.104.0/21 maxlen: 24
195.192.128.0/18 maxlen: 24
77.247.80.0/21 maxlen: 24
2a00:13c8::/32 maxlen: 48
2a00:7fc0::/33 maxlen: 48
2a00:7fc0::/32 maxlen: 48
2a04:d480::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 29 Mar 2023 11:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:a1:42:ea:55:f2:73:d3:49:a7:2c:5a:b8:38:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
Validity
Not Before: Jan 1 06:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=305d1a939d3b05523df42d5c0d1136632766d839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ad:f3:42:7a:fe:06:56:6f:f2:98:75:69:2e:
2a:f1:2f:80:f5:89:9f:8f:4e:4a:bc:84:8c:3b:c2:
d3:6e:d9:6f:7b:30:d2:39:80:e8:cd:35:93:cd:99:
e3:21:75:57:a3:d0:c5:49:ed:30:9b:d9:d2:85:38:
ec:3c:ac:27:6c:d0:47:32:85:ea:c0:26:79:3f:a8:
84:f8:48:ff:87:66:40:4a:bf:73:52:3f:e9:a7:a1:
a3:67:7a:8e:ef:34:da:9a:f8:9a:11:20:65:e1:95:
13:8f:0d:df:b1:8c:a7:04:96:0c:3e:99:54:c5:4d:
97:c4:92:e9:8b:7c:25:a2:ff:a8:2f:81:47:06:c7:
15:e1:c1:47:a8:e1:f6:08:8b:b2:9d:b3:20:de:a7:
3e:7f:7d:9d:89:c9:89:63:66:06:0f:9a:f3:97:1b:
6a:94:3c:9c:de:6c:ab:90:0f:b7:1d:a9:7e:72:4d:
5c:4f:47:50:b1:e0:a9:07:7d:16:67:5c:fb:a2:08:
80:ee:dc:6f:af:5b:c2:1d:54:36:3b:63:61:03:29:
2e:52:f6:87:96:e5:36:0d:ea:21:f3:ef:3a:50:c8:
60:59:55:68:a6:89:4b:92:f1:ff:1c:97:f0:4a:50:
e1:0c:b3:79:98:30:ec:0a:b8:e6:03:e3:49:06:59:
8f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5D:1A:93:9D:3B:05:52:3D:F4:2D:5C:0D:11:36:63:27:66:D8:39
X509v3 Authority Key Identifier:
keyid:72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/MF0ak507BVI99C1cDRE2Yydm2Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.0.0/21
37.49.152.0/21
37.123.104.0/21
45.153.81.0-45.153.83.255
77.247.80.0/21
109.68.224.0/21
151.252.40.0/21
176.74.56.0/21
185.46.136.0/22
185.54.232.0/22
185.56.104.0/23
185.56.128.0/21
195.192.128.0/18
IPv6:
2a00:13c8::/32
2a00:7fc0::/32
2a04:d480::/29
Signature Algorithm: sha256WithRSAEncryption
5c:91:be:5e:a2:9d:e0:14:e2:d3:8e:e6:59:22:dd:71:38:89:
40:3c:39:e8:15:4a:ae:e8:1a:8b:d7:50:a7:0e:b7:cc:e8:52:
90:43:5e:44:b9:6e:98:66:ff:7a:94:aa:8d:67:58:9b:e1:d9:
6f:c8:03:58:fa:24:a8:51:cb:c6:3d:04:af:7e:31:b8:d1:4c:
a4:72:37:6c:7c:c5:23:49:8f:4b:d7:91:c5:d6:c8:71:38:cf:
37:3e:9d:7f:48:11:1f:e6:76:59:dc:dc:11:ee:7c:0e:fa:25:
b2:da:c3:77:9d:ac:3e:e3:76:76:f5:fb:27:41:d3:a9:15:af:
79:8e:d6:30:86:05:7e:99:75:50:ff:76:1f:1c:47:04:ff:ed:
7d:92:56:0f:ee:5c:6c:44:20:98:93:cd:79:73:4c:11:63:cb:
2a:4c:52:6a:97:04:83:d5:2e:ed:1a:72:db:b7:9c:8e:1b:86:
63:59:36:e1:e8:97:d9:20:a2:41:20:e7:65:aa:4a:1b:9e:f5:
5f:54:f1:2c:35:48:17:64:ed:37:e5:ec:27:a8:fa:79:de:ed:
87:0e:5e:e7:45:16:9d:81:ab:56:9f:5a:1e:aa:1a:ee:73:b1:
01:6d:1e:88:0f:3b:04:b8:6e:da:a4:f9:55:bc:d8:57:fa:a0:
57:43:b4:4d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:46 2024 by rpki-client on console-fra.rpki-client.org