Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mYGSIXpZcsAsedC-dz7EZq1fhhc.roa
File: mYGSIXpZcsAsedC-dz7EZq1fhhc.roa (raw, json)
Hash identifier: +++HC0onAHDSmBGnJqQBt5R1wSuw/aeL/XZgZdX5tb4=
Subject key identifier: 99:81:92:21:7A:59:72:C0:2C:79:D0:BE:77:3E:C4:66:AD:5F:86:17
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018BC00333FD2704E00262B7F50DFDCD5EED
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mYGSIXpZcsAsedC-dz7EZq1fhhc.roa
Signing time: Sat 11 Nov 2023 20:11:57 +0000
ROA not before: Sat 11 Nov 2023 20:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52041
IP address blocks: 185.248.134.0/24 maxlen: 24
82.215.64.0/24 maxlen: 24
2a12:bec0:7004::/48 maxlen: 48
2a12:bec1:b00b::/48 maxlen: 48
2a12:bec0:e40::/44 maxlen: 44
2a12:bec0:d0::/44 maxlen: 48
2a12:bec2:b00b::/48 maxlen: 48
2a12:bec0:7003::/48 maxlen: 48
2a12:bec2::/32 maxlen: 32
2a12:bec0:7007::/48 maxlen: 48
2a12:bec0:7002::/48 maxlen: 48
2a12:bec0:7000::/48 maxlen: 48
2a12:bec0:b00b::/48 maxlen: 48
2a12:bec0:7006::/48 maxlen: 48
2a12:bec0:7001::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 18 Dec 2023 00:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c0:03:33:fd:27:04:e0:02:62:b7:f5:0d:fd:cd:5e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Nov 11 20:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=998192217a5972c02c79d0be773ec466ad5f8617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:59:57:bf:05:cf:bb:41:9e:d2:91:33:2b:
fd:1e:b9:5e:08:7a:63:25:6b:5f:41:10:5f:e8:9d:
18:bb:b0:12:77:8e:82:3f:c2:58:10:38:7d:ee:9b:
f2:d3:54:f7:6c:81:5c:8d:3c:ea:c2:ad:9c:a6:b6:
bb:61:2f:72:79:0c:07:92:33:b4:f4:49:a5:f2:b2:
a2:59:3f:99:c2:f7:c0:6f:4d:95:32:36:0e:97:2f:
0c:25:98:d5:2e:2a:c8:ae:60:5f:1a:25:c8:1d:a9:
b3:a4:9f:51:7c:4d:c2:97:62:2f:d4:e3:31:73:04:
de:ed:2b:14:a8:4c:03:45:fb:0d:ef:75:09:4a:26:
e7:0e:1c:87:78:c9:9f:af:3a:96:29:50:6b:d8:1b:
5d:68:59:5e:9e:e8:1b:e1:c7:98:41:41:e3:0f:e5:
04:c8:a7:62:5e:54:a2:b3:a0:1e:37:47:f3:6b:03:
5a:60:59:ba:89:f6:e3:fe:45:1f:53:41:e6:2e:8f:
80:c2:23:01:a1:33:01:f8:b7:78:24:9b:e6:8d:2b:
bf:d6:35:da:44:ec:36:32:ae:e7:7a:17:7a:e2:63:
b3:72:77:d4:11:19:c6:f2:34:16:50:48:b5:1e:37:
cb:0a:7a:06:ca:9e:91:3f:0b:c9:df:af:b2:37:32:
bc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:81:92:21:7A:59:72:C0:2C:79:D0:BE:77:3E:C4:66:AD:5F:86:17
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mYGSIXpZcsAsedC-dz7EZq1fhhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.64.0/24
185.248.134.0/24
IPv6:
2a12:bec0:d0::/44
2a12:bec0:e40::/44
2a12:bec0:7000::-2a12:bec0:7004:ffff:ffff:ffff:ffff:ffff
2a12:bec0:7006::/47
2a12:bec0:b00b::/48
2a12:bec1:b00b::/48
2a12:bec2::/32
Signature Algorithm: sha256WithRSAEncryption
98:4f:7c:97:62:97:33:94:02:f5:85:03:47:0d:9a:ac:71:01:
8c:af:e7:37:6b:43:c2:47:ae:bc:bd:e7:e4:51:ae:6a:cd:8f:
d8:06:a0:0c:f8:f1:ab:f8:9d:86:ea:a7:5b:e2:f5:1a:18:2e:
e2:6d:dd:4a:b3:19:d8:a5:d7:c1:f2:dd:74:43:4d:d8:2f:05:
a5:a5:6c:5f:7c:8a:2e:46:1a:95:d8:bf:50:dd:22:6f:38:fe:
7c:e2:d8:33:85:86:f7:58:2c:4b:3a:a8:17:1a:81:d7:93:d3:
1b:d2:d4:a7:81:bc:b1:24:e0:21:e1:a6:f9:d5:2e:16:a9:c7:
af:fe:a9:3b:a0:75:73:f6:39:bf:e2:fc:db:c9:69:ed:93:9d:
1d:4a:d0:9d:32:48:3d:be:bd:bb:03:09:d1:d1:43:8e:65:1c:
70:31:4b:43:44:59:99:c6:e7:f4:86:08:63:70:12:12:ae:c2:
12:98:c0:02:b2:6b:ae:b3:75:95:dd:f7:fa:93:c1:2f:05:85:
64:20:19:2b:ca:e4:78:9c:cd:37:4e:55:97:aa:3f:2c:b6:21:
b7:55:80:a8:12:38:bb:fb:7a:4d:45:1b:1a:f1:78:42:7e:e4:
77:39:7f:d0:6e:c2:8a:44:22:43:b3:fa:b8:0f:bd:23:6c:e6:
f9:f3:3d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org