Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Mdp8HXWmymjmef0eTF6Iao_MByw.roa
File: Mdp8HXWmymjmef0eTF6Iao_MByw.roa (raw, json)
Hash identifier: YCwJNpt/HnmeZoZwCaWjRs/6h9oM0h8Dw2J+Kr0qMt4=
Subject key identifier: 31:DA:7C:1D:75:A6:CA:68:E6:79:FD:1E:4C:5E:88:6A:8F:CC:07:2C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F28B1A95E29EB3CAE420D6ECA37593956
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Mdp8HXWmymjmef0eTF6Iao_MByw.roa
Signing time: Mon 29 Apr 2024 07:11:22 +0000
ROA not before: Mon 29 Apr 2024 07:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 80.240.88.0/21 maxlen: 24
82.152.174.0/23 maxlen: 23
82.153.208.0/22 maxlen: 22
82.163.24.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 07:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:28:b1:a9:5e:29:eb:3c:ae:42:0d:6e:ca:37:59:39:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 29 07:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31da7c1d75a6ca68e679fd1e4c5e886a8fcc072c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:92:99:2e:37:a6:32:13:35:9f:c8:a5:0e:80:
72:b2:80:f5:bb:e2:ec:55:84:34:66:51:fc:63:9d:
04:e6:04:39:22:85:f8:42:87:7a:22:bb:7b:b9:0a:
0e:ed:0f:8e:10:ca:76:24:f0:96:ad:c2:55:c5:63:
10:41:ee:78:2d:a0:c0:4f:a6:48:19:4e:6c:c4:a3:
23:df:4b:6b:b1:57:c9:1d:c3:e3:14:88:f9:22:e2:
e2:37:af:84:cf:86:ce:b5:c2:c1:f6:51:60:11:de:
a9:f1:e1:01:c1:15:7f:01:59:42:d1:1e:4d:b0:26:
da:a2:f2:4d:35:a8:fa:38:e6:c5:81:e0:b4:8e:02:
3b:fe:21:2d:40:a4:85:56:08:69:f9:27:5f:bf:e9:
91:11:9c:d8:a2:8a:4d:55:3c:1b:4f:35:f2:bf:cd:
13:d8:05:a8:df:c5:f8:39:63:f3:f7:e3:f1:42:f0:
dc:3d:46:24:07:de:8b:64:3b:b3:21:ba:37:bd:9c:
da:90:e2:92:37:06:9f:7d:32:b1:6e:32:fe:79:1b:
09:93:76:cd:91:f3:cf:4b:04:d6:4c:6b:cf:49:a3:
05:0f:01:cb:ce:8d:b3:cc:53:fd:b3:28:62:8a:d8:
4b:73:8d:ed:30:79:1b:ed:89:63:10:d1:dc:5d:3f:
fc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DA:7C:1D:75:A6:CA:68:E6:79:FD:1E:4C:5E:88:6A:8F:CC:07:2C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Mdp8HXWmymjmef0eTF6Iao_MByw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.88.0/21
82.152.174.0/23
82.153.208.0/22
82.163.24.0/21
Signature Algorithm: sha256WithRSAEncryption
11:78:5b:f6:65:77:bd:bd:dd:5b:15:54:ae:de:e2:61:80:bb:
63:ef:5d:a3:11:32:c9:49:8b:65:5a:63:23:7c:31:5b:6d:6e:
d5:6c:7e:60:42:00:a5:26:7f:80:38:ba:8c:a7:a7:23:01:c2:
e5:19:6e:ab:14:16:db:19:1b:8f:79:d0:da:75:a2:22:13:5e:
5b:c3:ef:4f:32:23:7d:86:99:69:f2:c5:fc:59:80:98:0c:9d:
01:4c:d6:02:bc:2f:ac:16:37:74:bc:77:88:0a:c9:ec:41:3c:
a6:5f:b0:bf:21:09:a5:e6:d7:33:19:d8:41:82:0b:49:87:c2:
ee:3c:6a:1d:c9:e4:78:19:40:83:06:79:9d:67:5c:dc:11:b2:
d7:72:92:dc:f1:1b:a1:5a:3a:11:bc:3a:f5:be:09:dc:75:1e:
c6:d8:4f:b8:f5:56:42:f5:39:17:ed:f9:3c:4f:a8:cb:13:59:
61:65:0d:db:a3:b9:04:2f:f5:84:0a:d5:a0:df:07:05:08:a8:
e1:62:97:8b:72:5e:dc:25:d8:80:0d:15:29:1b:c9:08:42:2e:
08:12:17:b8:16:3c:00:15:21:78:a9:2e:4b:92:93:b6:58:9c:
99:2b:8b:3a:c6:60:b6:f0:69:0d:f5:b7:74:c0:17:a2:6d:61:
6d:07:43:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:13:09 2025 by rpki-client