Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MlZWsix-FLznCkC2-RyK352Sakw.roa
File: MlZWsix-FLznCkC2-RyK352Sakw.roa (raw, json)
Hash identifier: KjSIOhRoX2EStUkHHv4drmp6rxVXZCFakAEA8QayH/c=
Subject key identifier: 32:56:56:B2:2C:7E:14:BC:E7:0A:40:B6:F9:1C:8A:DF:9D:92:6A:4C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018EEB91AC8DF2E683F4170ED1B0C1D581C0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MlZWsix-FLznCkC2-RyK352Sakw.roa
Signing time: Wed 17 Apr 2024 10:19:36 +0000
ROA not before: Wed 17 Apr 2024 10:19:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63902
IP address blocks: 109.176.203.0/24 maxlen: 24
213.218.216.0/24 maxlen: 24
217.144.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 16:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:eb:91:ac:8d:f2:e6:83:f4:17:0e:d1:b0:c1:d5:81:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 17 10:19:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=325656b22c7e14bce70a40b6f91c8adf9d926a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7a:29:bd:99:14:b7:5a:15:64:ea:89:85:b0:
3e:b8:1c:ca:21:22:b5:3c:ec:0f:0b:c3:12:ba:f2:
e5:cb:33:e1:3c:4b:70:17:42:ac:e8:02:70:83:05:
11:5c:28:c0:f4:46:a9:f1:b6:bb:9e:b1:45:c2:aa:
bc:38:97:de:d7:6d:41:e0:e2:77:6c:d8:c8:56:0d:
77:21:04:d2:fb:83:9e:f8:88:dc:83:5c:0e:9e:18:
be:c1:38:cb:1a:12:03:da:ab:f5:c6:4c:38:17:30:
41:cc:47:f7:55:21:bb:25:af:e8:fe:2f:7a:59:b5:
29:4f:38:18:01:58:d0:6e:41:cb:c1:53:81:60:a9:
37:0a:44:56:f5:b0:73:70:51:b9:fd:f1:cb:1c:9d:
28:14:93:b6:18:db:19:61:37:b6:53:0f:85:88:55:
fa:9a:8d:f2:ea:c6:77:46:63:42:dd:7d:bf:39:18:
93:88:80:b9:a4:16:ba:08:7b:ac:60:ef:51:af:38:
ad:e0:c5:f9:72:69:cd:55:e1:b4:89:c7:52:66:83:
95:3e:9b:6f:cb:06:90:46:90:ec:1b:96:ce:76:9e:
4b:13:52:16:5b:72:12:8f:1e:96:07:d7:14:0f:f7:
7a:49:64:bd:a7:b7:56:8d:15:db:92:a4:90:71:61:
0d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:56:56:B2:2C:7E:14:BC:E7:0A:40:B6:F9:1C:8A:DF:9D:92:6A:4C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MlZWsix-FLznCkC2-RyK352Sakw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.203.0/24
213.218.216.0/24
217.144.154.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:8f:91:fb:d2:6a:07:6d:4e:e3:02:81:17:d3:5a:31:2a:80:
4a:f5:28:5f:b5:94:79:b8:2e:e0:e7:49:83:da:61:03:2c:3e:
8c:4f:41:b4:3f:48:03:49:01:63:da:b3:01:b6:02:7e:8c:0b:
50:2f:81:12:d1:7d:a3:f8:40:43:21:2f:b6:f8:79:79:cf:37:
5f:05:97:09:3a:8f:67:b2:93:3a:48:7d:f0:cc:15:6b:fe:73:
44:20:95:f8:7d:ea:bb:4b:38:0b:74:3b:d7:d2:79:1f:b7:47:
f0:06:96:e6:90:09:d9:05:84:ed:7d:57:0f:7c:3b:54:1e:88:
5e:58:47:71:e5:86:2d:6c:8b:22:7f:ec:e8:99:7f:45:04:c0:
c5:3f:a3:01:b6:42:dd:5f:db:a6:ec:b4:b8:12:a1:30:14:e8:
f3:c4:3e:54:27:11:93:ad:01:3b:07:77:61:cd:8c:37:cc:e7:
8c:4b:e3:c0:a8:b3:7b:6f:e5:7a:3f:7e:12:1b:7c:65:28:3c:
62:73:4c:f0:04:d1:43:0e:f7:df:e8:46:8a:94:cc:2f:f3:53:
0d:9e:b0:db:f8:11:50:ca:49:2e:3e:e2:f3:82:8f:54:a4:c2:
b0:61:07:21:ff:5f:f0:29:af:84:ec:c8:e5:74:fb:a6:1d:a7:
c2:eb:98:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:25:42 2025 by rpki-client