Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/MYRGQ_f3ghlCiC3NhNou4cBbZXE.roa
File: MYRGQ_f3ghlCiC3NhNou4cBbZXE.roa (raw, json)
Hash identifier: SiOFniqLszAX9nz5MfCrpbJEK2pbEHVQKvpM3i0sIGk=
Subject key identifier: 31:84:46:43:F7:F7:82:19:42:88:2D:CD:84:DA:2E:E1:C0:5B:65:71
Certificate issuer: /CN=1bb29b3f158fa80710c12a58b69fb926098d5129
Certificate serial: 018572034CD4D3AAA95F9C6250332F67BAA0
Authority key identifier: 1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/MYRGQ_f3ghlCiC3NhNou4cBbZXE.roa
Signing time: Mon 02 Jan 2023 10:24:56 +0000
ROA not before: Mon 02 Jan 2023 10:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47782
IP address blocks: 95.215.245.0/24 maxlen: 24
95.215.244.0/22 maxlen: 22
95.215.244.0/24 maxlen: 24
95.215.246.0/24 maxlen: 24
178.216.208.0/24 maxlen: 24
178.216.208.0/21 maxlen: 21
178.216.210.0/24 maxlen: 24
178.216.209.0/24 maxlen: 24
178.216.212.0/24 maxlen: 24
178.216.211.0/24 maxlen: 24
178.216.213.0/24 maxlen: 24
95.215.247.0/24 maxlen: 24
178.216.215.0/24 maxlen: 24
178.216.214.0/24 maxlen: 24
91.205.48.0/24 maxlen: 24
91.205.48.0/22 maxlen: 22
91.205.49.0/24 maxlen: 24
91.205.51.0/24 maxlen: 24
91.205.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:4c:d4:d3:aa:a9:5f:9c:62:50:33:2f:67:ba:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb29b3f158fa80710c12a58b69fb926098d5129
Validity
Not Before: Jan 2 10:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31844643f7f7821942882dcd84da2ee1c05b6571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:02:77:b8:3b:72:19:e1:59:8b:d6:ba:15:d1:
5f:e6:5b:17:ba:17:28:9c:41:d9:75:5c:db:56:70:
15:4b:6d:18:1c:61:e9:8d:2b:bc:00:a8:b3:6b:a8:
df:49:4e:bf:59:00:7a:a8:3d:85:f2:f7:09:36:b1:
b9:c1:72:8f:34:99:43:69:74:95:c5:33:2d:5d:cc:
15:0d:34:7b:54:50:74:7b:9d:97:7e:a1:51:e0:28:
f6:85:c1:c1:e0:19:a2:88:b7:d1:66:84:bc:64:2b:
10:c9:3a:2b:86:0b:8b:3f:8d:85:ab:2a:f1:96:cf:
41:d7:2e:2a:88:4d:15:87:92:47:61:12:48:55:54:
4d:01:2a:e8:57:30:87:17:4b:ec:bb:22:e5:c6:d6:
b2:82:71:23:31:ed:86:b9:2c:bd:be:1a:c6:ff:89:
01:38:8d:f3:b2:b1:6b:59:8c:4e:25:78:0e:42:8b:
0f:2c:33:19:94:2a:dd:8f:81:59:d9:26:ec:08:09:
ff:e2:42:c8:78:63:f3:46:db:a1:6d:d6:c3:6a:cf:
c8:bf:19:0f:70:fc:1b:f1:39:6a:5e:dc:3e:d3:84:
da:11:0a:c1:f7:27:07:4c:c2:58:4b:e1:93:ba:dd:
15:ec:c1:30:39:4f:65:b9:78:10:88:05:da:e2:b0:
e1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:84:46:43:F7:F7:82:19:42:88:2D:CD:84:DA:2E:E1:C0:5B:65:71
X509v3 Authority Key Identifier:
keyid:1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/MYRGQ_f3ghlCiC3NhNou4cBbZXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.48.0/22
95.215.244.0/22
178.216.208.0/21
Signature Algorithm: sha256WithRSAEncryption
16:31:2a:f1:bb:7d:74:69:cd:68:12:14:43:24:51:83:e6:28:
1d:ce:33:58:3d:15:e2:d0:8b:9a:f6:e4:fa:cd:0f:b8:41:ea:
05:d7:1a:3d:7c:f1:18:d4:bb:dc:ce:bb:5c:fe:62:61:5e:18:
5f:7d:d2:66:49:f5:36:f3:80:de:f6:99:b5:c4:43:50:c2:98:
3f:9f:b4:eb:62:00:98:0e:9b:d1:3a:dd:63:86:a2:8a:4e:84:
fb:63:dd:b1:b1:c9:07:e8:41:31:5f:62:10:a1:bd:49:e1:23:
d6:44:8e:84:f6:ae:30:c6:5f:52:f8:ff:f4:4a:40:33:2b:19:
5d:ca:ab:27:f1:80:12:a9:5e:d3:2f:5e:8d:a8:55:ea:f8:43:
14:88:1d:6c:50:85:80:05:36:92:e1:06:e5:d4:52:ca:9e:a7:
74:c6:fd:c2:9c:cf:2c:78:d4:de:97:be:ee:b0:9f:ab:42:df:
0b:5f:91:52:8e:fb:87:7c:99:41:58:d3:c6:2d:c8:52:94:6b:
b7:dd:96:f1:5a:0b:cd:26:e3:03:c9:1b:99:15:23:13:b9:4c:
11:17:ba:ea:7d:0d:12:dc:f8:3c:00:16:a8:f4:37:84:95:9f:
7d:4f:4f:56:db:85:69:c6:ab:23:b4:fd:56:75:13:19:44:fe:
25:30:2c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:43 2024 by rpki-client on console-ams.rpki-client.org