Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/Mhf3J2vss8cz2WIEr99QyIS7k8s.roa
File: Mhf3J2vss8cz2WIEr99QyIS7k8s.roa (raw, json)
Hash identifier: IduGj5UmCpnUjwqZYtyISvl+JfIvlwWrdXNwzR5vgpM=
Subject key identifier: 32:17:F7:27:6B:EC:B3:C7:33:D9:62:04:AF:DF:50:C8:84:BB:93:CB
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018A553EF7A0BF592E8CDA8E12FFD9A0DA65
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/Mhf3J2vss8cz2WIEr99QyIS7k8s.roa
Signing time: Sat 02 Sep 2023 09:35:04 +0000
ROA not before: Sat 02 Sep 2023 09:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42216
IP address blocks: 188.132.240.0/24 maxlen: 24
77.92.145.0/24 maxlen: 24
77.92.142.0/24 maxlen: 24
212.68.48.0/24 maxlen: 24
188.132.184.0/24 maxlen: 24
188.132.210.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:55:3e:f7:a0:bf:59:2e:8c:da:8e:12:ff:d9:a0:da:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Sep 2 09:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3217f7276becb3c733d96204afdf50c884bb93cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:29:eb:4c:49:55:89:55:bf:24:9f:06:92:96:
c9:43:90:fa:db:1d:71:bb:93:74:35:c0:9c:f6:17:
e1:16:91:a2:60:98:0c:dc:e9:df:21:52:fb:de:fe:
42:42:95:56:f6:29:a6:63:14:c4:54:e8:90:09:c4:
57:4c:5f:b3:6d:99:23:fc:f5:38:a0:c2:b6:3c:fb:
96:af:80:9a:c3:74:ef:bf:bf:41:75:ab:3c:fd:ae:
1b:85:c8:71:82:81:e4:4f:92:db:d6:56:94:87:af:
68:a7:91:7b:4b:9c:0b:73:ab:5d:c1:60:50:d0:73:
db:f4:97:a4:55:d8:d6:2f:5f:c2:cb:71:73:c8:41:
09:06:d5:0f:58:b5:80:c3:e6:3f:1e:23:19:5a:7d:
85:54:20:ae:b4:8d:f1:1f:f2:09:18:df:cd:90:04:
84:31:9e:05:42:fc:05:7d:b0:dc:b1:5a:19:20:7d:
e7:01:17:0f:33:db:f7:ee:a9:e5:18:d2:e9:7a:07:
11:df:2f:8d:a5:f1:8e:31:f6:ff:8e:1f:01:97:77:
bf:3c:c6:75:01:f4:b1:54:f9:7c:e1:ef:63:6d:ab:
fa:0e:03:2a:8d:6a:c6:02:ec:de:ca:b9:1b:b2:d8:
be:18:67:40:d7:71:21:74:bc:40:2d:8c:c0:ab:13:
ac:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:17:F7:27:6B:EC:B3:C7:33:D9:62:04:AF:DF:50:C8:84:BB:93:CB
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/Mhf3J2vss8cz2WIEr99QyIS7k8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.142.0/24
77.92.145.0/24
188.132.184.0/24
188.132.210.0/24
188.132.240.0/24
212.68.48.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:1d:f9:17:34:01:36:5c:05:63:bc:15:24:9a:76:4f:39:9b:
1c:9e:55:b3:bc:7d:a3:21:13:b3:2d:08:e6:d1:71:80:ba:6f:
72:50:5b:2d:ae:09:e4:37:1b:3a:fa:d1:d0:4d:ee:9a:c4:01:
0f:e2:4c:f3:bb:a8:7f:aa:5b:3f:fd:f3:22:e6:4e:aa:0a:1b:
f0:5b:43:ab:22:60:46:20:1d:51:70:c7:05:57:b6:27:d2:4f:
f6:6e:b4:45:a4:5a:89:2f:fa:0a:9e:18:3f:59:c5:2d:1e:10:
5b:b3:e2:f6:1a:1a:74:68:2c:8a:d6:67:f8:88:ea:c6:a6:6f:
41:46:3d:c1:74:ca:44:38:90:b0:14:f7:ea:75:94:2d:80:aa:
c2:a2:dd:30:f1:04:d2:02:80:68:02:7b:29:f4:d7:f1:f7:0f:
4f:89:1e:4b:06:72:b9:ba:41:c3:0a:9a:2d:c8:db:b6:18:d7:
83:cd:f8:ed:6f:bf:bb:b8:95:ec:a6:dc:fa:fb:83:3f:c7:7f:
d0:6c:9c:20:8b:b2:8c:0b:c0:1f:dc:ce:41:00:6f:8a:5b:17:
40:8a:70:1a:41:15:e0:db:d7:19:6b:6a:2e:98:48:37:a2:5a:
0f:3b:eb:52:ad:1d:ff:03:fe:20:64:41:89:2c:a3:2b:0d:6a:
48:da:61:29
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 13 03:18:46 2023 by rpki-client on console-fra.rpki-client.org