Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/M8HoBVo0RPOhPC-QgosIBxLZD-Y.roa
File: M8HoBVo0RPOhPC-QgosIBxLZD-Y.roa (raw, json)
Hash identifier: MnMx9OiyfMewigFlWGgRxCWgNMO+ZfgGDqVd9q7dW/I=
Subject key identifier: 33:C1:E8:05:5A:34:44:F3:A1:3C:2F:90:82:8B:08:07:12:D9:0F:E6
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 01856CAF441447C1BC6AE5E66EDF2DC5E7C1
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/M8HoBVo0RPOhPC-QgosIBxLZD-Y.roa
Signing time: Sun 01 Jan 2023 09:35:03 +0000
ROA not before: Sun 01 Jan 2023 09:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212822
IP address blocks: 185.216.210.0/24 maxlen: 24
45.95.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:44:14:47:c1:bc:6a:e5:e6:6e:df:2d:c5:e7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 1 09:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33c1e8055a3444f3a13c2f90828b080712d90fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:03:43:45:f7:3b:88:84:28:7a:41:98:03:
2a:fd:86:f1:11:24:20:01:0b:ee:b7:74:3a:76:02:
33:9d:15:fc:24:40:cd:1d:be:03:76:1c:33:52:13:
64:6e:94:ee:7d:6d:42:83:b1:26:5e:09:07:98:2f:
e3:2a:90:07:d6:d5:eb:f4:80:a3:7e:2a:ab:6b:d9:
4f:a4:e9:a3:7b:8f:69:9d:12:26:8d:3a:ac:94:6f:
16:04:e2:5b:c2:41:6c:3b:bb:1e:4b:c8:ca:3c:f5:
db:ae:95:cb:27:25:52:71:f0:06:7a:90:ba:2f:39:
e3:aa:ef:8a:83:c2:b8:d5:25:3e:9f:83:bb:f9:d9:
17:fa:50:99:a9:aa:b2:6c:ab:b9:8f:91:b8:e2:33:
4d:00:97:91:bc:af:7d:b0:02:09:6a:c1:44:9a:2d:
0d:59:14:d8:06:22:ce:0a:8c:f8:5c:5f:94:4e:43:
22:95:57:19:5a:47:6e:52:d1:46:05:3c:29:a9:d0:
9d:c4:2b:3b:dd:6e:18:01:bd:64:65:76:16:9d:40:
6d:df:c3:dc:ce:62:79:53:e7:8a:fa:76:95:6d:94:
a6:4b:e7:22:73:04:d3:98:0d:c4:35:80:a3:67:7e:
ae:56:05:fe:4f:0a:19:b5:40:78:26:37:dd:21:c4:
86:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C1:E8:05:5A:34:44:F3:A1:3C:2F:90:82:8B:08:07:12:D9:0F:E6
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/M8HoBVo0RPOhPC-QgosIBxLZD-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.34.0/24
185.216.210.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:68:4f:fa:7d:d9:e2:1f:5e:80:d1:4b:e1:9e:31:9f:bc:a5:
44:f1:ce:7c:b7:a2:c0:2c:fa:2c:93:36:21:c0:be:e0:78:0d:
82:35:dd:d1:c9:0c:8d:bc:51:12:ea:a1:da:9e:2a:0e:c3:7e:
05:b6:e4:25:b1:42:28:b8:b3:88:82:aa:38:cd:91:62:57:01:
f1:4d:f1:15:c7:c8:66:f6:90:23:4f:b6:2f:ea:0f:11:35:5b:
67:61:49:64:e3:9e:26:db:25:fa:04:32:27:bd:8c:45:ed:79:
82:d6:e9:6a:9a:f1:91:0a:1a:bb:62:41:62:f2:98:5d:dc:30:
8f:83:fa:4f:91:dd:22:9d:43:8b:ab:0b:27:13:df:66:08:c1:
b4:2f:aa:1b:0a:5b:91:2e:b8:3e:51:b3:be:97:1a:87:a4:38:
d4:65:40:42:30:d0:c4:50:d2:62:a8:59:1f:f6:92:0e:f5:f1:
a2:b4:91:a8:bd:24:01:3f:ac:97:50:cf:94:5c:dc:9c:0a:13:
b3:fa:75:82:d1:fa:17:0d:3a:96:06:69:51:02:1f:07:e2:0d:
21:e9:b4:9c:68:8a:80:5d:f0:26:63:7a:ba:a1:75:99:83:ce:
ff:9b:e1:19:9c:d5:c2:a0:a5:8c:48:3f:1d:1b:c0:1b:ba:4c:
6e:9e:4f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:49 2024 by rpki-client on console-ams.rpki-client.org