Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/MMd3fEwXpc3qTuZr4DkSLEEIvj4.roa
File: MMd3fEwXpc3qTuZr4DkSLEEIvj4.roa (raw, json)
Hash identifier: msjU0tDqtQu4w/JjYLGdJYxU/AiVmpOq+xzaWAtlRqs=
Subject key identifier: 30:C7:77:7C:4C:17:A5:CD:EA:4E:E6:6B:E0:39:12:2C:41:08:BE:3E
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0188E18C6B9C875EEA22E83D951DEB4F3B73
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/MMd3fEwXpc3qTuZr4DkSLEEIvj4.roa
Signing time: Thu 22 Jun 2023 05:20:56 +0000
ROA not before: Thu 22 Jun 2023 05:20:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.149.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jul 2023 09:43:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e1:8c:6b:9c:87:5e:ea:22:e8:3d:95:1d:eb:4f:3b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jun 22 05:20:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30c7777c4c17a5cdea4ee66be039122c4108be3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5f:78:60:9d:90:0c:70:12:cd:49:08:49:08:
bb:6e:dc:59:e3:a8:64:c5:de:19:84:c5:58:74:08:
a0:70:8f:3b:a4:0b:5c:af:9c:a1:55:8a:c5:06:3f:
cc:13:a9:16:23:aa:8f:3e:06:d9:12:84:d2:e7:1a:
90:cd:23:ff:f0:f5:e8:9f:d5:0e:9d:ea:d0:73:5b:
5b:26:fe:2e:7a:21:2e:1f:e4:4c:0b:29:b3:95:85:
3f:68:2c:a9:ae:e8:90:81:06:91:8d:ef:76:76:af:
58:99:7f:65:15:c5:6b:cd:c3:79:e7:b7:df:61:92:
2f:39:56:d5:20:4b:a6:d0:8c:74:1d:b4:57:33:a2:
8b:23:2d:ef:77:c8:f7:f2:34:36:05:26:61:2d:5d:
a7:ee:df:63:56:ef:44:ec:10:66:23:09:25:f8:fb:
83:db:dd:0a:c8:57:d7:26:86:cb:63:a1:cf:cc:0f:
56:02:d2:8e:48:2c:27:93:ff:7a:f5:42:e0:a8:2a:
2c:6f:d3:e5:7f:83:d3:42:74:08:b2:33:ff:f5:5e:
2b:7f:f4:a3:af:9c:41:5d:23:25:eb:58:ea:54:78:
86:8e:19:b9:52:ff:92:f9:6e:89:ef:d4:77:47:88:
28:81:57:72:f1:75:06:f5:f9:78:4a:35:e3:06:22:
cc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C7:77:7C:4C:17:A5:CD:EA:4E:E6:6B:E0:39:12:2C:41:08:BE:3E
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/MMd3fEwXpc3qTuZr4DkSLEEIvj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.166.0/24
Signature Algorithm: sha256WithRSAEncryption
78:09:1d:9d:16:f3:5d:d2:00:61:ca:f8:0f:63:ee:7c:3e:71:
4b:1a:cc:20:69:e0:49:47:13:64:2f:c5:bc:c2:d0:4c:0a:27:
63:10:e0:13:98:a6:22:57:c7:67:52:69:11:b1:0e:e2:74:21:
3b:cf:19:71:01:5d:27:6f:e7:e0:dc:b7:40:81:9c:fe:84:2b:
fc:aa:ad:41:33:5a:55:66:d9:82:e5:90:e2:93:4a:e1:6d:16:
69:36:c7:4e:e3:f9:fb:3e:ee:9f:4d:b6:86:ba:fa:c9:eb:83:
33:a8:71:59:38:de:f0:c2:2b:b8:47:25:69:a7:35:91:b7:91:
fb:d2:54:09:e4:ed:4a:b8:82:34:4d:87:ae:7e:c0:c1:75:27:
8e:f0:a1:4d:f4:29:c8:c6:b6:58:2c:50:90:f7:84:4d:d8:08:
4e:cf:01:ca:fe:87:9f:ad:28:e7:41:a4:e7:20:f2:ba:a1:f7:
05:a3:0b:ed:d1:cd:6a:7d:c4:a5:84:8b:57:ad:e3:6b:6a:86:
58:2d:a5:63:b3:30:63:48:64:c6:b2:81:84:4e:84:32:a7:51:
c3:65:0e:56:a2:7e:10:9b:55:a1:51:b3:dd:97:44:87:8b:c2:
6f:5d:53:84:20:91:ca:80:70:79:46:9e:bc:20:99:f5:20:79:
84:97:d3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:08 2024 by rpki-client on console-ams.rpki-client.org