Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/MQaFXNlB6MUw-oNKoboih8GgetI.roa
File: MQaFXNlB6MUw-oNKoboih8GgetI.roa (raw, json)
Hash identifier: c4oQ6iv0Dkwbz6NXdXTtDXOv0q9lVa+34XO1XJc5lso=
Subject key identifier: 31:06:85:5C:D9:41:E8:C5:30:FA:83:4A:A1:BA:22:87:C1:A0:7A:D2
Certificate issuer: /CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Certificate serial: 0187E5C89E9FD91698AA87166683A6CD28C1
Authority key identifier: 7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/MQaFXNlB6MUw-oNKoboih8GgetI.roa
Signing time: Thu 04 May 2023 08:02:22 +0000
ROA not before: Thu 04 May 2023 08:02:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43930
IP address blocks: 193.57.128.0/22 maxlen: 22
193.57.128.0/23 maxlen: 23
185.108.34.0/24 maxlen: 24
185.108.32.0/24 maxlen: 24
185.108.33.0/24 maxlen: 24
185.194.165.0/24 maxlen: 24
185.194.164.0/23 maxlen: 23
185.194.164.0/24 maxlen: 24
2a02:c800::/32 maxlen: 32
2a02:c800:42::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e5:c8:9e:9f:d9:16:98:aa:87:16:66:83:a6:cd:28:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Validity
Not Before: May 4 08:02:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3106855cd941e8c530fa834aa1ba2287c1a07ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e0:fd:f7:1e:55:0e:42:e8:e9:c6:da:0c:a2:
de:b9:70:12:ed:f3:12:79:a1:ad:da:15:29:fd:30:
8a:ac:a8:7f:ad:60:c3:06:ba:04:8e:14:0c:85:77:
f7:38:af:74:61:22:2f:0c:d4:d6:f4:7c:cd:0b:ff:
cf:50:59:89:b4:37:46:6b:f0:d6:7c:b0:2e:73:51:
56:f6:1a:77:51:59:b5:ca:74:25:90:e1:fa:b0:d5:
ba:73:38:48:6c:39:0d:3c:da:3b:7d:29:bc:4f:e5:
c2:e6:f8:24:60:5e:6a:9c:45:d2:65:00:e5:68:23:
63:7d:47:c6:2b:b3:87:75:1b:3a:49:34:28:2f:1f:
26:82:65:c9:f0:d8:36:2e:e0:4b:f0:28:c5:6c:cd:
98:44:87:7d:0d:f5:f0:71:1a:1a:16:f8:39:25:97:
46:7c:10:30:88:c0:e1:fc:7b:ca:47:78:62:fa:6b:
a0:33:3b:a2:3f:d7:ef:d1:25:42:5c:61:9c:4a:2b:
f6:55:60:94:01:5d:fe:4d:7d:02:f8:3d:27:f5:d1:
c5:cf:e3:53:e5:cc:47:5a:e1:40:de:30:0a:8d:ee:
ba:0a:03:8d:9b:5e:e5:a8:07:9a:0e:5f:37:71:f8:
70:42:ce:07:a0:5a:78:b1:5c:d9:ca:87:35:0e:4b:
ee:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:06:85:5C:D9:41:E8:C5:30:FA:83:4A:A1:BA:22:87:C1:A0:7A:D2
X509v3 Authority Key Identifier:
keyid:7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/MQaFXNlB6MUw-oNKoboih8GgetI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.32.0-185.108.34.255
185.194.164.0/23
193.57.128.0/22
IPv6:
2a02:c800::/32
Signature Algorithm: sha256WithRSAEncryption
60:dd:01:04:df:20:14:dc:b1:71:e7:f4:72:f9:52:11:7b:86:
55:e7:68:cf:29:f5:78:cd:a2:13:c4:1b:bc:03:7a:5d:e2:3d:
0d:d6:e3:f0:59:c7:0c:25:0b:69:7c:cb:90:1e:c9:31:3b:75:
a4:9a:7f:44:e2:b7:e9:0a:de:98:1a:ed:fc:06:49:b4:b5:c6:
c9:61:eb:66:79:f2:94:e6:36:92:5b:74:13:e5:ae:6f:97:cf:
40:a2:fe:24:42:66:79:da:e7:b6:7d:e9:1e:fb:b8:71:e0:91:
34:dd:1d:53:7e:65:82:22:6e:97:1f:94:13:77:be:20:b3:3c:
0f:74:2a:d3:12:7f:c0:d5:90:79:e0:da:a1:75:26:4c:3b:36:
92:95:35:d4:6b:29:e2:8f:a5:67:16:d5:ca:3a:19:fe:db:7d:
e6:62:8a:d7:d3:08:d1:c5:c3:2c:0d:2c:52:c1:aa:9b:54:a9:
7c:3e:17:e6:76:03:c1:52:9d:8f:1f:23:ef:3e:57:e5:d5:db:
b2:90:47:23:fe:49:5d:8b:07:02:75:b9:cd:32:c4:09:fa:d8:
73:6d:8b:66:5f:42:cd:0f:47:24:c5:bb:c8:3d:7a:92:14:01:
c5:8b:39:f9:4a:6f:74:16:33:20:c5:11:d0:9d:73:42:7e:c6:
88:93:b4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:31 2024 by rpki-client on console-fra.rpki-client.org