Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/MU2iMdhpErepGXA2UH_Bje4kcDE.roa
File: MU2iMdhpErepGXA2UH_Bje4kcDE.roa (raw, json)
Hash identifier: b1VGUHmiEozGcYUnZ1ivn5S5OusWw+UsZ0yLcTkqdH8=
Subject key identifier: 31:4D:A2:31:D8:69:12:B7:A9:19:70:36:50:7F:C1:8D:EE:24:70:31
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018ACAD6010D92DC81085399AA9F4D0FEAEA
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/MU2iMdhpErepGXA2UH_Bje4kcDE.roa
Signing time: Mon 25 Sep 2023 05:35:37 +0000
ROA not before: Mon 25 Sep 2023 05:35:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.149.92.0/24 maxlen: 24
80.246.231.0/24 maxlen: 24
80.246.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Oct 2023 18:04:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ca:d6:01:0d:92:dc:81:08:53:99:aa:9f:4d:0f:ea:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Sep 25 05:35:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=314da231d86912b7a9197036507fc18dee247031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e4:3e:11:61:c7:39:55:a0:70:85:65:04:7f:
cf:d3:eb:09:67:07:82:4c:ea:dd:16:30:08:80:6a:
bd:85:b9:9a:6c:a2:30:4e:40:08:d2:37:65:73:f5:
52:dc:1d:01:ea:10:4d:a3:a4:cf:67:c8:6b:b8:7d:
9e:36:6d:9b:c1:d5:e5:28:fe:55:d4:6a:c3:c8:55:
eb:b4:88:77:66:81:c2:7f:12:13:1d:ce:e9:33:e8:
fe:85:ea:c5:7b:0e:42:52:db:be:63:b6:6c:7d:4d:
df:fe:c5:1b:e8:84:2b:91:42:35:7b:47:e1:43:55:
14:44:03:a0:dd:cf:11:f6:21:3b:b0:9f:1c:ff:20:
13:22:38:d1:dd:05:a4:83:a0:88:ab:c7:d4:d0:47:
4e:e5:40:c6:81:34:d9:51:5c:14:94:cd:4e:c9:dc:
21:90:9b:10:16:34:42:2d:71:b1:1f:40:74:78:d1:
d2:14:89:2a:91:40:c8:0c:58:ef:da:2d:14:45:0c:
b2:45:df:88:05:6c:0d:de:cf:6e:a7:ad:50:4c:d0:
96:52:01:f2:a2:45:21:62:bd:f1:11:77:a4:71:65:
3d:78:56:a2:24:52:00:7b:11:f7:6b:dc:5c:5c:72:
99:f8:54:99:cc:74:53:bb:8c:ab:a5:08:25:fc:54:
ad:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4D:A2:31:D8:69:12:B7:A9:19:70:36:50:7F:C1:8D:EE:24:70:31
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/MU2iMdhpErepGXA2UH_Bje4kcDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.92.0/24
80.246.229.0/24
80.246.231.0/24
Signature Algorithm: sha256WithRSAEncryption
46:94:b8:c4:7a:e8:75:86:97:1e:66:85:f7:94:b2:7b:fe:d3:
06:ac:79:06:16:ee:47:87:81:8f:8b:35:d9:fb:53:67:ea:8d:
12:71:d5:85:4b:aa:d8:d9:47:a1:6a:3f:e8:7a:69:18:26:ae:
6e:f7:39:c9:84:e0:ed:57:ed:03:ee:e9:e1:e6:76:12:ae:64:
d1:de:77:d4:d0:1f:ec:88:a4:99:f1:b0:61:6d:e3:e7:b0:c2:
2b:28:1f:d3:80:c0:48:71:b3:a8:84:dd:ac:06:cf:e6:2a:22:
95:f6:d8:9e:de:57:ea:b1:a7:5b:74:e7:12:de:b1:e5:ea:00:
d7:88:7d:37:c1:93:d3:27:fc:95:9e:8a:40:02:11:17:d0:84:
0e:d2:42:ce:fe:7b:cf:7d:eb:9a:a5:a6:15:8a:55:1c:2b:e1:
97:b4:1b:6f:fb:a9:ff:4b:b7:9e:19:68:c9:d6:42:c0:7e:14:
8e:22:1c:f5:ab:b0:28:a2:fb:50:8e:ff:01:03:eb:7c:49:51:
2f:f3:b0:bf:36:dd:da:54:7d:8b:03:64:1b:ec:c2:9b:05:fd:
3c:8c:7a:a8:d1:c8:2a:e5:a4:f1:bf:ef:3b:f2:22:22:db:e3:
ba:9a:6d:f4:dd:f1:46:3c:f5:95:ff:5a:3f:bd:1f:66:0b:f6:
2f:1d:9c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:52 2024 by rpki-client on console-fra.rpki-client.org