Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/M6oEgqCkgy2B746RMcyjT8AZ7ns.roa
File: M6oEgqCkgy2B746RMcyjT8AZ7ns.roa (raw, json)
Hash identifier: ve8Q/2enivoX4TvoLLQbdQB1j/BP17woIvDptFs8ljQ=
Subject key identifier: 33:AA:04:82:A0:A4:83:2D:81:EF:8E:91:31:CC:A3:4F:C0:19:EE:7B
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0185DF83884CB7C536008461FB050CDB4276
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/M6oEgqCkgy2B746RMcyjT8AZ7ns.roa
Signing time: Mon 23 Jan 2023 16:43:37 +0000
ROA not before: Mon 23 Jan 2023 16:43:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 176.105.230.0/24 maxlen: 24
91.238.92.0/23 maxlen: 24
45.132.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Feb 2023 05:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:df:83:88:4c:b7:c5:36:00:84:61:fb:05:0c:db:42:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 23 16:43:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33aa0482a0a4832d81ef8e9131cca34fc019ee7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dc:fe:de:83:60:13:80:8c:15:1a:d2:f3:e1:
26:e3:19:64:7c:87:fb:30:67:2e:81:be:dd:1b:83:
7b:90:ab:38:2b:96:60:8a:b6:99:e4:3a:5f:e5:c6:
8b:2c:b9:0c:3e:e1:c4:ce:58:e7:fa:5c:5c:95:00:
7b:cc:a4:bb:d3:3a:db:d7:75:4b:9e:1f:2c:21:65:
29:b2:94:07:bd:57:38:d3:ea:10:cb:36:dd:55:66:
96:ad:8b:a6:62:3b:d3:0d:f6:d1:86:cc:57:40:f9:
48:ea:6a:a2:6d:a2:e1:f9:4f:fe:75:57:73:36:fd:
fc:65:db:f3:54:ba:e6:86:f3:e9:3e:cd:45:b5:78:
84:88:50:d6:1d:47:86:31:f9:36:dd:31:5f:7e:9f:
79:52:6d:c2:d9:b7:64:4d:a8:8f:94:fd:bf:f3:23:
46:30:99:a5:d7:1e:ec:b8:21:1e:77:a2:54:ed:40:
59:5f:0e:f3:52:4d:22:01:3d:7e:a3:1e:b1:cd:18:
62:e4:b2:7c:4e:1b:70:86:bb:c2:04:e6:48:20:45:
38:d4:76:9d:c7:de:a1:f8:95:46:61:2d:69:f6:3a:
8d:2d:1f:9e:39:98:0e:af:de:c7:c2:35:a1:b2:0c:
b7:03:5b:66:fa:d6:d4:5f:d1:97:cb:12:7c:8e:a5:
f0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AA:04:82:A0:A4:83:2D:81:EF:8E:91:31:CC:A3:4F:C0:19:EE:7B
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/M6oEgqCkgy2B746RMcyjT8AZ7ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
91.238.92.0/23
176.105.230.0/24
Signature Algorithm: sha256WithRSAEncryption
74:50:60:0c:c3:ce:92:4d:72:26:ec:54:cd:bd:0e:77:73:5d:
c0:ba:31:57:79:67:89:d7:16:12:11:c8:f3:57:b7:b3:bd:59:
c5:10:ab:0b:a1:f3:c0:5a:20:c3:9c:7a:32:ba:0f:95:f3:48:
fb:74:5b:64:90:f9:f2:82:0b:ef:66:e3:95:33:36:97:5d:f4:
b0:5d:6b:63:69:f8:31:ea:5d:3c:f6:72:c5:94:16:0f:4b:fb:
bb:53:ee:7a:ac:5d:f1:a2:c1:26:b2:9d:ee:3a:98:3d:91:96:
4b:4e:41:4d:b4:f7:d3:eb:8b:86:45:59:9a:f1:f9:c0:d4:17:
2b:e1:41:16:f4:de:e7:21:b9:1a:fe:70:55:17:d6:7d:5a:cd:
14:03:9c:38:9b:ca:70:c4:c6:03:12:f4:02:0f:a6:4a:b7:20:
0c:76:5c:84:73:73:83:6e:22:a9:62:0d:4a:cc:0e:9d:84:2e:
ac:58:d5:0a:69:c2:97:7a:cb:69:cd:1c:03:3c:68:08:06:73:
4d:24:3f:0e:7a:66:e3:a2:b7:42:92:5e:6f:6e:c0:27:4e:32:
ea:9d:e2:c6:7c:ef:ed:23:79:03:03:9f:4b:a1:42:81:ca:2c:
ff:d1:58:65:ba:7e:d4:5a:91:fb:bc:93:b2:43:64:eb:d8:ba:
00:35:b8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org