Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/MPIcfrgkNvJGOiVUFyveTfXA5Ps.roa
File: MPIcfrgkNvJGOiVUFyveTfXA5Ps.roa (raw, json)
Hash identifier: mtgaJ/zt9TwkqQ5bWDwA235VMrGePJ/agj/yuvoZJ0E=
Subject key identifier: 30:F2:1C:7E:B8:24:36:F2:46:3A:25:54:17:2B:DE:4D:F5:C0:E4:FB
Certificate issuer: /CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529
Certificate serial: 0185729EE7522F7BCDD83BB91B0B8766FED6
Authority key identifier: 3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/MPIcfrgkNvJGOiVUFyveTfXA5Ps.roa
Signing time: Mon 02 Jan 2023 13:14:54 +0000
ROA not before: Mon 02 Jan 2023 13:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60855
IP address blocks: 164.131.160.0/24 maxlen: 24
164.131.198.0/23 maxlen: 23
164.131.198.0/24 maxlen: 24
164.131.197.0/24 maxlen: 24
164.131.199.0/24 maxlen: 24
164.131.125.0/24 maxlen: 24
164.131.124.0/23 maxlen: 23
164.131.124.0/24 maxlen: 24
164.131.127.0/24 maxlen: 24
164.131.126.0/23 maxlen: 23
164.131.126.0/24 maxlen: 24
164.131.130.0/23 maxlen: 23
164.131.130.0/24 maxlen: 24
164.131.132.0/23 maxlen: 23
164.131.132.0/24 maxlen: 24
164.131.131.0/24 maxlen: 24
164.131.133.0/24 maxlen: 24
164.131.143.0/24 maxlen: 24
164.131.142.0/24 maxlen: 24
164.131.142.0/23 maxlen: 23
164.131.212.0/23 maxlen: 24
164.131.214.0/23 maxlen: 24
164.131.224.0/24 maxlen: 24
164.131.226.0/23 maxlen: 24
164.131.233.0/24 maxlen: 24
164.131.232.0/23 maxlen: 23
164.131.232.0/24 maxlen: 24
164.131.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Mar 2023 14:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:e7:52:2f:7b:cd:d8:3b:b9:1b:0b:87:66:fe:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529
Validity
Not Before: Jan 2 13:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30f21c7eb82436f2463a2554172bde4df5c0e4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ef:24:de:63:74:2d:49:66:21:54:86:49:e6:
6d:15:2f:8f:c8:32:82:16:b7:b7:27:d5:03:35:8e:
35:d7:af:1f:4d:9b:ee:fc:e2:c4:0f:59:35:95:74:
17:5c:f7:96:99:cf:af:85:3e:cc:94:e3:7c:c4:df:
14:a2:03:55:5b:ed:51:6b:22:11:e5:f2:f4:af:88:
80:58:04:9e:ed:44:8f:c9:ac:88:e7:cd:70:eb:8b:
6e:1d:33:28:67:57:bf:e5:d0:bb:f6:b5:4c:4c:41:
33:b7:da:30:9d:5d:1d:bc:13:80:95:04:10:ac:a9:
ff:54:e0:7b:af:b3:5f:86:87:18:60:ad:e3:3a:b9:
df:dd:ad:c9:e3:d2:11:4b:cf:90:a4:69:5d:48:83:
82:33:43:b1:71:49:4d:8d:2e:48:08:b6:b1:4b:d9:
cf:42:9b:32:95:e5:94:0d:90:61:0d:81:cb:fd:43:
c1:70:e2:8f:69:fd:f9:6c:0d:d3:8d:f3:75:f9:4d:
bb:b6:77:37:c4:31:fd:b7:81:66:e8:0e:d7:00:57:
6d:92:c7:72:12:07:bd:a0:1a:46:e8:7c:09:7c:07:
96:97:32:e7:7d:d3:ff:d8:e8:50:11:d5:f7:0b:23:
01:9b:93:42:a2:4f:fc:f5:eb:cb:c0:31:7c:65:00:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F2:1C:7E:B8:24:36:F2:46:3A:25:54:17:2B:DE:4D:F5:C0:E4:FB
X509v3 Authority Key Identifier:
keyid:3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/MPIcfrgkNvJGOiVUFyveTfXA5Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.131.124.0/22
164.131.130.0-164.131.133.255
164.131.142.0/23
164.131.160.0/24
164.131.197.0-164.131.199.255
164.131.212.0/22
164.131.224.0/24
164.131.226.0/23
164.131.232.0/23
164.131.244.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:38:06:b6:c5:71:be:4d:eb:4b:17:ff:0c:e3:8e:90:d6:91:
42:d1:5a:e1:07:2f:22:8d:a2:49:45:6c:ae:56:85:b8:c5:b7:
49:10:71:ff:3c:ee:da:15:d4:9f:f8:0a:2c:ca:a3:39:a2:2e:
c5:31:5e:ba:22:40:a7:b8:1e:ea:70:48:1a:b4:9d:36:d7:4e:
82:20:67:ee:2b:2b:90:a0:af:7e:09:3c:93:65:e8:a8:3d:d7:
06:10:94:82:7d:29:0c:1d:95:c6:95:09:1b:12:29:88:62:a4:
f9:e8:d1:63:5b:8e:82:10:5f:2e:66:b2:2a:31:3c:2b:d2:2c:
37:da:70:47:75:66:e1:07:b6:56:58:e3:bb:fa:ae:d8:10:79:
0b:3a:ec:46:ce:f9:a1:50:b0:36:7f:46:e9:48:52:97:af:f2:
94:ce:3b:65:24:02:49:48:d0:fe:ee:a5:97:a8:cb:e0:f9:c9:
ae:bc:c8:fb:55:1f:80:ca:32:ef:d9:e0:d8:78:be:06:c3:21:
dd:17:0b:8b:5b:d1:d8:04:5f:76:70:ff:5b:31:a8:dd:d0:b9:
77:97:c7:41:dd:0f:87:35:5b:1f:4c:f8:bc:31:70:2e:d2:03:
90:d8:be:9d:f7:5f:e6:f4:58:e2:09:c6:71:dd:af:8e:cc:5d:
ba:11:18:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:33 2024 by rpki-client on console-fra.rpki-client.org