Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/MvJmfI7dTfw7B3LJe902UVbSn34.roa
File: MvJmfI7dTfw7B3LJe902UVbSn34.roa (raw, json)
Hash identifier: LxkxquyR22Vlqu7MakXq848XNC+Xu6hcuUGuGr+46pU=
Subject key identifier: 32:F2:66:7C:8E:DD:4D:FC:3B:07:72:C9:7B:DD:36:51:56:D2:9F:7E
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018CC9BA92905EBA9D572DA15A98D518256C
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/MvJmfI7dTfw7B3LJe902UVbSn34.roa
Signing time: Tue 02 Jan 2024 10:31:36 +0000
ROA not before: Tue 02 Jan 2024 10:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.186.216.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
83.147.244.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jan 2024 06:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:92:90:5e:ba:9d:57:2d:a1:5a:98:d5:18:25:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 10:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32f2667c8edd4dfc3b0772c97bdd365156d29f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b5:4b:81:88:d1:e2:d8:88:db:c4:ec:b0:24:
6c:ed:86:05:07:15:32:29:56:46:73:78:bc:e1:7d:
bd:e0:ab:4d:ed:84:dc:1b:68:dc:8f:8e:32:75:1c:
03:cc:0c:0d:08:6b:37:1f:4a:d6:ec:3c:e8:1b:b7:
96:ad:e2:fd:a6:32:f6:7d:8d:ac:33:01:8e:b1:98:
61:b3:d0:96:ac:e9:d9:19:c2:f4:e6:13:c0:28:c4:
87:53:bd:12:48:9e:87:17:ca:5d:dc:69:65:18:5d:
d9:73:c6:b9:3f:3e:01:f7:e5:62:a5:c0:33:48:86:
17:ff:6e:27:51:f4:d8:d6:a7:46:f3:f0:aa:ec:db:
c5:4e:f1:a2:1d:6a:8c:d9:bc:b0:18:f6:22:87:35:
09:5e:9a:dc:b3:99:22:90:db:6f:9e:75:a7:52:a3:
db:40:c8:db:b4:d2:a0:f9:2e:b4:f4:4f:5b:1a:61:
c4:9f:a5:82:ab:4b:be:39:2f:47:54:bc:a3:a7:6f:
f7:0a:fd:b0:7e:50:13:cb:27:51:81:09:cd:15:9a:
8f:dd:73:d7:56:cc:fb:7c:bb:02:ab:52:83:82:63:
e9:4e:dc:30:32:f4:da:0c:30:4d:2c:62:a8:46:06:
d2:bf:a5:a6:43:a0:e0:0f:7d:9a:72:38:6b:1b:cf:
dd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F2:66:7C:8E:DD:4D:FC:3B:07:72:C9:7B:DD:36:51:56:D2:9F:7E
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/MvJmfI7dTfw7B3LJe902UVbSn34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
83.147.252.0/22
91.186.216.0/22
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
04:23:24:43:d9:c6:be:34:df:96:27:9b:1e:f9:30:86:ed:84:
fa:81:c5:c1:88:64:fb:2f:22:d9:26:fd:cc:4e:21:18:66:a0:
ff:cc:53:19:24:a7:f7:4b:28:4f:4b:f7:05:58:f0:f4:27:e8:
85:17:b6:fd:68:20:4a:ee:29:fe:00:86:4b:bc:12:f2:4a:79:
0d:86:b2:62:f7:64:31:ed:d0:41:ab:1a:16:ad:b9:09:5d:64:
fb:00:54:a7:a4:1c:88:54:1a:0f:49:47:2a:20:f7:f6:5e:c0:
c4:7b:32:66:1b:e5:46:d5:0b:ab:ed:2f:52:27:c2:76:f7:0f:
86:95:73:be:61:3e:23:16:1f:a2:f0:45:cf:aa:8a:e4:bb:53:
28:61:7e:3f:5d:96:e6:d7:81:bd:5d:c5:ea:bb:29:31:d6:f1:
1c:5c:59:74:9f:66:19:0f:97:95:11:87:7e:29:a6:e3:62:d4:
ac:b4:bd:98:fb:0f:d8:6f:43:52:de:a7:fe:1e:fd:ad:73:9f:
02:26:ff:de:54:6e:7c:1e:c2:46:19:fd:51:7d:2a:f0:a3:73:
b0:d7:7c:d2:12:3c:5b:2f:8a:bb:6a:71:4d:bf:9c:71:85:8f:
16:8d:fa:a4:03:8d:c6:46:41:bc:60:ba:07:fd:6a:33:7d:90:
4e:e8:86:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org