Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/MWBxm_RcHQU0aODilEqSE7_x7z0.roa
File: MWBxm_RcHQU0aODilEqSE7_x7z0.roa (raw, json)
Hash identifier: UgFYxypfzZR1THVX8YiMtOmL7m/NpcBDmnWsjlRSrvU=
Subject key identifier: 31:60:71:9B:F4:5C:1D:05:34:68:E0:E2:94:4A:92:13:BF:F1:EF:3D
Certificate issuer: /CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Certificate serial: 01856DCB0CF8345C65D4AFC603595C0A5F99
Authority key identifier: CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/MWBxm_RcHQU0aODilEqSE7_x7z0.roa
Signing time: Sun 01 Jan 2023 14:45:01 +0000
ROA not before: Sun 01 Jan 2023 14:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34226
IP address blocks: 185.81.20.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:cb:0c:f8:34:5c:65:d4:af:c6:03:59:5c:0a:5f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Validity
Not Before: Jan 1 14:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3160719bf45c1d053468e0e2944a9213bff1ef3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4b:4b:44:69:94:45:5e:3e:95:55:4a:35:16:
20:80:a9:3c:50:80:64:29:60:f7:05:57:ff:4e:f0:
2d:4b:da:6a:db:f9:56:1e:c7:2a:fe:f5:2b:7c:12:
09:15:56:23:0c:29:ca:d2:f9:31:cb:05:9a:94:88:
95:1a:7c:20:14:bb:f1:cc:38:dd:53:ae:87:61:11:
81:38:5f:63:d5:1c:7d:34:8a:9a:99:aa:05:31:19:
a7:1c:9b:23:4e:ce:5f:2b:74:e1:47:98:f9:f9:22:
9a:3a:ea:6b:ce:b7:9d:2a:4b:9e:51:42:76:08:36:
14:77:96:2d:6e:b2:5b:a2:f5:69:c5:da:08:3e:6c:
0e:e3:6d:b8:2b:8b:f5:b8:d3:24:60:fe:b8:4d:77:
dc:87:4d:1a:c1:4b:7c:8d:cd:ea:80:05:a8:d4:68:
64:31:68:db:b0:d7:8b:10:de:30:79:3f:17:aa:90:
15:b6:b0:f9:1d:f9:c4:45:2c:5e:c4:60:c9:ea:40:
fb:54:56:57:d7:2e:6b:2e:b3:74:eb:2f:60:5c:f8:
21:0f:e3:d0:6b:93:6f:4a:cf:c5:4e:03:9c:fb:33:
66:eb:1b:b1:95:74:e8:3d:aa:83:61:77:a5:71:e7:
08:c3:63:03:e3:ca:0c:c5:20:9a:97:d0:67:9a:44:
87:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:60:71:9B:F4:5C:1D:05:34:68:E0:E2:94:4A:92:13:BF:F1:EF:3D
X509v3 Authority Key Identifier:
keyid:CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/MWBxm_RcHQU0aODilEqSE7_x7z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.20.0/22
Signature Algorithm: sha256WithRSAEncryption
39:2b:89:b6:ea:75:60:8e:c6:9f:19:2e:07:fc:8d:0a:30:35:
e9:31:f4:36:62:21:ae:a4:32:97:c4:e9:76:f7:39:1b:11:83:
13:84:48:03:34:b2:94:5d:9e:e6:4a:a2:85:af:19:c8:67:c4:
43:6e:b6:47:38:79:40:be:a8:26:19:83:a8:23:6f:ab:a5:7e:
94:9d:db:80:bb:c2:0e:ca:db:13:75:b7:7f:59:2c:7a:e8:61:
67:94:07:02:97:09:3a:6d:df:5d:45:bd:e3:13:b6:50:55:20:
8f:b8:2b:20:eb:e2:b8:19:48:47:76:94:7d:c8:f2:ac:f2:92:
5d:c8:c8:06:73:47:04:d3:71:8a:eb:94:84:f7:69:fb:2f:77:
fa:2d:47:96:fc:25:99:d5:ae:d6:49:73:5a:86:ac:5f:02:ac:
f9:c4:57:50:0f:e1:95:d4:2a:34:26:4a:bf:cf:f5:0e:2d:4e:
8f:e9:29:fb:97:09:3b:8e:d4:14:8c:2a:fb:33:85:17:44:02:
d4:2f:1f:fe:93:c9:97:2f:b3:e9:11:98:0f:8f:0b:10:da:b5:
b8:30:9f:af:8a:c5:5d:0f:d7:74:8a:49:4f:73:38:e3:f8:b9:
71:09:58:ad:6a:b6:63:26:bb:a6:a8:af:a0:bb:05:ca:f9:b4:
89:f4:68:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:28 2024 by rpki-client on console-fra.rpki-client.org