Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/mZMFvD4981tZWGTVKgcdel8IIzY.roa
File: mZMFvD4981tZWGTVKgcdel8IIzY.roa (raw, json)
Hash identifier: JYWhuzRDfVj7ZHNUeOStIvuv1kVUG9sM7XA9UHkpLJU=
Subject key identifier: 99:93:05:BC:3E:3D:F3:5B:59:58:64:D5:2A:07:1D:7A:5F:08:23:36
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018573F190FBBD559FE14621FEC19C33C7E4
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/mZMFvD4981tZWGTVKgcdel8IIzY.roa
Signing time: Mon 02 Jan 2023 19:24:48 +0000
ROA not before: Mon 02 Jan 2023 19:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12525
IP address blocks: 81.198.166.0/24 maxlen: 24
81.198.167.0/24 maxlen: 24
195.13.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:f1:90:fb:bd:55:9f:e1:46:21:fe:c1:9c:33:c7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 19:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=999305bc3e3df35b595864d52a071d7a5f082336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f6:3a:eb:20:86:da:e4:c5:59:ea:03:d8:47:
8e:86:df:41:a6:d8:b6:b0:e1:58:d2:ed:c2:1e:3e:
1b:14:50:0f:5a:69:70:08:6e:47:14:21:57:72:9d:
7a:7a:13:b1:8d:6d:9f:d2:94:49:7c:a7:e4:2e:93:
46:b5:03:85:ce:c4:87:a7:a1:48:a3:da:00:3c:34:
39:be:84:b4:4b:ef:68:59:12:61:4f:93:07:46:90:
bf:67:00:c1:3b:af:7b:b0:f8:72:96:ab:34:7a:91:
a4:c9:22:89:d8:92:8b:98:58:71:ed:46:0c:1e:db:
2e:5b:e4:6f:fa:f3:76:61:0c:4b:3e:7d:f2:b5:6c:
0a:44:cd:2f:1f:0e:15:41:13:7f:a4:8c:cf:eb:b1:
3f:0f:5f:a5:3c:23:8a:04:9f:4c:68:34:4e:a4:8b:
20:89:f1:96:2a:27:c1:74:b5:21:db:87:8e:5a:ed:
a3:3f:10:3d:8d:2a:c1:dc:de:4e:51:88:5b:f6:d7:
5c:d6:92:59:99:4d:b6:fd:82:73:fa:78:fd:1d:3a:
2d:35:0b:84:b2:dc:2f:5a:47:a4:01:67:08:19:a1:
aa:9d:f7:17:57:91:31:b5:64:d8:76:39:5a:8d:37:
95:a7:b7:cf:ed:1f:63:30:b4:87:4f:61:83:85:cc:
6a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:93:05:BC:3E:3D:F3:5B:59:58:64:D5:2A:07:1D:7A:5F:08:23:36
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/mZMFvD4981tZWGTVKgcdel8IIzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.198.166.0/23
195.13.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:1c:58:91:89:80:7c:5b:4f:e1:14:79:0b:f0:15:f2:13:bb:
2b:c8:c0:05:69:88:8c:b1:26:02:e7:ed:80:39:01:93:8f:d6:
2e:cb:8f:4c:0e:81:bd:f6:e2:06:37:59:b7:d6:ab:d3:ab:64:
88:3d:bb:14:bc:d4:d3:01:7f:3a:43:23:a4:ea:c7:2e:d5:b3:
10:7e:70:ae:78:5d:50:e6:7a:dc:c9:20:0b:39:d9:fb:27:c5:
57:a9:a4:4a:a8:58:2b:0c:4f:72:71:35:8b:0b:b1:78:27:3e:
f8:70:02:fc:c2:7c:ba:82:88:92:c6:04:f7:66:3f:01:4f:b7:
2e:f9:0b:f8:83:ad:c5:ce:82:7e:15:cf:8e:3c:94:6c:84:0b:
c6:94:c3:96:a6:e7:cd:25:f9:cb:1f:6a:6d:2d:ae:f4:cc:b6:
61:73:5d:4c:33:ec:39:e0:28:d7:24:46:80:47:d0:2f:4a:d7:
c9:16:e3:0b:d6:f7:19:fe:94:a5:22:4c:5b:f9:e7:68:4a:00:
f9:bf:fe:1f:2b:02:85:df:c3:65:74:47:5f:6c:90:ea:53:5b:
7f:1d:3b:c9:71:27:16:59:4d:fa:60:df:44:16:89:09:94:09:
33:56:ec:9b:bf:64:f3:f9:94:88:cb:b6:2d:76:62:13:36:a5:
37:ff:22:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:29 2024 by rpki-client on console-fra.rpki-client.org