Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/hMc152dFSc_kIvPW8a1zof_Q9Q8.roa
File: hMc152dFSc_kIvPW8a1zof_Q9Q8.roa (raw, json)
Hash identifier: v8oeNPMW/+QR8GSVXn2lmPqvbL3dhBUgEtj9CEPoSGk=
Subject key identifier: 84:C7:35:E7:67:45:49:CF:E4:22:F3:D6:F1:AD:73:A1:FF:D0:F5:0F
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01856E41CFCDA4FF5B24915B438F602F9E46
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/hMc152dFSc_kIvPW8a1zof_Q9Q8.roa
Signing time: Sun 01 Jan 2023 16:54:44 +0000
ROA not before: Sun 01 Jan 2023 16:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31609
IP address blocks: 94.176.166.0/23 maxlen: 23
89.33.243.0/24 maxlen: 24
89.37.108.0/22 maxlen: 22
86.106.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:cf:cd:a4:ff:5b:24:91:5b:43:8f:60:2f:9e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84c735e7674549cfe422f3d6f1ad73a1ffd0f50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:92:22:9f:df:0a:57:5b:51:45:83:11:3d:54:
4d:26:13:75:22:8a:13:3b:09:81:74:76:68:01:1b:
5d:94:72:9c:8d:90:82:e9:3c:09:d2:1c:bf:63:19:
68:a1:b4:9d:58:76:f5:61:68:3b:d2:4b:e0:cd:cd:
45:6d:85:81:0d:1b:ad:74:3e:15:bb:51:d5:c6:01:
6b:22:fc:27:68:55:20:77:df:14:c4:81:c1:4c:95:
fb:91:6a:f3:e9:21:3c:15:64:d8:96:2b:f0:29:71:
90:1a:0b:f4:69:56:4d:3b:7e:77:5a:73:d7:61:27:
0f:68:e1:13:6e:98:38:f1:b6:fe:80:ab:0d:e5:61:
5a:19:e8:3b:e9:24:92:06:87:67:53:54:9a:91:65:
b5:86:79:69:88:65:08:6a:32:9e:d6:b7:fa:fb:67:
90:81:65:89:0c:60:fb:a5:cf:1f:73:0d:34:93:d4:
4a:8f:66:d8:2d:9c:eb:67:67:59:4f:71:b0:44:92:
44:e4:3a:ca:1c:7e:fb:2d:21:7a:8f:90:26:b4:d3:
69:56:ee:68:0b:ac:78:8d:85:d5:33:59:3e:b5:f8:
bd:8f:3a:35:18:23:68:87:f2:61:8a:89:a4:f4:c9:
54:e6:98:98:1c:a2:77:75:27:ed:21:ae:d9:fd:39:
ad:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C7:35:E7:67:45:49:CF:E4:22:F3:D6:F1:AD:73:A1:FF:D0:F5:0F
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/hMc152dFSc_kIvPW8a1zof_Q9Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.168.0/24
89.33.243.0/24
89.37.108.0/22
94.176.166.0/23
Signature Algorithm: sha256WithRSAEncryption
41:98:88:a0:9f:40:8b:f8:a4:5e:8b:5d:ba:78:26:6e:d6:0f:
bb:07:f5:54:b8:ca:fe:a1:f5:12:14:fc:cc:16:8a:46:f0:3d:
e9:7a:6f:71:7c:73:b2:22:8d:0b:18:11:5b:44:02:76:0c:3c:
23:10:a1:25:3f:f3:79:22:a6:ab:48:67:fe:40:83:60:8f:68:
e9:55:02:df:57:82:47:30:be:13:3b:a6:05:cc:47:e8:03:f8:
8d:a9:69:f9:1d:c9:31:6c:24:d8:79:1e:84:0a:32:7f:f3:0d:
47:5b:cc:4c:95:d2:c8:1a:06:d4:e6:92:75:75:7a:0f:0a:c1:
b6:23:36:6c:2e:36:4c:68:f5:2a:2b:f1:61:c3:59:c8:fa:e0:
a7:38:8b:b8:1c:dd:6b:b5:91:89:e1:4a:1c:ae:ce:17:fc:f7:
04:0b:b0:16:5d:1f:7d:99:d0:c6:19:95:62:1a:11:73:42:d8:
1c:73:0e:11:20:ef:5f:4b:c7:5c:11:c1:81:53:fa:d7:d0:a4:
ff:90:40:be:0b:27:1d:e0:bf:34:57:c0:5b:36:63:76:b4:44:
bb:a2:e7:3b:60:07:c1:42:fd:81:48:00:7f:e6:0b:d4:a0:d6:
77:4a:79:a3:c0:a7:03:6d:3b:9f:57:bc:e0:5b:a3:de:14:c7:
3b:ca:0c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:06 2024 by rpki-client on console-fra.rpki-client.org