Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/MSJXzWPqGe6zjz4jMl5Gkee5clE.roa
File: MSJXzWPqGe6zjz4jMl5Gkee5clE.roa (raw, json)
Hash identifier: pjzXaJORZOdZsNGS3xtiPUQIPu6FLeVHPkuTZhxNxS0=
Subject key identifier: 31:22:57:CD:63:EA:19:EE:B3:8F:3E:23:32:5E:46:91:E7:B9:72:51
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 018B2D54D3D513ED9A01281BDD47108CA83E
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/MSJXzWPqGe6zjz4jMl5Gkee5clE.roa
Signing time: Sat 14 Oct 2023 08:36:55 +0000
ROA not before: Sat 14 Oct 2023 08:36:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8860
IP address blocks: 195.189.80.0/22 maxlen: 24
79.98.104.0/21 maxlen: 24
185.228.24.0/22 maxlen: 24
185.55.228.0/22 maxlen: 24
185.239.124.0/24 maxlen: 24
185.239.126.0/24 maxlen: 24
194.145.63.0/24 maxlen: 24
185.199.37.0/24 maxlen: 24
185.199.38.0/24 maxlen: 24
185.52.204.0/22 maxlen: 24
2a02:80e0::/30 maxlen: 30
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2d:54:d3:d5:13:ed:9a:01:28:1b:dd:47:10:8c:a8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Oct 14 08:36:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=312257cd63ea19eeb38f3e23325e4691e7b97251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:07:47:a5:2e:5f:21:c4:52:dc:fc:0c:ee:9f:
d6:3d:ac:55:a6:87:d8:62:87:de:ec:2a:a9:3e:48:
ad:e9:2f:02:99:57:82:ed:12:83:ef:1a:3b:58:36:
93:20:00:ef:75:17:53:e5:dd:30:d1:62:4e:ae:50:
6d:ee:0b:94:cf:02:ff:86:62:45:51:18:48:2f:5e:
02:0f:83:e5:19:f5:5a:ff:50:f4:66:7b:26:49:8b:
5a:af:e8:54:6b:62:7b:74:30:3e:7d:f9:be:65:97:
77:16:61:29:99:3d:4d:3a:ca:8a:fc:75:c2:f6:30:
f6:c5:c3:fb:05:c4:49:c1:df:e1:f8:05:1b:76:0a:
15:fa:a8:9f:d0:d1:1a:c6:38:71:4f:89:fd:38:ce:
b8:5a:d4:c8:ab:7f:62:81:73:43:93:e3:37:fb:4c:
48:bc:b6:10:93:af:df:ce:51:14:cd:48:85:ad:d5:
39:fd:e8:e4:ea:09:46:05:74:0d:00:b1:af:3c:50:
57:39:f0:88:6c:04:63:9e:47:75:e3:d7:32:c5:63:
4f:e4:74:94:f3:66:76:24:a3:f3:cb:dd:06:a7:83:
21:33:53:d8:b7:ce:7d:ea:dc:9b:68:3c:0b:de:2c:
70:3c:68:96:6d:bf:13:76:f3:b0:05:e7:36:84:c9:
65:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:22:57:CD:63:EA:19:EE:B3:8F:3E:23:32:5E:46:91:E7:B9:72:51
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/MSJXzWPqGe6zjz4jMl5Gkee5clE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.104.0/21
185.52.204.0/22
185.55.228.0/22
185.199.37.0-185.199.38.255
185.228.24.0/22
185.239.124.0/24
185.239.126.0/24
194.145.63.0/24
195.189.80.0/22
IPv6:
2a02:80e0::/30
Signature Algorithm: sha256WithRSAEncryption
66:1c:6a:1a:be:b5:51:41:ae:31:cb:f7:46:cd:cc:f6:04:7c:
03:e7:89:cb:ef:6d:22:b1:c9:2b:8d:94:96:f9:8a:a8:40:67:
f3:c5:56:c0:26:66:77:da:6a:77:bf:dd:65:4f:8e:86:84:29:
82:6b:d0:e8:57:7d:0e:de:76:25:a8:0b:1e:04:8b:cb:bb:ce:
fa:f9:24:43:0a:97:24:02:5c:a9:34:b3:e2:b3:a3:10:46:81:
f6:46:f8:1f:eb:4a:16:c1:0a:7e:73:b3:ee:03:0c:a3:4a:e1:
a8:12:12:9a:48:91:8f:5e:d0:f3:eb:78:73:cc:58:57:56:f2:
85:07:33:8f:83:d1:b5:ca:cf:4b:42:0c:90:15:28:8a:12:08:
1a:43:16:49:5d:6b:b4:b2:47:56:2d:4c:8e:16:ed:58:56:86:
27:f6:80:fc:a6:b8:d2:40:79:d0:a9:21:97:4c:3a:39:d9:46:
26:0a:53:46:9c:28:4f:73:21:6c:f1:3d:33:95:c6:29:71:23:
62:5f:39:79:da:1f:46:ca:19:56:2f:32:61:bf:64:4e:a3:ad:
07:0e:c2:79:5b:aa:5e:e4:da:a1:aa:09:83:80:76:ad:f4:b4:
02:06:41:16:84:0a:d4:65:f7:eb:df:c1:fa:73:3a:28:28:9a:
2e:59:c6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:35 2024 by rpki-client on console-fra.rpki-client.org