Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/MUIuzmtMXrCVIulOUlpiA3XZ7TU.roa
File: MUIuzmtMXrCVIulOUlpiA3XZ7TU.roa (raw, json)
Hash identifier: RdkrxnWNuCnz09SwX6bAetPulFmHprHuofAQ27YD2QE=
Subject key identifier: 31:42:2E:CE:6B:4C:5E:B0:95:22:E9:4E:52:5A:62:03:75:D9:ED:35
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018C2065F42F21FD21F77B68B4C8F2FBEEF2
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/MUIuzmtMXrCVIulOUlpiA3XZ7TU.roa
Signing time: Thu 30 Nov 2023 13:23:21 +0000
ROA not before: Thu 30 Nov 2023 13:23:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216246
IP address blocks: 185.174.136.0/24 maxlen: 24
185.229.66.0/24 maxlen: 24
185.112.83.0/24 maxlen: 24
194.67.201.0/24 maxlen: 24
45.142.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:20:65:f4:2f:21:fd:21:f7:7b:68:b4:c8:f2:fb:ee:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Nov 30 13:23:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31422ece6b4c5eb09522e94e525a620375d9ed35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:85:50:9f:04:dd:cc:e8:12:76:10:27:7e:64:
12:82:31:83:4f:23:e6:91:96:8e:30:5e:78:a4:9f:
dc:f2:9d:d9:31:97:16:13:dc:d5:b4:b1:18:88:a3:
5a:ca:11:ef:a0:a6:40:6d:27:43:b4:99:dd:ce:ea:
f6:df:63:22:d2:ee:49:f2:29:6e:df:9c:c4:24:77:
32:cb:4d:29:90:13:0e:e5:3f:c5:fd:e2:cc:55:b5:
09:5d:9c:81:bb:1c:2c:3b:56:2c:0e:55:b0:0f:12:
61:77:62:c0:cb:29:38:fc:a5:c7:8b:6d:fe:97:26:
1f:58:66:c8:ad:07:b1:2a:f2:37:d8:86:c5:f2:d7:
88:a0:5f:be:30:23:85:81:85:7a:9a:a0:af:ba:9c:
11:7b:7d:fd:49:c6:4d:3a:1b:7e:ed:e6:15:2f:c4:
d8:4e:44:ab:6e:f3:7f:cb:78:76:28:cf:97:b2:97:
de:09:a9:ea:0b:09:d4:00:67:54:87:50:c6:5f:bd:
99:7a:bd:35:11:9e:8c:90:dd:8e:a9:68:e0:e2:cb:
c1:34:5d:d7:46:8b:f0:10:a4:7a:c4:27:f0:4f:e2:
22:89:7c:7a:31:f1:4e:fb:b2:61:15:52:1e:0d:c6:
c3:8d:19:f0:57:73:e9:66:23:67:ba:42:75:a7:a2:
74:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:42:2E:CE:6B:4C:5E:B0:95:22:E9:4E:52:5A:62:03:75:D9:ED:35
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/MUIuzmtMXrCVIulOUlpiA3XZ7TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.122.0/24
185.112.83.0/24
185.174.136.0/24
185.229.66.0/24
194.67.201.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:f3:ca:37:ae:6b:65:a5:8e:64:99:4e:0d:96:5b:09:a1:a1:
e3:e4:90:cb:1f:2e:5d:5c:43:39:30:f0:5e:29:7b:55:2b:ec:
3a:4c:bc:01:ad:e0:1c:24:1b:71:4e:c2:24:40:11:da:ec:f1:
fe:b5:2e:e6:66:cb:cf:69:c5:54:7c:8f:e3:24:89:19:69:c6:
1b:c0:97:f6:d7:ea:36:3c:ce:7b:08:c8:23:f1:c7:d2:c1:dd:
6e:28:09:f5:c3:cb:b5:2e:7b:9e:53:8e:e5:e4:6c:67:a0:85:
11:69:ec:cc:04:b5:9d:1c:a0:34:67:f0:b5:0a:5d:a0:e1:16:
54:0a:ae:58:3e:e1:f5:cb:08:8f:1f:b8:cf:e7:ed:b9:3c:43:
bb:15:d6:eb:34:22:ae:d4:e0:56:1a:62:af:ac:fa:b7:7b:93:
26:82:f0:85:80:35:e4:12:ae:56:65:7d:84:f8:fa:ce:08:d1:
5b:da:58:af:19:d0:3f:30:48:c9:b4:12:e3:83:1f:de:b7:6d:
97:9b:c4:74:1a:63:94:0b:ba:49:28:f7:97:a7:39:6f:a3:9a:
ee:82:76:07:0e:f8:3f:97:70:8e:6f:64:61:d4:4e:51:bc:6d:
6e:a3:e0:50:41:95:3b:3c:1e:d7:d8:98:cf:48:42:d5:16:bd:
01:01:80:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org