Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/mFnsc4-j6JKJTlzThb-pwsheOqk.roa
File: mFnsc4-j6JKJTlzThb-pwsheOqk.roa (raw, json)
Hash identifier: u3p9bHfipelII5NP1Y3XbZ4cNc2nrZ6ucM/YIthUqgA=
Subject key identifier: 98:59:EC:73:8F:A3:E8:92:89:4E:5C:D3:85:BF:A9:C2:C8:5E:3A:A9
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 01857082C05CB7DEF9C52D70558BD7FAE65A
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/mFnsc4-j6JKJTlzThb-pwsheOqk.roa
Signing time: Mon 02 Jan 2023 03:24:55 +0000
ROA not before: Mon 02 Jan 2023 03:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2472
IP address blocks: 193.48.161.0/24 maxlen: 24
193.48.162.0/24 maxlen: 24
193.49.230.0/24 maxlen: 24
193.55.4.0/24 maxlen: 24
195.98.226.0/24 maxlen: 24
195.98.227.0/24 maxlen: 24
193.50.134.0/24 maxlen: 24
194.254.208.0/24 maxlen: 24
193.51.118.0/24 maxlen: 24
194.214.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:c0:5c:b7:de:f9:c5:2d:70:55:8b:d7:fa:e6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 2 03:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9859ec738fa3e892894e5cd385bfa9c2c85e3aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f1:a3:37:35:0a:bd:c3:16:00:12:92:1c:db:
84:9e:e6:e3:2d:92:65:3e:b0:35:06:2d:ab:2b:c1:
04:f4:68:7e:03:e5:10:e8:83:3b:dd:42:5b:56:35:
32:55:a5:f3:e5:d0:75:a3:93:77:fb:55:2d:9a:2e:
e6:30:2f:24:6c:19:d3:6a:b3:3f:fd:6b:d4:ec:d6:
ef:a0:eb:b6:df:b7:6c:12:49:63:a8:dd:2c:9d:50:
f1:04:17:d4:bf:4d:ea:57:e6:25:02:b9:bc:0e:a5:
94:0c:4c:bd:6a:4d:58:f7:66:14:31:41:c9:2c:c9:
5b:af:39:a2:49:fe:d0:cd:16:7a:ba:aa:82:7d:59:
c0:07:59:86:bc:96:f0:26:32:e1:ee:15:cc:f9:c1:
87:c9:3d:6a:e2:30:c6:9b:46:26:69:44:6d:21:6b:
6b:3e:43:70:7a:dd:15:b5:c0:a1:46:c3:f3:f4:eb:
a4:77:cb:42:6e:22:dd:da:5b:e5:5b:bf:be:33:28:
22:b7:16:3a:17:a8:80:cb:09:a6:45:c3:40:f5:c6:
82:8c:cf:6b:77:87:e5:2a:d3:c9:47:8a:3c:19:7f:
98:18:74:5c:ee:77:81:23:7a:62:77:11:07:3c:89:
20:20:f4:a0:ce:a2:50:fe:06:8a:65:c7:29:ee:73:
80:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:59:EC:73:8F:A3:E8:92:89:4E:5C:D3:85:BF:A9:C2:C8:5E:3A:A9
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/mFnsc4-j6JKJTlzThb-pwsheOqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.48.161.0-193.48.162.255
193.49.230.0/24
193.50.134.0/24
193.51.118.0/24
193.55.4.0/24
194.214.214.0/24
194.254.208.0/24
195.98.226.0/23
Signature Algorithm: sha256WithRSAEncryption
75:a5:e2:e4:f4:1a:a4:4c:51:17:9b:22:8c:72:3d:87:c8:6c:
76:65:e6:21:3a:69:91:d5:ae:f9:e5:ad:13:17:fa:dc:34:5c:
13:d7:10:ac:09:ec:c9:20:32:47:de:54:0a:24:d3:df:fe:07:
45:d1:32:b8:09:8c:d5:d6:8d:10:b3:4e:2e:85:f6:f2:7a:d6:
66:bf:15:00:9c:a1:f1:55:da:0b:f8:02:e1:05:0a:0e:4c:96:
99:28:dd:be:39:ea:fb:53:99:da:ef:91:44:a5:a2:e7:97:fb:
25:31:28:ec:ca:43:b3:11:31:01:1e:a4:e1:66:78:e2:65:b2:
4f:82:06:e0:69:61:9b:23:05:1d:86:6c:f4:c0:6c:48:43:87:
ea:88:b0:34:4f:2b:52:2a:8b:8c:db:80:83:43:9d:9a:c3:78:
56:54:d4:03:e5:a9:00:6b:d4:66:67:67:08:3d:8c:c6:a5:6e:
eb:85:f3:a4:8b:56:19:c6:4e:20:09:23:21:19:a7:fe:d2:6a:
fb:59:7b:d8:e0:01:40:47:14:13:79:fe:e2:60:e4:d9:37:64:
9b:f8:bb:69:84:bf:a2:b2:43:e1:c8:cc:70:fb:84:b1:13:08:
d5:65:6e:2f:27:5b:16:9e:73:ed:ea:66:b5:94:d1:73:5a:a7:
d8:ed:ce:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:37 2024 by rpki-client on console-ams.rpki-client.org