Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/MvA4duv4k05H1HQ0oBe96Z9dLU8.roa
File: MvA4duv4k05H1HQ0oBe96Z9dLU8.roa (raw, json)
Hash identifier: bYsEN9/JjZUUnYZzbT4+5LucgJWojThFXfprmXwTgFw=
Subject key identifier: 32:F0:38:76:EB:F8:93:4E:47:D4:74:34:A0:17:BD:E9:9F:5D:2D:4F
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 018573160183157E5CAC98F6E29BFBDF7AB5
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/MvA4duv4k05H1HQ0oBe96Z9dLU8.roa
Signing time: Mon 02 Jan 2023 15:25:00 +0000
ROA not before: Mon 02 Jan 2023 15:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211526
IP address blocks: 85.14.56.0/24 maxlen: 24
85.14.57.0/24 maxlen: 24
89.252.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:16:01:83:15:7e:5c:ac:98:f6:e2:9b:fb:df:7a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 2 15:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32f03876ebf8934e47d47434a017bde99f5d2d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fc:1f:92:f5:e5:54:fe:89:65:49:f8:f9:5b:
0d:a4:f9:42:76:b5:9e:0d:f6:48:92:f3:42:fd:1d:
d1:3b:af:78:cc:74:99:aa:6e:d9:fd:fe:c2:76:28:
71:f7:7f:88:36:21:e2:ad:9d:56:98:73:ba:e0:ba:
38:01:6a:8b:e7:6f:f0:23:51:0c:dc:63:b5:2e:c1:
33:51:f7:77:f8:26:8f:fb:e5:b0:f5:6f:e9:52:82:
cd:d9:38:f4:a1:4e:80:51:0b:be:b9:36:33:bd:6f:
63:27:69:a6:bd:c1:e6:3d:09:91:dc:01:36:6a:2c:
dc:22:45:9b:9f:3f:91:b5:0f:70:d7:dc:31:49:a7:
8d:1f:f1:35:9c:8a:64:9f:d1:b3:56:28:65:e9:00:
c1:a9:f4:01:99:b7:a5:15:96:cc:0c:37:2d:91:ab:
65:7c:66:dd:61:3b:eb:83:bb:c3:bd:d1:5d:88:fa:
3d:67:f8:d4:ab:26:70:6f:d3:e7:6c:cc:bb:6b:5e:
7f:ba:24:d6:52:dc:c2:28:44:9c:64:b2:8d:df:41:
57:6e:54:92:ae:a7:ed:06:4f:45:92:fc:03:6c:3d:
97:39:6b:8e:1b:4b:1f:2e:08:a7:8c:9e:5d:a1:f7:
d7:f7:a1:d1:0d:8d:ca:1b:8e:1c:3c:56:b2:8a:10:
15:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F0:38:76:EB:F8:93:4E:47:D4:74:34:A0:17:BD:E9:9F:5D:2D:4F
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/MvA4duv4k05H1HQ0oBe96Z9dLU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.14.56.0/23
89.252.198.0/24
Signature Algorithm: sha256WithRSAEncryption
01:94:3c:0a:a6:a8:ab:76:15:bd:ec:44:31:ef:02:f5:92:9f:
4b:5f:1e:97:5b:dd:3a:91:29:ef:a0:5d:80:6c:41:3b:c2:29:
78:7b:df:69:71:bb:73:43:26:01:3e:60:b0:99:d2:ca:b8:38:
aa:cb:4a:25:93:c7:48:75:bd:af:f9:db:e5:6a:72:2c:43:88:
e8:a3:80:6e:19:1c:bf:88:1f:b4:83:ac:a7:57:6e:9e:af:eb:
34:8e:9a:ef:cd:99:7f:46:78:15:6f:87:1f:19:45:4a:1d:7c:
3f:b2:b6:dc:51:eb:23:8d:48:4a:f7:35:8f:4f:c3:0e:5a:e5:
fd:9c:7d:03:c2:e3:2f:5e:2b:05:83:38:b8:68:80:3b:0b:b9:
dc:57:1f:4f:61:85:04:8b:56:c1:6d:3c:ec:b5:49:82:89:42:
eb:b9:e2:a7:65:9f:ce:09:89:b8:47:8c:4c:7d:03:3b:b2:38:
a8:1e:0b:29:79:04:84:45:42:c7:b8:66:ba:bd:1f:6c:5b:06:
3c:85:60:2c:ca:0a:fe:42:81:16:4c:6f:1d:c5:53:b1:ae:9a:
9c:ba:7e:35:7f:31:70:0e:7e:fd:44:13:3d:0c:7a:85:29:47:
20:58:4c:21:7e:ef:0a:b7:01:86:f7:14:90:52:32:88:1a:24:
63:bd:a6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:19 2024 by rpki-client on console-ams.rpki-client.org