Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/MvAZS3t6uR1CWRRciHDYQ-S2y8c.roa
File: MvAZS3t6uR1CWRRciHDYQ-S2y8c.roa (raw, json)
Hash identifier: YD4dUKy7L8n9GbgcrY8eiONewJcgQgFOd6s5o9yq5Hw=
Subject key identifier: 32:F0:19:4B:7B:7A:B9:1D:42:59:14:5C:88:70:D8:43:E4:B6:CB:C7
Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial: 0189D14E548344EC337BD12EB5B6A5465690
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/MvAZS3t6uR1CWRRciHDYQ-S2y8c.roa
Signing time: Mon 07 Aug 2023 18:41:58 +0000
ROA not before: Mon 07 Aug 2023 18:41:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209500
IP address blocks: 193.31.7.0/24 maxlen: 24
45.182.188.0/24 maxlen: 24
85.193.79.0/24 maxlen: 24
103.14.1.0/24 maxlen: 24
83.229.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Sep 2023 06:37:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d1:4e:54:83:44:ec:33:7b:d1:2e:b5:b6:a5:46:56:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Validity
Not Before: Aug 7 18:41:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32f0194b7b7ab91d4259145c8870d843e4b6cbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:f8:90:6a:ab:6f:ca:3b:3a:c1:c7:f6:d5:
7d:c2:b2:c3:2d:53:4e:42:90:17:a9:80:34:d1:2d:
c9:42:b3:a7:cd:8b:b3:a3:52:f8:b4:1b:09:d4:fe:
ac:13:6e:09:6d:ee:11:cb:22:f7:6e:80:f3:29:99:
fe:7f:e5:20:a9:1f:f7:66:1f:03:91:40:0c:50:9f:
78:6c:9f:02:8f:f1:7c:ff:5e:31:b4:6d:23:53:2b:
50:12:68:8c:79:67:03:b5:48:88:1f:13:d3:5a:de:
d1:8f:9e:2e:bd:b7:c9:4a:d2:ab:f4:08:c8:b3:2c:
74:dd:ec:40:03:8e:97:ab:3e:f1:d6:70:54:25:9a:
63:a3:41:af:53:5d:ff:78:ce:5c:89:12:5c:d1:06:
2b:88:d0:9a:18:67:05:ae:40:bd:68:bc:9c:3a:62:
53:1d:1b:6f:d6:26:37:7e:6e:ef:e7:26:9f:01:16:
59:32:d0:d5:c8:71:6c:7c:23:52:0c:48:d1:cc:a0:
d0:3c:6a:9b:c4:96:8c:c3:ba:a4:4a:0b:21:8e:06:
34:25:96:54:6e:74:f7:ab:c1:14:66:d2:96:af:4b:
d4:47:a8:84:a2:70:f5:62:9d:2a:65:d8:26:3e:b8:
2e:2c:0e:c3:f3:d9:a4:1d:31:6d:a7:1f:cc:d4:61:
51:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F0:19:4B:7B:7A:B9:1D:42:59:14:5C:88:70:D8:43:E4:B6:CB:C7
X509v3 Authority Key Identifier:
keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/MvAZS3t6uR1CWRRciHDYQ-S2y8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.182.188.0/24
83.229.62.0/24
85.193.79.0/24
103.14.1.0/24
193.31.7.0/24
Signature Algorithm: sha256WithRSAEncryption
01:cb:8c:4e:63:77:41:3e:16:6d:33:c4:45:fc:60:c5:8a:08:
0b:2d:25:a1:89:08:38:b3:33:e0:7f:50:40:bf:aa:92:4f:20:
aa:24:c5:8f:58:86:99:ff:d7:91:41:a0:f1:ab:9a:84:93:dd:
7b:67:ff:9e:6f:2c:89:25:3d:c4:17:b2:82:c2:d9:52:42:3a:
f1:70:83:cb:dd:7d:ee:9e:c1:a2:1c:19:ec:c1:6c:cb:41:d6:
7a:36:15:3d:ee:36:46:cd:d1:ac:d3:a9:46:b2:8b:95:de:af:
4f:3c:1b:82:d1:0f:f9:08:1b:16:67:41:e9:00:fb:cb:33:9b:
f9:d8:12:7d:fc:0d:e6:ba:72:f2:95:69:b7:c4:9c:52:72:94:
22:05:80:b0:d7:06:92:e0:3c:a4:13:c5:10:5b:9f:61:d1:2b:
5e:2b:2d:2e:76:c3:f2:83:19:d0:bf:20:ce:e2:27:a1:2d:98:
aa:ad:80:06:f8:b7:5d:5b:a8:53:b8:76:18:bb:ec:c1:5f:13:
8a:6b:7d:06:36:e8:b8:b0:3f:6a:86:f8:b3:b6:b9:3c:42:0b:
13:cd:ee:ab:5b:98:6c:0b:42:06:32:d8:db:87:02:d4:9b:e8:
b6:7d:bf:24:b4:b6:87:c8:a0:2d:f6:af:cd:9c:13:81:17:9e:
3f:0e:55:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:00 2024 by rpki-client on console-fra.rpki-client.org