Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/a_M7runaQrBMW9b8p8c-IwgSaNE.roa
File: a_M7runaQrBMW9b8p8c-IwgSaNE.roa (raw, json)
Hash identifier: FSYKwBPF61zLY8/cwg7eb7CsRNdyEkPdupHv8ye41Ss=
Subject key identifier: 6B:F3:3B:AE:E9:DA:42:B0:4C:5B:D6:FC:A7:C7:3E:23:08:12:68:D1
Certificate issuer: /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Certificate serial: 01856F1D99BECD2BB76FAE187C4FBFBCBA8E
Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/a_M7runaQrBMW9b8p8c-IwgSaNE.roa
Signing time: Sun 01 Jan 2023 20:54:48 +0000
ROA not before: Sun 01 Jan 2023 20:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15600
IP address blocks: 185.74.116.0/22 maxlen: 22
194.153.176.0/21 maxlen: 21
94.143.88.0/21 maxlen: 21
2a00:d320::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:99:be:cd:2b:b7:6f:ae:18:7c:4f:bf:bc:ba:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Validity
Not Before: Jan 1 20:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bf33baee9da42b04c5bd6fca7c73e23081268d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:7e:0b:e1:a8:2c:7e:b8:0c:da:4c:cf:02:
7c:c5:ae:25:90:69:75:0e:ba:22:b5:46:a4:bd:4b:
00:08:97:ff:c1:9a:69:a0:58:99:e7:74:8a:04:9d:
1c:14:94:b6:1f:59:7f:d6:13:f8:8a:7f:59:c2:c1:
24:b4:ae:38:8e:a4:27:c4:99:77:a8:39:97:e6:05:
50:4a:5d:46:0d:9b:c4:66:58:9b:da:08:85:5a:59:
53:e5:a5:61:c9:43:ba:22:21:0c:73:9b:e4:58:75:
66:c0:63:e6:69:42:90:01:b2:6b:01:18:f4:1f:10:
c4:dc:22:50:1c:13:83:ff:38:d5:85:b4:f0:98:30:
3c:94:f0:49:95:c3:0c:c0:07:f6:cc:1b:c3:38:e6:
73:a2:cc:5d:a3:87:e2:60:ea:24:74:25:a0:15:8c:
bc:e1:78:de:fb:f8:68:95:89:c6:3d:1f:86:f8:a2:
80:32:0e:82:8e:08:b3:9e:d1:8d:42:64:1d:38:3e:
d7:ec:87:01:22:78:48:92:36:b1:06:fb:0d:e7:b4:
4a:9c:fe:28:99:ac:3d:22:4f:ac:e5:38:f2:9f:ba:
49:0b:71:08:0b:7e:49:28:99:5d:c6:d4:24:eb:02:
13:38:45:5c:6f:f4:ca:71:5f:68:90:30:e4:99:27:
4e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F3:3B:AE:E9:DA:42:B0:4C:5B:D6:FC:A7:C7:3E:23:08:12:68:D1
X509v3 Authority Key Identifier:
keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/a_M7runaQrBMW9b8p8c-IwgSaNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.88.0/21
185.74.116.0/22
194.153.176.0/21
IPv6:
2a00:d320::/29
Signature Algorithm: sha256WithRSAEncryption
9d:b5:68:ff:c9:c3:57:bf:f5:bf:6d:19:70:22:24:7e:d7:05:
16:51:90:15:96:c8:06:7f:87:23:08:2c:be:f7:88:02:82:ec:
1f:57:45:f6:44:97:72:c6:2c:53:1d:6f:f9:22:4c:cb:88:86:
b2:c4:a0:76:e0:92:1a:31:78:cd:ef:98:1b:08:7d:a7:ec:c0:
cc:a2:cf:23:0f:4d:cb:50:ae:b9:06:fd:1d:f1:bf:75:69:98:
43:bf:ad:4e:fc:b8:6d:0f:a7:37:23:85:5b:18:29:a7:7f:b2:
91:5e:a8:41:c4:81:3a:23:0c:c6:67:d3:40:00:c9:70:0d:26:
d4:0a:4d:dc:0a:7c:a2:5c:3d:d8:bc:6a:6e:95:85:15:36:1d:
ab:7e:81:f3:ee:a0:55:82:8b:f9:67:f9:5f:cb:f8:77:dd:95:
1a:f2:1d:2e:97:fa:b5:64:d6:da:8b:ad:c6:6d:81:76:3b:d0:
20:14:97:0f:2b:a5:b2:a9:3e:4e:7f:66:e8:54:31:c8:5e:a3:
8a:16:ae:da:f6:ea:75:cd:3f:99:79:fa:3c:4d:e6:f5:c6:ee:
02:4f:a5:ad:4f:a5:b3:f9:3d:fe:af:1b:e2:af:2e:ae:86:6c:
7c:0b:49:1a:86:d0:f7:b2:9a:7d:01:46:26:4d:f2:1b:04:94:
5b:c4:e0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:07 2024 by rpki-client on console-fra.rpki-client.org