Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/MR3trCQDDSFF_rjhPT47zBq3MHk.roa
File: MR3trCQDDSFF_rjhPT47zBq3MHk.roa (raw, json)
Hash identifier: T8EzPus1674259SuPT8GBQpCZQfeJVZZxHvXVDn007o=
Subject key identifier: 31:1D:ED:AC:24:03:0D:21:45:FE:B8:E1:3D:3E:3B:CC:1A:B7:30:79
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019106F10665FEA3DCD802E2C6F8F8C2734B
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/MR3trCQDDSFF_rjhPT47zBq3MHk.roa
Signing time: Wed 31 Jul 2024 03:59:04 +0000
ROA not before: Wed 31 Jul 2024 03:59:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215480
IP address blocks: 45.11.184.0/22 maxlen: 22
2a05:9080:2::/48 maxlen: 48
2a05:9080:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 03 Aug 2024 04:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:06:f1:06:65:fe:a3:dc:d8:02:e2:c6:f8:f8:c2:73:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jul 31 03:59:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=311dedac24030d2145feb8e13d3e3bcc1ab73079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4f:57:5b:ad:44:75:09:8c:ea:48:9f:bf:a8:
6c:e3:34:47:ff:9b:7f:eb:e2:0e:49:14:fe:3d:87:
0c:61:53:71:7d:f1:7b:9b:1f:07:e6:2f:6b:09:ad:
22:39:56:68:17:2d:af:06:a4:84:7b:50:af:d7:4c:
e3:a7:bc:c1:34:f4:aa:eb:86:5a:a9:d6:e5:1c:a1:
09:51:fb:0c:97:3a:cf:b5:02:6b:09:2d:2d:9f:cb:
51:32:c3:24:56:0e:dd:5c:7a:93:e7:c7:64:f3:dc:
da:4e:f6:71:2d:09:aa:03:a5:10:9d:e4:40:c8:ad:
9a:ba:36:5b:35:d6:6a:12:06:ff:bb:c7:a9:02:ab:
68:41:13:f3:10:79:1c:8b:67:de:f9:82:0b:22:3a:
74:2f:fe:14:e6:27:2d:ef:bb:1a:78:5b:ba:46:b5:
10:90:f5:d9:d3:6d:af:c5:fe:2f:fd:aa:a9:ba:73:
20:00:7d:68:8b:64:3c:7a:4f:2f:c1:7e:97:5a:87:
03:3d:57:01:cf:6d:37:d6:73:4b:ca:72:fa:61:1a:
d0:e5:9c:19:b8:a8:14:56:ec:25:d6:f7:3c:66:80:
12:c1:df:7b:92:fd:64:4c:3b:b3:28:97:30:60:ad:
f0:4d:b5:79:8e:46:a1:98:df:f0:72:93:f0:94:3a:
b6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1D:ED:AC:24:03:0D:21:45:FE:B8:E1:3D:3E:3B:CC:1A:B7:30:79
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/MR3trCQDDSFF_rjhPT47zBq3MHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.184.0/22
IPv6:
2a05:9080:2::/48
2a05:9080:7::/48
Signature Algorithm: sha256WithRSAEncryption
74:6a:bb:01:11:11:e6:09:74:67:0c:d0:63:7f:a5:dc:ce:2c:
52:59:a1:05:cb:d8:d4:b8:26:35:9a:62:fe:b2:66:fb:ef:3e:
44:38:9b:09:4a:3c:74:ab:08:4c:44:42:a0:96:06:7d:8d:7e:
73:0e:ab:58:9c:b1:1b:f5:b2:ae:2e:b2:f6:c4:98:d8:bf:78:
48:0a:b3:69:ea:40:1a:85:30:9c:72:10:a9:60:00:d5:e8:07:
31:3f:a9:4d:17:04:ca:45:a1:73:fc:72:10:90:e5:9e:4e:39:
db:83:5d:c6:dd:f9:51:fa:00:99:df:14:e7:38:c1:96:b3:69:
bd:a6:16:63:f2:2a:3d:eb:8e:f0:3e:ae:1c:ef:9f:18:c7:05:
b3:28:cf:4d:c0:41:47:51:13:b9:a9:17:2c:1c:2e:d1:87:d8:
4e:35:b4:43:60:57:c8:18:27:c7:bd:03:36:38:09:a4:41:19:
3a:2e:03:f0:ff:2a:98:fb:48:8f:ef:b9:93:bf:7b:f9:99:ab:
2c:13:4b:d5:82:82:71:3f:c6:c6:3f:fe:45:b3:6b:e2:51:64:
4b:7c:f4:bd:8f:fc:84:5e:95:eb:88:7c:47:06:a9:b6:e4:71:
f0:25:fe:2d:5b:21:ee:88:ad:f7:fa:be:37:6a:18:bb:be:db:
09:e6:45:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 3 06:03:55 2024 by rpki-client on console-fra.rpki-client.org