Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/mJJXG3jpaTnhHsu2A8clFDO_mBk.roa
File: mJJXG3jpaTnhHsu2A8clFDO_mBk.roa (raw, json)
Hash identifier: SOzKkFKe4D9pPooP2dDLH5753v3pm28bJOvu6pSKf8k=
Subject key identifier: 98:92:57:1B:78:E9:69:39:E1:1E:CB:B6:03:C7:25:14:33:BF:98:19
Certificate issuer: /CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Certificate serial: 01893932159BDD30A2DC0F01069CC17C55A7
Authority key identifier: 4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/mJJXG3jpaTnhHsu2A8clFDO_mBk.roa
Signing time: Sun 09 Jul 2023 05:48:50 +0000
ROA not before: Sun 09 Jul 2023 05:48:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48966
IP address blocks: 95.130.91.0/24 maxlen: 24
95.130.89.0/24 maxlen: 24
95.130.88.0/23 maxlen: 23
95.130.88.0/24 maxlen: 24
95.130.90.0/23 maxlen: 23
95.130.92.0/23 maxlen: 23
95.130.92.0/24 maxlen: 24
95.130.94.0/24 maxlen: 24
95.130.93.0/24 maxlen: 24
185.88.81.0/24 maxlen: 24
185.88.80.0/24 maxlen: 24
185.88.80.0/23 maxlen: 23
185.88.83.0/24 maxlen: 24
185.88.82.0/23 maxlen: 23
185.88.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:39:32:15:9b:dd:30:a2:dc:0f:01:06:9c:c1:7c:55:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Validity
Not Before: Jul 9 05:48:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9892571b78e96939e11ecbb603c7251433bf9819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:43:8f:fc:ff:aa:bb:b2:a7:54:60:a7:e6:ed:
d1:5b:5d:9b:1a:8b:18:34:38:e9:d5:08:e6:a3:a0:
92:73:dc:26:34:00:19:ed:db:76:c1:e8:e7:98:79:
9a:95:99:c8:34:9c:72:f2:ac:0e:51:2e:e1:de:ed:
4e:38:5c:53:52:24:ab:78:e4:7c:41:8e:74:4c:95:
a6:f0:e8:16:a4:6a:08:58:00:df:e1:64:a1:38:4c:
75:e2:4b:69:f2:de:4b:6e:81:c4:4f:40:fc:83:c2:
d2:da:f0:f6:e9:a9:a4:b2:be:d7:79:05:43:dd:13:
7e:06:6a:cb:ee:82:e4:3c:ac:6a:67:7f:6b:47:fa:
a2:df:a2:07:40:c9:8d:a9:8b:30:26:ad:67:c0:32:
ea:67:b0:48:3b:20:81:ba:0d:fd:e2:be:54:b6:92:
5f:c5:79:85:43:75:ff:46:43:28:cf:8c:51:91:c0:
ca:28:c3:96:14:aa:21:e7:68:0e:80:a6:0c:90:1a:
be:e0:22:a6:0d:a7:61:f0:60:d7:b7:dc:b1:9c:80:
ab:b1:db:54:80:b1:84:23:1f:70:67:6f:b8:10:10:
9e:83:2a:22:f9:2a:c4:e1:82:5e:95:76:31:87:2d:
39:f0:07:82:75:bb:1b:79:64:55:1a:8d:e5:00:7d:
45:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:92:57:1B:78:E9:69:39:E1:1E:CB:B6:03:C7:25:14:33:BF:98:19
X509v3 Authority Key Identifier:
keyid:4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/mJJXG3jpaTnhHsu2A8clFDO_mBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.88.0-95.130.94.255
185.88.80.0/22
Signature Algorithm: sha256WithRSAEncryption
42:18:12:87:92:71:fa:be:2b:34:23:40:45:0d:c6:ec:36:8e:
93:ff:d1:42:8c:0f:46:08:f9:e1:72:f1:71:f8:37:2a:79:86:
1f:26:53:ca:d0:e7:e6:c0:ec:45:41:ee:7c:a4:c7:d0:36:e0:
7a:3a:6c:e2:dd:41:69:88:9b:52:30:a4:80:18:7f:7e:26:47:
ca:00:e3:cd:b6:97:11:98:5b:f9:55:27:55:7a:c3:2d:17:51:
13:2d:d1:fe:21:16:2a:01:d3:9c:f1:50:9e:46:88:0f:f6:dd:
1f:c2:8c:b7:26:82:92:78:e3:96:2c:c5:7a:95:5d:3d:3b:9f:
35:b8:2d:f0:89:b9:cb:a3:f6:57:7e:d2:9b:aa:2c:d2:5f:b9:
cc:7e:b4:14:03:bf:3a:95:72:30:63:91:f1:28:f1:00:95:18:
77:c3:d5:62:17:be:70:80:69:59:6d:20:16:4a:3d:40:f5:65:
af:30:1c:09:1c:da:59:9a:a2:f6:b8:cb:b0:c4:82:fa:9c:25:
e5:b9:5d:07:e8:eb:a5:b9:b9:03:90:f0:ba:2e:11:69:50:6c:
f8:76:d0:82:68:6c:1c:28:2c:9a:e6:bb:2b:ea:63:d1:3a:a8:
21:7d:79:01:59:62:a4:e8:12:5e:3f:dd:c6:2c:72:82:dc:04:
4b:33:71:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:07 2024 by rpki-client on console-fra.rpki-client.org