Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/mRNylRe52jWrcXqONUXLCleNdzE.roa
File: mRNylRe52jWrcXqONUXLCleNdzE.roa (raw, json)
Hash identifier: mLjhctie8iJXrqc/Rk3djcfUUZNJ2vlFSY+cQeaoQgE=
Subject key identifier: 99:13:72:95:17:B9:DA:35:AB:71:7A:8E:35:45:CB:0A:57:8D:77:31
Certificate issuer: /CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Certificate serial: 018F55454F4C3E7B0A228E5C238C4A9DAF46
Authority key identifier: 92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/mRNylRe52jWrcXqONUXLCleNdzE.roa
Signing time: Tue 07 May 2024 22:55:56 +0000
ROA not before: Tue 07 May 2024 22:55:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62597
IP address blocks: 185.103.32.0/22 maxlen: 24
185.103.33.0/24 maxlen: 24
185.103.34.0/24 maxlen: 24
2a00:edc0::/32 maxlen: 32
2a00:edc0:100::/44 maxlen: 48
2a00:edc0:10f::/48 maxlen: 48
2a00:edc0:1f0::/44 maxlen: 44
2a00:edc0:1000::/48 maxlen: 48
2a00:edc0:1001::/48 maxlen: 48
2a00:edc0:1002::/48 maxlen: 48
2a00:edc0:1003::/48 maxlen: 48
2a00:edc0:1004::/48 maxlen: 48
2a00:edc0:1005::/48 maxlen: 48
2a00:edc0:1010::/48 maxlen: 48
2a00:edc0:6259::/48 maxlen: 48
2a00:edc0:7ffe::/48 maxlen: 48
2a00:edc0:7fff::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 18 Jul 2024 21:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:55:45:4f:4c:3e:7b:0a:22:8e:5c:23:8c:4a:9d:af:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Validity
Not Before: May 7 22:55:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9913729517b9da35ab717a8e3545cb0a578d7731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:80:6b:9b:5e:92:3b:c4:35:7e:6e:25:c1:
bf:f0:f3:d5:5f:ab:67:83:64:29:ed:bf:d3:11:41:
77:f5:64:bd:c3:1d:ef:e7:08:9a:14:f5:52:34:dc:
7e:da:6d:77:50:38:73:aa:20:f8:4d:b5:fc:e6:51:
79:60:de:48:95:0f:a1:f9:36:b8:cb:e5:65:dc:de:
24:ad:c1:27:6b:b1:55:87:08:2c:66:12:7a:37:5c:
a9:4e:c0:70:19:b5:61:98:3d:53:e3:8d:99:13:91:
98:83:db:be:14:d0:a4:bf:94:62:42:13:03:cf:4c:
07:15:1e:d7:d0:8c:c7:74:1a:ea:aa:2d:af:f2:b2:
68:f6:c0:bf:4c:b5:cb:79:c3:2a:14:3b:e1:15:03:
85:c0:61:05:06:79:8c:a0:71:6c:78:fd:71:0e:35:
b8:9f:02:51:90:8a:20:c2:ed:de:2d:95:4c:08:75:
82:d2:bf:e8:89:61:2c:44:49:63:4f:87:4f:cb:93:
18:a1:05:18:a6:91:a0:7c:31:89:46:bc:3a:a4:c7:
7d:3e:0b:e6:e6:2b:39:ea:44:6a:dd:df:1a:5c:54:
d6:eb:6d:fb:b5:27:fc:07:51:33:d6:04:f8:aa:29:
9b:c6:08:b3:e7:a1:ce:d7:d2:65:a5:63:37:93:d2:
f2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:13:72:95:17:B9:DA:35:AB:71:7A:8E:35:45:CB:0A:57:8D:77:31
X509v3 Authority Key Identifier:
keyid:92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/mRNylRe52jWrcXqONUXLCleNdzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.32.0/22
IPv6:
2a00:edc0::/32
Signature Algorithm: sha256WithRSAEncryption
6a:16:56:eb:d5:d5:1d:7d:1b:8b:68:b9:5b:59:5f:08:17:a6:
40:8e:0b:81:b8:d8:2b:3e:99:8f:ab:8e:54:14:a9:ca:68:c6:
8b:57:46:e1:f8:98:28:87:34:99:11:64:36:fc:95:40:94:9f:
9b:fb:9a:03:ae:23:da:ba:4e:ee:96:10:db:29:0a:e5:31:50:
e1:bc:0c:c2:22:c7:f2:43:63:7a:59:1d:0a:8c:0f:28:67:dd:
0b:a3:65:df:56:fd:59:15:6d:c8:b4:5c:d5:8b:f4:8c:fc:ee:
df:da:bb:59:e0:de:a4:a8:53:ec:45:5c:91:5c:0d:42:d4:6f:
c1:59:bc:83:12:03:7c:b2:d8:ae:ff:e1:02:5f:32:f0:75:96:
fe:6f:8f:c7:a9:88:eb:a0:27:92:4f:1f:e8:76:9f:38:a8:9f:
c6:7e:44:bb:db:c1:47:0e:27:e7:71:04:ce:cd:86:0d:85:78:
b8:46:1e:0d:ae:57:f1:0a:9b:12:bb:e1:3a:73:d1:2c:f6:a6:
e0:8a:7a:5d:d1:84:e0:ec:3b:ee:d7:f2:47:be:21:6a:d7:32:
52:33:36:39:1f:08:2d:83:19:7d:71:49:a6:fe:72:07:e5:12:
18:99:74:29:75:17:3d:86:b0:04:cd:cb:f3:8b:30:25:05:cf:
27:f1:2f:58
-----BEGIN CERTIFICATE-----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 at Fri Jul 19 00:28:39 2024 by rpki-client on console-ams.rpki-client.org