Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/MXy-SI9B6ogQA4ymB_laxOaxpzc.roa
File: MXy-SI9B6ogQA4ymB_laxOaxpzc.roa (raw, json)
Hash identifier: G1bnxHl1xAbRAf3SHI2GVYvS3I3Sai2AdP/YmY/Spvc=
Subject key identifier: 31:7C:BE:48:8F:41:EA:88:10:03:8C:A6:07:F9:5A:C4:E6:B1:A7:37
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 0190EF31EC4EBE3598EA566F86B7516C0B4C
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/MXy-SI9B6ogQA4ymB_laxOaxpzc.roa
Signing time: Fri 26 Jul 2024 13:19:04 +0000
ROA not before: Fri 26 Jul 2024 13:19:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.140.59.0/24 maxlen: 24
45.149.5.0/24 maxlen: 24
45.149.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 07:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ef:31:ec:4e:be:35:98:ea:56:6f:86:b7:51:6c:0b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jul 26 13:19:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=317cbe488f41ea8810038ca607f95ac4e6b1a737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:af:96:67:fa:ad:7d:1c:4c:75:75:88:fb:
db:16:be:f4:db:c7:e7:cf:03:8c:a9:5f:bc:b6:f5:
93:e0:8d:a8:36:25:90:58:cc:25:0e:ea:eb:01:d0:
65:ae:96:2d:0c:1a:24:98:76:f6:14:61:aa:9a:bb:
9e:81:99:e3:24:9f:29:10:3b:d3:db:57:9e:1b:ea:
1a:38:41:d4:6d:bf:42:78:4c:4d:0e:24:fe:73:77:
67:41:90:01:05:ad:c5:91:ac:c5:03:f6:62:59:5f:
5b:96:48:60:e5:65:c8:ca:bb:1b:bc:dd:b9:cd:90:
49:4b:6f:f5:0f:f8:c4:8a:6c:ad:32:d0:39:bb:93:
aa:20:70:a5:f8:8a:b4:ed:de:62:82:53:d9:bc:34:
52:8c:98:e8:2e:f2:ca:4a:b8:68:52:90:61:97:98:
2c:c0:48:3e:40:b3:df:b7:b5:0f:b3:99:63:23:0a:
3a:95:91:18:15:a7:3d:40:be:60:2a:27:b2:5c:dc:
4c:f0:60:c2:f6:aa:1b:18:cb:6b:ce:42:0b:a6:e9:
37:d2:9f:98:49:67:6e:f0:7f:a7:ca:6e:fd:f8:83:
4a:a5:87:6b:4a:4c:19:02:e3:87:66:94:c3:48:2b:
43:88:20:6a:34:65:82:ae:1c:99:df:4f:1e:0e:7f:
68:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7C:BE:48:8F:41:EA:88:10:03:8C:A6:07:F9:5A:C4:E6:B1:A7:37
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/MXy-SI9B6ogQA4ymB_laxOaxpzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.59.0/24
45.149.5.0/24
45.149.7.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f1:00:2a:78:44:99:25:a3:55:7e:9e:f9:86:8d:29:ee:1b:
1b:66:ec:d0:e5:e8:a0:03:46:97:21:ad:f6:49:ae:41:ef:80:
cc:08:85:19:92:b6:db:e2:53:ab:f7:03:c1:b5:29:cf:13:ec:
5c:4a:bf:40:ab:55:8e:d0:79:e7:01:5b:46:4a:42:76:58:00:
8b:4e:bd:94:e2:95:92:51:83:b0:14:8d:6d:bc:98:da:90:96:
99:dc:4f:0b:d1:88:69:06:35:8b:82:b9:fe:49:52:a4:b5:2c:
e5:e5:6f:00:d8:20:dd:a0:e2:f9:f1:f0:22:00:ab:33:a4:36:
88:34:75:78:b1:80:f8:b7:f8:74:c5:f2:81:e9:98:a0:da:43:
c3:f5:e9:fd:e9:0e:9d:be:b0:d4:76:46:6e:fe:de:b5:96:96:
ea:03:a8:2f:fa:42:c1:e7:d6:fd:da:be:cf:97:36:55:80:d5:
1c:0e:74:2d:38:80:7a:95:b2:c4:0d:ee:5f:84:de:d7:2b:ff:
75:cb:fa:12:d3:c4:37:07:54:f8:f9:70:31:9d:19:69:0a:f7:
bb:7f:70:28:6f:2c:f5:c6:a9:19:8c:da:38:1f:01:10:e2:45:
6a:4a:10:3a:7d:90:5b:f7:0e:a7:57:4f:cd:cb:e9:62:11:99:
f4:6d:0b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 10:02:43 2024 by rpki-client on console-fra.rpki-client.org