Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/mbfEBVFcBuCg0SCK4qmfhEeXTPk.roa
File: mbfEBVFcBuCg0SCK4qmfhEeXTPk.roa (raw, json)
Hash identifier: M493HpR2aclgqWz59cZovwSvJBTMn6msJ7xzCxYgr+E=
Subject key identifier: 99:B7:C4:05:51:5C:06:E0:A0:D1:20:8A:E2:A9:9F:84:47:97:4C:F9
Certificate issuer: /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial: 018CF290210ACBE81ACB82A29EA34FCC8F29
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/mbfEBVFcBuCg0SCK4qmfhEeXTPk.roa
Signing time: Wed 10 Jan 2024 08:49:40 +0000
ROA not before: Wed 10 Jan 2024 08:49:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216139
IP address blocks: 178.208.64.0/24 maxlen: 24
178.208.65.0/24 maxlen: 24
178.208.66.0/24 maxlen: 24
178.208.67.0/24 maxlen: 24
178.208.72.0/24 maxlen: 24
178.208.73.0/24 maxlen: 24
178.208.78.0/24 maxlen: 24
178.208.76.0/24 maxlen: 24
178.208.77.0/24 maxlen: 24
178.208.74.0/24 maxlen: 24
178.208.75.0/24 maxlen: 24
178.208.85.0/24 maxlen: 24
178.208.83.0/24 maxlen: 24
178.208.84.0/24 maxlen: 24
178.208.81.0/24 maxlen: 24
178.208.82.0/24 maxlen: 24
178.208.79.0/24 maxlen: 24
178.208.80.0/24 maxlen: 24
178.208.86.0/24 maxlen: 24
178.208.90.0/24 maxlen: 24
178.208.91.0/24 maxlen: 24
178.208.88.0/24 maxlen: 24
178.208.89.0/24 maxlen: 24
178.208.93.0/24 maxlen: 24
185.105.108.0/24 maxlen: 24
109.234.32.0/24 maxlen: 24
95.142.32.0/24 maxlen: 24
2.56.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 07:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f2:90:21:0a:cb:e8:1a:cb:82:a2:9e:a3:4f:cc:8f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
Validity
Not Before: Jan 10 08:49:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99b7c405515c06e0a0d1208ae2a99f8447974cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:90:59:0e:01:ed:58:53:d9:ba:a5:7d:5d:
0d:00:47:18:6c:2f:e7:d1:4b:7d:7b:93:54:e0:d5:
e5:89:ca:2a:2c:0b:aa:51:cb:d2:3c:c7:cd:fd:51:
8c:bf:5d:92:27:5d:b5:b1:bc:24:28:1e:26:cb:50:
22:88:01:eb:09:d4:d5:7b:1b:38:46:9f:77:5b:1f:
5e:52:62:85:79:40:54:6e:48:93:1e:fb:f6:de:9c:
61:9c:f4:e6:ba:e0:53:ff:5a:79:f1:9b:e4:52:f9:
8e:bf:af:c8:13:b7:3e:5b:23:7c:80:43:2f:07:d8:
8f:06:95:b7:f2:1f:1e:ff:78:39:22:5b:41:0f:c9:
3e:d7:67:0d:3f:bf:71:ca:5b:f8:25:71:a1:f6:fb:
12:ba:18:e9:be:48:83:8e:92:13:f6:e4:c2:90:48:
20:c0:e6:be:f5:52:45:af:2f:2c:79:75:5f:a9:e2:
bb:f9:e9:5e:57:c8:59:df:33:7e:46:92:32:50:8a:
d4:cc:59:64:e0:fe:26:99:4d:d4:a8:b7:06:e3:a4:
7e:bf:3d:9d:d7:81:92:52:a2:e1:0f:bb:b5:84:e6:
a1:e5:10:38:f9:5d:50:77:0b:3d:83:e3:28:96:35:
af:3f:b4:31:9b:9b:81:b1:e1:00:19:e1:96:d0:d3:
c0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B7:C4:05:51:5C:06:E0:A0:D1:20:8A:E2:A9:9F:84:47:97:4C:F9
X509v3 Authority Key Identifier:
keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/mbfEBVFcBuCg0SCK4qmfhEeXTPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.90.0/24
95.142.32.0/24
109.234.32.0/24
178.208.64.0/22
178.208.72.0-178.208.86.255
178.208.88.0/22
178.208.93.0/24
185.105.108.0/24
Signature Algorithm: sha256WithRSAEncryption
93:08:c2:55:05:b9:ff:68:48:c4:62:37:4c:69:1a:79:54:03:
2c:73:e3:4b:c9:ef:65:9a:10:9a:44:1b:a5:2a:5a:7e:fa:ef:
d2:27:39:40:06:dd:dc:9c:dd:19:2e:b3:fb:92:41:2f:76:b2:
7c:e3:c0:b9:97:53:4c:3c:e9:19:38:d4:d5:2c:7d:f7:b5:a5:
e0:8a:57:9d:d1:01:2b:86:48:1f:02:9a:c1:0e:82:f1:c7:9e:
f9:48:5f:e6:26:d9:c4:13:9c:ca:37:c8:09:60:5d:7c:71:eb:
b1:15:30:3d:0c:45:a9:b9:3a:b8:5a:31:29:8f:1f:cd:6a:59:
b4:6d:ea:c2:51:51:20:23:30:25:84:6a:0d:fb:48:40:6d:bf:
c7:32:e3:bf:cf:38:51:10:f6:70:15:d7:6f:dc:b0:94:5e:e6:
6c:d9:78:97:c2:ec:91:95:dd:62:8a:38:7c:7d:47:7d:29:fb:
8c:7e:70:73:b9:44:0e:9b:25:39:55:e1:0e:c6:24:0c:3b:4f:
4c:fd:b2:81:2f:92:10:7e:78:ca:35:2a:01:12:8b:30:f2:a0:
64:58:e1:2c:f0:e6:c0:0b:e0:fc:48:d7:5f:1e:5a:ce:29:0f:
d0:63:a9:b8:33:27:a1:8b:2a:19:58:94:2c:07:06:51:13:79:
7e:41:a5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 13 11:39:50 2024 by rpki-client on console-fra.rpki-client.org