Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/MTlq6J0hlfwACpG_ExFoUr8o4KU.roa
File: MTlq6J0hlfwACpG_ExFoUr8o4KU.roa (raw, json)
Hash identifier: m4zPfwR4ft5sg0BqNSaJ4/abQcEloq7z9/r72X6Nx1Y=
Subject key identifier: 31:39:6A:E8:9D:21:95:FC:00:0A:91:BF:13:11:68:52:BF:28:E0:A5
Certificate issuer: /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial: 0186942B384C43713619FB00519B53C9B01B
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/MTlq6J0hlfwACpG_ExFoUr8o4KU.roa
Signing time: Mon 27 Feb 2023 18:38:25 +0000
ROA not before: Mon 27 Feb 2023 18:38:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 45.81.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 May 2023 11:22:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:94:2b:38:4c:43:71:36:19:fb:00:51:9b:53:c9:b0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Validity
Not Before: Feb 27 18:38:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31396ae89d2195fc000a91bf13116852bf28e0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:24:f7:fc:86:78:dc:73:fc:8d:b5:ab:44:29:
65:26:ca:d8:b1:ff:26:4c:6c:ba:04:32:51:fe:ff:
b3:72:a6:6a:ce:1c:22:01:e8:c0:f8:06:96:a3:74:
ea:a8:ca:15:ae:bb:55:2a:ce:75:e7:ae:17:50:27:
ce:e4:2c:33:38:2b:83:db:41:ae:0e:e7:30:7d:d7:
11:ea:dd:dd:93:6d:5c:7c:7a:fa:49:65:d5:9c:b5:
bb:f6:26:10:44:26:57:16:00:ed:00:0a:6c:e8:c5:
a0:ca:f8:4e:ff:88:93:a9:ba:83:ef:9c:6e:a4:10:
49:c0:0e:06:39:86:e8:fb:ba:19:cb:88:68:8f:80:
71:9e:e0:24:ee:87:25:b0:86:af:e0:e4:c4:b8:3d:
7c:d2:b7:bb:45:49:16:3b:95:65:39:25:3a:eb:d5:
6c:d9:1e:9d:b3:04:7e:f8:1b:17:bb:cc:fd:35:7e:
c3:0a:20:9e:82:c5:39:8d:aa:50:40:2a:38:b9:58:
66:a3:80:18:2f:9c:90:d5:e8:4d:14:5b:ef:79:af:
6b:23:af:4a:b0:c9:4d:dd:93:2f:0a:d7:0d:aa:c3:
25:d4:73:5b:11:8e:f7:9b:d8:c0:34:71:e1:3d:86:
e0:a6:66:35:65:7c:6a:0e:0a:56:ee:75:34:83:b7:
4c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:39:6A:E8:9D:21:95:FC:00:0A:91:BF:13:11:68:52:BF:28:E0:A5
X509v3 Authority Key Identifier:
keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/MTlq6J0hlfwACpG_ExFoUr8o4KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.118.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:2f:72:88:db:82:f3:2d:8f:6a:dd:3b:f0:3d:75:7a:35:12:
05:25:d7:28:7d:ec:5c:d7:45:06:32:32:08:22:bc:9e:25:29:
5c:ab:90:ad:ea:75:a8:a6:8e:9a:ec:48:01:27:5e:d7:2e:10:
70:34:e4:16:b4:b3:1a:ca:74:68:23:a4:d0:9e:b7:29:19:b9:
67:17:6e:a5:29:47:33:14:5f:5e:3f:11:85:a4:e9:24:64:7d:
d7:86:77:42:87:a8:1b:bd:4d:c7:9e:83:08:c0:86:8b:6f:11:
7c:ef:05:ea:13:b5:25:df:34:3a:40:0d:47:eb:b4:85:4a:d0:
d8:3b:a5:f9:f7:db:53:ef:94:f2:fe:c6:91:30:44:fc:c1:01:
55:83:9b:6c:cb:5d:0c:7b:2a:a4:e5:b7:e3:5f:ba:93:48:23:
ea:5f:3b:2d:30:a6:25:8e:0b:75:52:95:e7:a9:03:4e:d2:07:
47:cf:60:47:e7:d6:04:a1:86:69:b4:7b:5f:6f:84:c9:be:56:
e4:34:0f:00:f6:a0:ba:c1:cd:80:6c:1a:3e:e3:c2:63:ed:97:
14:6c:e2:ef:31:c0:59:91:76:02:5e:e4:08:0a:a6:87:ca:50:
80:81:ec:05:d8:82:da:3b:85:78:d0:30:9e:38:b8:88:ff:6b:
67:ae:59:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:59 2024 by rpki-client on console-fra.rpki-client.org