Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/hMVClHErvNO6bPzOBZONMIVFb44.roa
File: hMVClHErvNO6bPzOBZONMIVFb44.roa (raw, json)
Hash identifier: e5KNtIekpbaCQNC9dt9E5L88yL6HTL/YMwoX+t5SpUk=
Subject key identifier: 84:C5:42:94:71:2B:BC:D3:BA:6C:FC:CE:05:93:8D:30:85:45:6F:8E
Certificate issuer: /CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Certificate serial: 01905B60A49E320EA8BE395A95BC65F818E6
Authority key identifier: 20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/hMVClHErvNO6bPzOBZONMIVFb44.roa
Signing time: Thu 27 Jun 2024 20:26:18 +0000
ROA not before: Thu 27 Jun 2024 20:26:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201434
IP address blocks: 91.194.138.0/24 maxlen: 24
146.255.190.0/24 maxlen: 24
185.75.36.0/22 maxlen: 22
193.29.207.0/24 maxlen: 24
194.126.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Sep 2024 08:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5b:60:a4:9e:32:0e:a8:be:39:5a:95:bc:65:f8:18:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Validity
Not Before: Jun 27 20:26:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84c54294712bbcd3ba6cfcce05938d3085456f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6b:21:26:2c:ed:8b:7a:6d:ba:d1:a0:78:48:
dd:16:92:01:58:b0:b8:60:f0:d9:c3:55:0c:dd:0d:
84:89:c9:b6:2c:17:46:9c:08:af:7f:41:dc:6d:95:
dd:0c:eb:4d:1a:88:aa:3e:15:c4:f0:a5:9d:2c:84:
2d:e8:a3:fd:a3:07:47:eb:ff:e0:f8:5a:3d:91:ba:
f4:8a:d6:4f:d8:89:ce:af:ad:42:58:f6:5f:e4:d4:
be:72:6d:c9:4b:88:5c:e4:27:bd:3b:2d:07:ec:24:
7a:f0:aa:1e:00:44:9b:3c:3a:e7:7b:b2:ca:e7:86:
90:a2:45:a5:4a:03:68:53:0e:40:81:5c:89:9e:d1:
80:5c:82:c8:41:87:a0:88:23:af:25:02:8e:be:fd:
9b:77:3a:7c:28:40:ce:f4:d8:01:30:0a:67:ef:b3:
ad:32:6d:e6:f9:20:2d:50:66:a3:9e:ec:99:da:d1:
16:e9:bf:a7:bc:b2:de:f7:e4:41:b4:74:57:82:84:
c4:42:b9:ac:c5:3f:87:2b:9b:93:8c:09:6e:3e:db:
e7:0d:5d:f3:c3:8f:f2:df:ef:d8:95:90:54:c1:b3:
c1:c4:4a:68:38:1e:0d:21:ff:c4:51:5c:7b:b4:61:
be:8e:69:9c:22:8e:82:80:44:37:ec:06:3a:02:b2:
c3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C5:42:94:71:2B:BC:D3:BA:6C:FC:CE:05:93:8D:30:85:45:6F:8E
X509v3 Authority Key Identifier:
keyid:20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/hMVClHErvNO6bPzOBZONMIVFb44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.138.0/24
146.255.190.0/24
185.75.36.0/22
193.29.207.0/24
194.126.238.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:3e:5d:43:0d:d1:8d:f5:2e:02:d6:bf:dc:77:ac:c8:31:19:
08:31:86:b8:b6:9b:8b:21:d0:08:dd:f2:ec:b3:86:f8:c5:d0:
d8:a7:91:67:ae:6e:10:58:43:17:af:fe:9e:85:36:33:3e:02:
e7:73:77:48:21:7b:89:3d:65:e5:28:27:ef:b9:f5:ed:63:98:
2b:b9:f2:7c:5e:8a:16:c1:31:1d:fb:76:a2:94:e3:84:f8:a4:
5b:90:ae:21:f1:da:f3:f5:a2:5c:66:20:53:85:d3:37:97:d2:
5e:b2:4a:91:4d:69:fc:83:66:b6:d5:26:9d:52:5d:19:a2:a2:
b6:d2:3c:f0:f1:92:35:b7:bd:a7:67:8a:b7:11:2a:b0:a9:d7:
88:0f:3c:43:c3:9c:f3:4d:07:98:b6:66:b9:cb:65:80:07:7d:
57:d5:13:bd:5c:11:a7:40:f5:48:6b:27:89:6f:96:30:6c:b6:
2b:fc:1c:40:46:70:68:eb:29:65:4d:55:d1:21:66:e4:bf:8d:
0d:10:34:4b:ab:54:e6:17:2f:b7:0d:72:fc:65:c1:e1:9e:68:
9d:30:a8:17:46:6c:fe:37:96:a7:a3:15:94:17:20:7c:4e:c9:
59:60:be:0f:a7:a6:ea:54:83:76:64:cf:42:ff:57:35:9a:ab:
c3:e5:f4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 10:36:07 2024 by rpki-client on console-fra.rpki-client.org