Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/MNZnNP6LWdBM-oSFOL_ccaqul9k.roa
File: MNZnNP6LWdBM-oSFOL_ccaqul9k.roa (raw, json)
Hash identifier: v64p0pUkFRhg+DQ1vde/kEqjBpEO+ADbx7tlqT4ve+g=
Subject key identifier: 30:D6:67:34:FE:8B:59:D0:4C:FA:84:85:38:BF:DC:71:AA:AE:97:D9
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 0192D367EF0814D2B26EB935993BFB8EF80D
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/MNZnNP6LWdBM-oSFOL_ccaqul9k.roa
Signing time: Mon 28 Oct 2024 13:54:16 +0000
ROA not before: Mon 28 Oct 2024 13:54:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57811
IP address blocks: 185.73.211.0/24 maxlen: 24
188.64.80.0/23 maxlen: 23
188.64.82.0/24 maxlen: 24
188.64.83.0/24 maxlen: 24
188.64.84.0/24 maxlen: 24
188.64.85.0/24 maxlen: 24
188.64.86.0/24 maxlen: 24
188.64.87.0/24 maxlen: 24
2a00:8dc0::/32 maxlen: 48
2a00:8dc0::/40 maxlen: 40
2a00:8dc0:1000::/40 maxlen: 40
2a00:8dc0:1100::/40 maxlen: 40
2a00:8dc0:1200::/40 maxlen: 40
2a00:8dc0:1300::/40 maxlen: 40
2a00:8dc0:1400::/40 maxlen: 40
2a00:8dc0:1500::/40 maxlen: 40
2a00:8dc0:1600::/40 maxlen: 40
2a00:8dc0:b000::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 30 Oct 2024 09:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d3:67:ef:08:14:d2:b2:6e:b9:35:99:3b:fb:8e:f8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Oct 28 13:54:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30d66734fe8b59d04cfa848538bfdc71aaae97d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:de:93:b3:8f:95:74:ca:a1:5f:20:46:94:
cd:a2:ff:bf:e2:e5:f9:d2:68:7a:fe:6c:07:8c:e5:
5e:8c:d8:a2:91:23:07:3b:4d:1a:7c:4f:0e:0d:8f:
ee:ab:ef:d9:95:05:7b:2b:bb:ac:7f:a9:b3:87:86:
41:4f:f6:3a:68:8d:3b:19:50:86:d3:f0:76:bd:41:
24:4f:17:40:0a:8b:01:d1:aa:13:06:36:ad:45:33:
87:ce:d9:33:89:f3:9a:f1:b5:dc:6e:f7:4d:04:bf:
29:af:4a:d5:e9:75:b8:0c:e4:e1:95:e8:5c:03:7e:
03:b7:ab:ef:09:d3:c9:6f:1f:96:28:99:5b:1b:63:
6d:98:e9:91:2c:1f:ce:ce:1f:83:42:67:0a:50:00:
ed:90:f1:f9:77:a0:3f:2c:d0:e1:b0:c5:78:b4:6b:
88:04:ce:eb:70:69:72:e5:3c:62:6b:5e:c1:e0:56:
64:8f:ab:fc:e5:7c:dd:a8:ff:1f:39:b2:25:1f:fe:
0f:1c:a8:7f:79:cd:e2:e9:d2:03:93:7d:de:ed:9c:
cc:b4:4b:89:88:2b:f6:e9:22:fa:ba:a8:04:a6:1c:
3e:68:79:f0:ea:75:f8:d6:a9:76:e0:5b:ca:d0:51:
3e:48:0f:38:3c:11:e7:a7:35:db:6f:26:5e:69:7c:
e0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D6:67:34:FE:8B:59:D0:4C:FA:84:85:38:BF:DC:71:AA:AE:97:D9
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/MNZnNP6LWdBM-oSFOL_ccaqul9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.211.0/24
188.64.80.0/21
IPv6:
2a00:8dc0::/32
Signature Algorithm: sha256WithRSAEncryption
3c:19:e8:8d:9c:02:e7:19:7a:33:6f:bd:35:1e:7a:d1:1b:bd:
d4:85:5b:03:82:bb:1c:c1:ec:54:fb:5a:23:a2:73:f3:75:47:
fd:fa:e0:b5:70:93:8a:27:48:ba:2d:11:1b:21:31:5f:12:c8:
6f:97:4f:c1:02:64:1a:f0:4f:c9:04:f4:48:c9:05:c0:16:ea:
c2:c0:f8:b9:72:87:f3:68:aa:c0:b2:32:c7:f2:06:44:67:17:
ce:9a:41:04:f9:49:cd:e3:57:95:f6:55:05:5f:fb:50:21:3c:
b1:cb:f8:de:47:5a:ba:04:34:a8:7f:25:4c:a8:19:f1:ed:90:
a6:3c:82:d7:03:5b:cb:43:7f:39:c1:0e:f3:fb:a6:94:61:88:
11:d7:b4:55:7d:5c:fc:bb:6e:50:3b:7d:21:eb:de:fd:46:2b:
36:2e:05:c5:e7:57:2b:25:98:30:3f:e2:c8:f2:6d:91:c1:c9:
64:ba:9b:5e:56:42:8f:51:61:6b:c1:bc:68:eb:e9:af:b7:ec:
ad:1e:bb:c6:cd:03:54:7d:54:d9:77:53:df:5f:81:03:a9:18:
7d:57:42:cb:29:fb:6b:36:f4:fd:0a:59:f7:f9:1d:ab:5d:b9:
bc:29:1a:79:cf:c6:99:d5:d1:82:f3:7e:35:0e:af:23:80:c6:
2e:d4:b8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:57:41 2025 by rpki-client