Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/mGoz0-2Jjr_UASWDBaoHYQ2x2xs.roa
File: mGoz0-2Jjr_UASWDBaoHYQ2x2xs.roa (raw, json)
Hash identifier: Zg3WXXbClvd2ZwKRchWeLrA7PYlT7coGJ7fAnqarzFM=
Subject key identifier: 98:6A:33:D3:ED:89:8E:BF:D4:01:25:83:05:AA:07:61:0D:B1:DB:1B
Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial: 018A1C6FBFD8C51807EAC5826E2F1CF8A4DC
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/mGoz0-2Jjr_UASWDBaoHYQ2x2xs.roa
Signing time: Tue 22 Aug 2023 08:50:00 +0000
ROA not before: Tue 22 Aug 2023 08:50:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 194.29.58.0/24 maxlen: 24
194.29.57.0/24 maxlen: 24
194.29.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Oct 2023 22:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1c:6f:bf:d8:c5:18:07:ea:c5:82:6e:2f:1c:f8:a4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Validity
Not Before: Aug 22 08:50:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=986a33d3ed898ebfd401258305aa07610db1db1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:0e:31:16:8f:46:08:6e:20:60:6c:20:2c:
89:52:15:6d:36:ec:1b:e3:e4:08:b1:6d:cb:bc:3d:
c2:75:f3:1c:1f:27:32:fa:16:17:dc:40:ea:a8:88:
9a:42:df:08:a3:80:33:a0:e1:2d:ef:b9:33:31:9d:
5a:c1:67:d7:34:93:3d:62:db:53:2d:cd:bd:a7:0e:
ef:7d:0e:79:70:aa:38:38:40:e8:4e:67:a4:1d:41:
df:fc:34:78:47:78:ba:a0:8c:56:2c:ca:3f:5a:ba:
ab:99:cc:eb:aa:74:30:2d:14:ae:c9:ef:7d:52:13:
48:f0:41:87:a8:a9:9b:67:f0:40:3c:1d:9d:66:dc:
16:bc:00:81:03:0d:24:48:af:1d:a2:a4:74:4e:dc:
d4:4a:1d:c8:24:09:50:1f:42:69:bb:f9:f1:e3:f0:
cf:56:e0:95:a2:97:af:39:d0:ea:49:56:5b:26:92:
32:37:0a:19:0d:a4:00:be:72:5a:c5:2d:96:05:9a:
be:f1:77:4b:55:98:75:8e:0e:fc:65:6f:0a:89:13:
6c:f6:42:52:90:77:66:5b:74:30:35:b3:ad:ea:70:
69:55:6d:02:0b:32:89:36:2b:5e:2b:e4:62:b2:cd:
ef:9f:c0:84:69:96:d4:9b:4b:be:fe:16:c9:3a:56:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6A:33:D3:ED:89:8E:BF:D4:01:25:83:05:AA:07:61:0D:B1:DB:1B
X509v3 Authority Key Identifier:
keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/mGoz0-2Jjr_UASWDBaoHYQ2x2xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.29.56.0-194.29.58.255
Signature Algorithm: sha256WithRSAEncryption
0b:1e:76:dc:3c:93:7d:fd:7d:95:34:81:9d:fd:3a:cf:26:bb:
c7:01:a8:9a:32:10:f3:9d:df:b1:34:73:96:68:41:13:eb:b7:
51:25:17:6d:8b:1d:c5:c1:ac:5b:1e:e1:46:18:f7:6d:8a:b4:
1e:d1:b4:2b:0c:af:99:05:10:6a:ef:0a:36:c9:4e:6a:ae:4f:
6b:91:87:e1:99:26:29:ab:55:75:79:95:ba:f6:c3:6a:45:8a:
a1:05:75:ff:63:59:99:cc:48:a3:20:a0:cd:9c:44:fd:cc:5d:
4b:dd:e1:22:ac:9f:64:b5:38:5e:d0:59:cc:84:03:60:da:89:
c2:2e:1f:72:2e:68:16:e9:17:3a:bc:70:dc:85:a7:a5:9f:ea:
77:06:0c:a3:36:15:c2:f9:13:c8:2d:45:94:3f:14:76:d6:67:
a8:25:dc:0f:50:24:f6:a2:bb:d2:4d:c1:06:c9:e3:14:bc:4e:
11:94:f5:20:16:17:6f:ee:34:85:b0:56:8a:7e:d8:2e:ab:1d:
3b:5e:46:63:ad:06:3d:65:8f:1b:94:ca:c6:11:b9:87:47:61:
b1:1a:30:41:67:71:00:cc:4f:a0:dd:f1:71:93:b9:67:63:9d:
36:8d:d8:90:e1:a6:80:7d:cf:6c:8c:23:0e:56:f3:47:ac:46:
5a:8a:17:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:45 2024 by rpki-client on console-fra.rpki-client.org