Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/nEXEuY4G3D3idv0G6x4_MoboZLo.roa
File: nEXEuY4G3D3idv0G6x4_MoboZLo.roa (raw, json)
Hash identifier: GvdBOxVDHZGoPl41JJI1kmbKSnfUz6wdaRMQ4zj7EwU=
Subject key identifier: 9C:45:C4:B9:8E:06:DC:3D:E2:76:FD:06:EB:1E:3F:32:86:E8:64:BA
Certificate issuer: /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial: 0188C57513A59A8A06CE823FAE5C2AD56AA2
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/nEXEuY4G3D3idv0G6x4_MoboZLo.roa
Signing time: Fri 16 Jun 2023 18:26:04 +0000
ROA not before: Fri 16 Jun 2023 18:26:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 151.186.192.0/20 maxlen: 24
2a04:e4c4:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 Jun 2023 18:32:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c5:75:13:a5:9a:8a:06:ce:82:3f:ae:5c:2a:d5:6a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Validity
Not Before: Jun 16 18:26:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c45c4b98e06dc3de276fd06eb1e3f3286e864ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:73:c3:30:09:bd:d7:81:d9:15:42:46:52:92:
98:40:fb:c8:64:e4:33:42:15:ae:cc:1c:e0:88:57:
f2:16:7e:36:ee:6b:0d:8a:a4:6a:63:0b:4c:a6:8d:
30:eb:c8:11:1e:03:9e:02:52:37:b7:15:29:68:cc:
5b:4c:00:66:77:a2:70:ca:51:6d:6e:f4:6b:a9:d5:
a3:ab:f1:55:47:37:8e:e9:c7:23:0a:e1:5f:d9:a9:
a7:98:9d:b5:e1:ef:69:31:4d:55:0e:d3:17:1c:39:
4a:1a:ad:05:7b:24:ad:d9:cd:6d:b9:06:24:6a:13:
d1:3d:cc:be:9b:0f:f5:ad:eb:9f:d1:9b:21:70:a5:
4e:fe:6c:3f:a9:8d:2f:c4:43:af:bd:06:27:5a:d0:
43:00:22:82:d8:ec:a0:22:d6:2a:64:2e:04:fe:b1:
b3:d1:6d:7a:e4:47:bd:8e:9b:b8:b2:d2:cd:43:e5:
ab:c3:69:38:83:5c:9a:19:6b:96:a0:26:76:44:61:
07:37:74:03:e7:65:e5:0c:ca:0d:b8:2f:2d:d3:d8:
aa:9f:10:08:8e:98:9c:be:0d:6e:83:60:f2:d7:9b:
c3:fa:c7:a2:6d:89:5a:53:4b:b1:9c:4e:5f:21:7e:
bf:fd:7f:66:ee:4b:3d:45:8a:44:b3:5a:34:98:8a:
60:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:45:C4:B9:8E:06:DC:3D:E2:76:FD:06:EB:1E:3F:32:86:E8:64:BA
X509v3 Authority Key Identifier:
keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/nEXEuY4G3D3idv0G6x4_MoboZLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.186.192.0/20
IPv6:
2a04:e4c4:5::/48
Signature Algorithm: sha256WithRSAEncryption
b3:96:df:d1:1b:ff:0b:31:b6:96:25:78:1d:01:01:a9:75:97:
90:d5:9b:21:9a:6e:44:34:0a:0a:a8:bc:99:f3:81:32:50:c9:
97:7b:41:ad:ba:49:b1:06:b8:3b:18:c1:41:d5:af:5b:e5:c7:
f9:16:0a:70:c4:ce:87:e8:74:ff:f6:74:ae:2d:d6:31:86:a3:
05:a7:b3:26:95:fd:37:7f:b5:11:1c:b2:fc:b9:ef:10:56:11:
4b:a9:55:27:4f:48:40:a9:af:e9:b1:8a:fd:f7:7e:c7:8c:7b:
20:cd:82:1e:13:9c:98:41:b8:2f:6c:59:b3:28:b9:22:03:ee:
10:8b:29:bf:b1:74:43:88:31:8b:57:4f:34:44:28:b6:3c:1b:
0b:23:c6:f6:86:bb:07:07:d4:29:00:f7:d3:11:b0:e0:2f:38:
38:49:cc:d4:8c:73:33:1a:f8:6f:8e:8e:1e:9e:79:b0:e4:10:
81:97:aa:f7:9e:9c:95:89:10:00:bc:9f:86:5a:e0:c2:c5:ca:
c7:41:ee:18:a6:ae:09:ce:19:b9:29:59:3a:d9:22:7d:c7:39:
23:72:0d:4f:fc:b5:f3:1d:2d:e8:bf:a1:5e:bf:0b:6c:9c:60:
c2:a5:1c:92:b1:af:71:fe:b0:92:7b:d3:0d:75:29:d0:9e:2e:
fe:92:16:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:55 2024 by rpki-client on console-ams.rpki-client.org