Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/mTKe9K2LoPM-KinIKaLNwIcgFYs.roa
File: mTKe9K2LoPM-KinIKaLNwIcgFYs.roa (raw, json)
Hash identifier: /kH266VkhpZxV+9SmywZK5mi6xmHHljcjI765VSOxxM=
Subject key identifier: 99:32:9E:F4:AD:8B:A0:F3:3E:2A:29:C8:29:A2:CD:C0:87:20:15:8B
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEBA1F135CB0F48B09AB7402A8215C
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/mTKe9K2LoPM-KinIKaLNwIcgFYs.roa
Signing time: Sun 01 Jan 2023 06:04:45 +0000
ROA not before: Sun 01 Jan 2023 06:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41398
IP address blocks: 93.159.58.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:ba:1f:13:5c:b0:f4:8b:09:ab:74:02:a8:21:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99329ef4ad8ba0f33e2a29c829a2cdc08720158b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:06:47:3c:ba:69:9b:b8:b4:fc:a5:fb:44:13:
98:75:88:52:51:24:a2:02:2f:56:fd:6c:76:71:f6:
23:01:7b:e3:ce:fc:5b:8d:e1:7d:67:cc:df:57:4e:
1e:b1:75:e2:c3:87:b8:20:7a:70:78:46:03:ea:59:
8e:5b:14:5d:d5:c0:4a:8b:db:1f:ad:d0:24:e2:86:
0b:58:9f:ac:2a:13:4c:4d:b4:26:95:cb:64:a9:5a:
b4:dd:02:fd:52:5a:fa:35:7e:53:7a:a8:e8:c0:7c:
b0:79:34:32:3b:60:3f:01:b7:10:3e:ec:e6:2a:c3:
5e:c7:38:64:4c:ac:d7:d4:9d:ad:4f:04:37:77:25:
fd:bc:79:7d:ff:59:fd:72:c9:5d:49:0a:e9:8b:ce:
48:53:f4:87:e4:3f:7c:61:7c:71:b3:76:de:1c:d0:
35:4c:9d:88:4b:c5:8a:68:ec:ed:44:50:71:08:4d:
03:ef:2f:78:1b:9e:73:90:b0:bd:19:38:64:81:d0:
6f:ea:94:0f:d6:84:07:0b:62:cf:d4:3b:0a:0b:88:
2f:43:8a:a6:9f:b4:63:b3:e6:16:20:d2:05:c0:74:
f2:44:93:dd:ba:a4:2b:0e:cf:6d:22:fb:3b:fc:14:
23:e3:63:e7:7a:33:8b:b1:2d:36:ae:0a:f1:21:92:
ee:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:32:9E:F4:AD:8B:A0:F3:3E:2A:29:C8:29:A2:CD:C0:87:20:15:8B
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/mTKe9K2LoPM-KinIKaLNwIcgFYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.58.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:39:ef:01:45:ad:4a:98:56:be:6b:68:af:fc:5d:d9:e9:b4:
92:84:c1:56:3e:0e:c6:0e:02:6c:62:38:51:05:4a:0e:0c:15:
b2:3d:71:41:7d:f0:a7:c7:a3:49:c5:62:f3:80:1e:41:12:4f:
44:a5:8f:ad:aa:3b:f4:f0:55:ac:89:a9:33:42:31:03:f8:3b:
e9:4c:16:d1:88:d3:fc:95:01:c8:d4:65:a6:ca:37:db:50:85:
37:4d:e7:0e:b8:7b:8a:8a:6d:b4:d2:2f:61:e1:03:7f:f9:51:
00:9d:01:a9:a3:a3:74:e3:76:35:e9:dc:5c:d1:a1:53:06:ae:
17:66:53:c2:81:36:92:8a:eb:1b:31:51:ac:6c:cd:b9:9f:86:
b2:aa:42:46:ee:4f:bd:a6:17:cb:44:2e:e5:eb:ac:ea:c9:52:
41:1a:c7:76:45:fa:16:f8:ed:65:9d:ea:7e:fe:18:8d:0a:aa:
18:30:c9:6c:05:4b:2c:1b:9d:43:47:97:6f:5b:0a:59:60:75:
57:3d:9e:15:c8:4d:25:52:ee:96:a8:fc:da:73:f9:cb:7b:3f:
b5:24:01:25:ec:27:f4:b7:68:0d:6b:31:c4:36:96:1e:36:8a:
c4:0c:10:63:bd:d7:6a:b8:9a:76:51:55:17:cc:f5:40:8b:22:
15:ed:71:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org