Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/mMR5rstQG1_UNw6_GzBSfZ_UYYA.roa
File: mMR5rstQG1_UNw6_GzBSfZ_UYYA.roa (raw, json)
Hash identifier: yM11b9voOSoVSNyDWUxMlb/BzvoHHjnqE4bLxm44EfU=
Subject key identifier: 98:C4:79:AE:CB:50:1B:5F:D4:37:0E:BF:1B:30:52:7D:9F:D4:61:80
Certificate issuer: /CN=c47a8f5e9491f61bd281925380a951cf7f40b2c6
Certificate serial: 01856EB8E61482881AA5CD204EEBD9B8F6A1
Authority key identifier: C4:7A:8F:5E:94:91:F6:1B:D2:81:92:53:80:A9:51:CF:7F:40:B2:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHqPXpSR9hvSgZJTgKlRz39AssY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/mMR5rstQG1_UNw6_GzBSfZ_UYYA.roa
Signing time: Sun 01 Jan 2023 19:04:49 +0000
ROA not before: Sun 01 Jan 2023 19:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61163
IP address blocks: 94.158.176.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:e6:14:82:88:1a:a5:cd:20:4e:eb:d9:b8:f6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c47a8f5e9491f61bd281925380a951cf7f40b2c6
Validity
Not Before: Jan 1 19:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98c479aecb501b5fd4370ebf1b30527d9fd46180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cc:a7:e0:dd:a9:65:dd:b9:3b:ae:3f:0a:9b:
e9:68:fb:3b:39:19:da:49:19:2b:59:52:2d:a1:e4:
ff:7a:da:12:60:75:c7:7c:cb:3e:a1:1a:9d:fc:60:
6c:a8:44:76:00:7d:9b:d5:53:22:40:1a:32:d5:ab:
d3:27:1e:53:96:ac:b7:50:ea:0a:6d:f3:31:0c:35:
c6:6d:52:ec:04:81:e8:d3:fe:86:89:9a:b2:05:74:
13:c7:83:db:dd:97:53:e0:8b:51:0a:8a:b7:a9:f1:
2f:63:ba:7b:2e:f9:34:60:45:92:d1:1b:47:30:47:
17:4a:77:1e:b3:8a:bb:66:dd:8d:4c:4d:03:05:e6:
cd:da:53:b2:91:57:9d:51:17:ff:46:cd:d1:55:41:
fe:d7:49:2d:fd:18:3d:8e:f8:c5:4d:1d:86:93:45:
48:5c:09:e2:47:72:51:d2:3c:91:2c:2b:20:73:f6:
8a:8b:ac:bc:d0:bc:cb:98:19:2d:59:fb:95:96:a5:
c4:c7:b2:63:98:df:32:0b:c8:5f:f9:51:ef:c2:48:
1a:06:f9:62:ff:bb:59:d5:d1:5a:eb:3c:45:49:f0:
8c:66:6f:0f:5b:03:34:7b:13:33:97:41:55:76:ee:
91:d3:38:7e:35:3f:8c:fd:58:fc:1b:ad:57:95:72:
e9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C4:79:AE:CB:50:1B:5F:D4:37:0E:BF:1B:30:52:7D:9F:D4:61:80
X509v3 Authority Key Identifier:
keyid:C4:7A:8F:5E:94:91:F6:1B:D2:81:92:53:80:A9:51:CF:7F:40:B2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHqPXpSR9hvSgZJTgKlRz39AssY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/mMR5rstQG1_UNw6_GzBSfZ_UYYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/xHqPXpSR9hvSgZJTgKlRz39AssY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.176.0/22
Signature Algorithm: sha256WithRSAEncryption
94:b2:c1:ce:b6:9f:d6:79:ca:14:fd:6e:a7:a5:d9:d1:01:43:
a7:40:2b:35:9a:b5:b3:3e:17:b0:66:d0:42:bc:0e:7b:54:c1:
f0:5e:11:32:93:8b:7d:7b:a9:11:1f:4f:c5:1d:06:9f:c9:70:
69:f2:37:13:3f:da:ab:ba:cb:c4:bc:7d:41:50:35:29:96:b2:
6d:8a:8d:1d:62:65:3d:55:7b:61:42:53:3e:6b:c1:02:d0:ee:
2b:41:08:e4:28:35:1a:17:29:52:f4:b2:77:34:4f:57:85:21:
c9:a3:ec:42:f6:3a:b3:7b:37:f4:ee:99:ac:76:67:c6:1b:3c:
84:9d:6f:0d:0b:0c:50:31:7b:72:12:72:1c:18:f0:ff:e8:0f:
24:ec:9a:5c:9a:66:a0:f0:4c:b4:c7:db:81:e1:e6:a2:1c:10:
dd:72:d6:1f:87:9d:11:f1:39:d1:2d:0d:dc:f4:55:4a:19:fd:
b3:d0:2d:83:08:3b:56:97:00:c7:ed:c5:c0:b6:65:10:ca:0f:
0f:71:67:ee:9b:08:20:8f:9d:e8:49:00:a2:90:be:19:2f:85:
50:28:36:b8:04:d2:f3:87:f6:e6:57:67:a9:34:ba:e1:c6:3b:
a4:00:79:57:9c:94:cb:a1:70:f9:2e:a1:c7:31:76:e2:84:95:
0f:c2:f0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:57 2024 by rpki-client on console-ams.rpki-client.org