Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/MgeATdyM2BT_Wb6ZJkG0X1BBV7g.roa
File: MgeATdyM2BT_Wb6ZJkG0X1BBV7g.roa (raw, json)
Hash identifier: D6n9ftU/UwWZvWKL6sFgOv4n5k5Lf6S96ZCgTp+0s6E=
Subject key identifier: 32:07:80:4D:DC:8C:D8:14:FF:59:BE:99:26:41:B4:5F:50:41:57:B8
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0191B207370373C03A8D0818F09E38950514
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/MgeATdyM2BT_Wb6ZJkG0X1BBV7g.roa
Signing time: Mon 02 Sep 2024 09:18:22 +0000
ROA not before: Mon 02 Sep 2024 09:18:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 217.180.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 11:08:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:07:37:03:73:c0:3a:8d:08:18:f0:9e:38:95:05:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Sep 2 09:18:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3207804ddc8cd814ff59be992641b45f504157b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:d7:f6:b2:c2:78:78:44:57:e2:59:bc:36:
76:86:13:5d:85:1d:bd:bc:c4:aa:a4:dd:3b:79:c0:
ff:20:06:87:c6:53:c1:fd:a7:78:af:14:f8:55:50:
7e:64:b9:f2:a7:34:ea:28:b8:c0:02:4c:17:c8:cd:
62:fd:94:9e:65:79:9b:11:20:3f:01:2e:a6:f1:af:
53:07:bf:12:4c:a4:b1:d1:21:7e:55:8a:8f:f4:d8:
5a:10:86:38:ac:27:92:38:b1:f1:60:91:61:18:e4:
50:a1:63:10:8e:13:cf:a2:ac:7d:92:3c:9f:e6:8f:
88:b3:6a:00:cf:25:ac:73:5c:12:19:a3:5c:17:0a:
3b:c3:55:3b:26:67:ab:bd:a6:8f:9d:1c:b8:b7:d3:
d0:36:ae:92:37:71:3b:af:d6:f7:cc:12:d8:6b:91:
57:a1:1a:fd:ee:a6:09:74:e9:84:b0:2e:ca:d6:1a:
eb:9f:ab:ae:df:8e:52:bd:5c:ff:a8:93:fe:c6:1f:
43:8e:60:31:be:2d:98:d6:8a:22:69:83:06:83:74:
e6:5c:75:95:81:17:df:51:02:03:7c:ba:94:4c:dd:
9e:06:5b:10:5f:8c:57:fe:e3:de:a2:ea:80:8e:ea:
a0:a2:e2:53:5b:4a:ee:a8:ea:8e:7c:83:2b:19:d5:
94:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:07:80:4D:DC:8C:D8:14:FF:59:BE:99:26:41:B4:5F:50:41:57:B8
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/MgeATdyM2BT_Wb6ZJkG0X1BBV7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.180.14.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:dd:ce:57:7f:ac:8a:51:6f:7a:68:70:1a:9d:c7:31:1f:23:
57:e9:30:e5:14:88:cd:48:ab:95:e5:ea:94:57:19:ba:cc:f7:
62:01:0e:39:fc:07:6f:a5:0d:0d:d0:8a:f1:3c:0f:ef:81:93:
96:76:de:93:83:68:27:42:46:e4:97:68:29:63:0f:0b:f3:5a:
a4:4d:b0:01:6d:ef:03:1c:01:8f:08:d6:63:44:72:a8:7c:a7:
90:e5:58:05:68:01:de:d2:40:04:ce:29:bb:9b:bd:ff:62:7f:
2d:f9:df:8a:0c:93:30:e5:69:47:54:d7:76:b4:e0:d0:f2:2a:
9a:69:40:1b:5b:20:54:0f:7f:49:84:0c:0b:33:a1:22:a6:cd:
ef:2e:b4:db:76:95:f0:2d:95:4a:c0:6f:0d:8f:e2:4e:9c:ae:
1d:a9:44:7e:b6:ca:4e:46:41:cb:a6:f5:03:12:24:7b:61:e1:
cb:52:71:f9:aa:a8:38:84:e0:7f:5e:9a:58:ad:5b:d0:25:c0:
fc:52:8b:85:1c:3a:81:68:5e:4c:47:88:10:da:ce:a5:8f:f9:
69:4a:78:ad:e6:19:73:cd:43:2d:51:b6:78:58:08:fb:2d:58:
21:54:d0:4c:ee:d0:d9:c8:bd:be:4e:90:e5:9e:35:72:e3:8f:
ec:b9:e3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 12:52:46 2024 by rpki-client on console-fra.rpki-client.org