Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/mgPqo6UMSTpJzEJ_YqeV_uMgP30.roa
File: mgPqo6UMSTpJzEJ_YqeV_uMgP30.roa (raw, json)
Hash identifier: oqPuv5HdHm4kgOOIQFIW7nQEWuS9BpL9eCmftebnASI=
Subject key identifier: 9A:03:EA:A3:A5:0C:49:3A:49:CC:42:7F:62:A7:95:FE:E3:20:3F:7D
Certificate issuer: /CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Certificate serial: 0189E064EF524B7BAA67C540263ECC47289E
Authority key identifier: 35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/mgPqo6UMSTpJzEJ_YqeV_uMgP30.roa
Signing time: Thu 10 Aug 2023 17:00:58 +0000
ROA not before: Thu 10 Aug 2023 17:00:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197450
IP address blocks: 46.31.78.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e0:64:ef:52:4b:7b:aa:67:c5:40:26:3e:cc:47:28:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Validity
Not Before: Aug 10 17:00:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a03eaa3a50c493a49cc427f62a795fee3203f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:49:56:7e:32:f0:2c:e4:d8:5b:4f:8f:f6:e0:
9e:b4:dc:04:55:0b:db:78:a1:d6:db:9f:88:07:1a:
92:2b:7e:e0:4e:be:1d:55:cd:a6:c6:45:1b:ca:f8:
66:3f:66:c3:bc:99:b1:de:2b:25:e7:65:be:9a:00:
de:55:46:24:e7:f1:8e:e3:12:b8:13:4f:a2:8e:1c:
66:19:80:b4:62:ff:be:65:f7:cc:bc:a5:c7:c1:37:
b7:da:06:73:0e:80:62:7f:43:3f:ba:8a:fe:f7:a9:
ee:48:c8:f5:82:f7:bd:19:ad:ca:0a:73:7e:44:7c:
0c:e4:bc:84:44:e8:d9:66:7a:02:ed:c0:76:b2:26:
a8:e3:78:cf:77:78:54:a0:91:c8:c6:27:a8:4d:c9:
06:77:80:46:26:09:31:1c:4f:df:ef:7c:ad:fa:83:
8a:f0:01:d2:5b:bf:86:71:9a:4a:0a:20:34:c6:66:
8c:b7:5f:91:93:a4:a1:29:88:b0:e2:c9:b7:8e:67:
e0:87:62:f5:c4:bd:83:c8:53:cf:d3:a2:84:0e:0a:
2d:61:68:36:f3:3a:a5:32:c8:48:9c:a2:23:7e:0a:
fd:46:b7:28:4f:80:e5:0f:99:ef:15:db:8d:34:07:
81:d2:e0:eb:49:f0:90:d5:dc:1b:4a:8e:07:c1:98:
f7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:03:EA:A3:A5:0C:49:3A:49:CC:42:7F:62:A7:95:FE:E3:20:3F:7D
X509v3 Authority Key Identifier:
keyid:35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/mgPqo6UMSTpJzEJ_YqeV_uMgP30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.78.0/24
Signature Algorithm: sha256WithRSAEncryption
43:fc:b1:a7:7e:b1:30:c1:5f:f3:ba:8f:78:92:97:4e:f7:e1:
d7:b1:45:78:c9:65:80:9b:e3:29:22:87:0a:46:c8:c6:65:be:
dc:99:92:9d:b6:74:62:99:8c:2a:1f:c9:c1:df:21:08:d4:02:
84:c3:91:bb:d6:b6:03:07:ce:c2:74:f2:cb:1c:b6:f4:88:b6:
1c:68:0c:cc:35:65:91:85:92:25:d3:4d:b3:21:96:26:e6:24:
6e:a6:4f:8d:c0:ae:91:af:94:30:31:3d:25:8e:ed:36:16:ca:
c4:d3:18:0b:e0:bd:49:21:e8:a8:3c:76:f6:e4:52:b7:c6:2a:
6c:23:94:d8:28:b0:e2:7e:c4:ac:8e:a2:b3:b1:de:a5:46:c0:
17:8a:3f:93:b5:7a:4f:d2:53:d6:61:00:4a:6e:6c:82:b1:d7:
53:96:91:de:69:b1:6f:b9:e0:64:4f:28:6c:b9:65:e3:35:29:
84:ca:2a:18:dc:92:a2:6b:eb:02:57:c4:5e:21:33:61:94:3d:
2e:18:dc:da:be:08:99:7f:cb:89:c8:d8:de:de:3d:c5:d9:24:
eb:f3:a2:b2:8f:1a:0d:5f:d7:36:02:30:09:33:1c:8d:71:0a:
5e:ff:1c:8c:d9:3b:3f:5a:9e:2a:57:c8:e0:ae:69:c1:72:6e:
8b:fa:dd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-fra.rpki-client.org