Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/mMSPyMbDGMlKhfb_cXrsq99S-OM.roa
File: mMSPyMbDGMlKhfb_cXrsq99S-OM.roa (raw, json)
Hash identifier: Ga+qhTSv9koDY/T5fxKSKXLWH70/7HhSnIvtdkWxgos=
Subject key identifier: 98:C4:8F:C8:C6:C3:18:C9:4A:85:F6:FF:71:7A:EC:AB:DF:52:F8:E3
Certificate issuer: /CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Certificate serial: 018570CBF049878887BB1CE27E1B0466633E
Authority key identifier: D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/mMSPyMbDGMlKhfb_cXrsq99S-OM.roa
Signing time: Mon 02 Jan 2023 04:44:51 +0000
ROA not before: Mon 02 Jan 2023 04:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48173
IP address blocks: 193.101.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:f0:49:87:88:87:bb:1c:e2:7e:1b:04:66:63:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Validity
Not Before: Jan 2 04:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98c48fc8c6c318c94a85f6ff717aecabdf52f8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:39:f3:a3:74:d5:c3:63:1b:1b:8b:d0:16:d2:
a7:09:a9:dc:03:d8:7e:32:ae:4d:ff:66:c8:33:05:
44:00:d8:1b:2a:9c:9b:0f:3e:03:8a:62:cb:1a:e4:
8e:16:f8:1b:ee:d1:3f:9c:b8:35:73:0f:34:8f:51:
5b:3b:4b:99:2a:9f:61:0a:a8:74:f0:45:63:6d:63:
30:ee:8f:a1:93:9c:59:5e:98:71:c3:4e:22:e3:f8:
08:4b:d1:44:56:04:34:fe:cf:cd:bd:8f:9e:86:c7:
a3:a9:42:30:09:ae:cf:d8:7f:5e:8b:c1:0a:0a:f9:
95:36:48:71:1c:5f:71:ec:e6:67:a0:6a:df:8f:d0:
5c:5e:31:6b:c5:a0:7a:bd:ee:e0:02:b0:d3:96:e6:
64:0a:d6:6f:67:37:fe:6b:a7:7f:85:f5:2b:f3:48:
37:48:5d:88:c1:8c:70:65:8d:de:b0:05:8c:d8:43:
bd:79:89:c6:29:50:35:60:6f:a5:fc:74:e2:59:15:
42:ad:a6:2a:90:7a:b7:20:12:72:0b:17:58:88:12:
4f:6c:3b:46:d8:a0:0d:bc:62:21:7b:1d:28:7c:c1:
c9:3c:20:e0:d2:34:40:8f:f7:ab:80:df:8b:d7:13:
21:dd:5c:f6:c6:d1:f3:e7:17:0f:32:0f:be:88:3b:
1d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C4:8F:C8:C6:C3:18:C9:4A:85:F6:FF:71:7A:EC:AB:DF:52:F8:E3
X509v3 Authority Key Identifier:
keyid:D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/mMSPyMbDGMlKhfb_cXrsq99S-OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.101.179.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ab:34:4c:f6:2f:ec:5e:d8:78:3d:cb:d9:4d:8e:0a:ef:be:
01:93:77:59:e5:aa:fb:43:81:47:29:b7:ae:e3:9b:8a:52:ed:
e6:cc:f0:2c:d7:07:66:2a:99:9a:eb:f4:ba:a2:86:c4:fd:ce:
e4:2f:38:11:a1:1f:6e:fa:50:61:8e:a7:47:44:42:6e:fd:43:
88:4e:37:3f:5c:30:9a:61:27:54:69:82:f6:e2:c2:fa:7a:20:
d6:a4:af:e8:f7:b7:72:93:46:64:b0:fc:00:42:41:5b:b9:c6:
bb:20:08:6d:4f:32:28:54:e3:b2:97:49:77:34:97:6e:58:14:
9f:8f:b7:db:f6:cb:10:3c:98:87:69:a6:67:95:26:65:7e:56:
b6:8c:75:d1:15:fb:ca:dc:fc:62:26:64:cc:54:da:16:7b:d5:
9a:9f:ca:69:57:fe:74:db:fd:17:dc:4b:ad:0a:ce:7a:16:f7:
fc:5b:83:43:bc:3c:8f:6b:a6:02:80:e1:7b:1a:58:0d:c5:33:
29:4b:6c:76:5f:57:5b:ae:f1:bb:75:64:ef:f3:98:41:26:c3:
f1:8b:08:87:91:68:36:00:1d:f4:18:22:92:e4:d0:24:48:14:
3c:44:7b:84:a7:06:f1:48:72:96:4c:c9:7f:8d:82:54:74:15:
f1:db:8d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:34 2024 by rpki-client on console-fra.rpki-client.org