Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/mFN5M2vycbFOIhhaQY2uVMo9zr0.roa
File: mFN5M2vycbFOIhhaQY2uVMo9zr0.roa (raw, json)
Hash identifier: wSQY0LEPOrrtW4R1G+N1KbfdR2B76qwkNGBg/dvWsW0=
Subject key identifier: 98:53:79:33:6B:F2:71:B1:4E:22:18:5A:41:8D:AE:54:CA:3D:CE:BD
Certificate issuer: /CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
Certificate serial: 0185703074D7690C2D8E9003F0E559B96CD2
Authority key identifier: 8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/mFN5M2vycbFOIhhaQY2uVMo9zr0.roa
Signing time: Mon 02 Jan 2023 01:55:01 +0000
ROA not before: Mon 02 Jan 2023 01:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35266
IP address blocks: 193.46.61.0/24 maxlen: 24
193.104.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:74:d7:69:0c:2d:8e:90:03:f0:e5:59:b9:6c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
Validity
Not Before: Jan 2 01:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=985379336bf271b14e22185a418dae54ca3dcebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2e:e5:23:f1:97:cd:f7:b4:9b:e8:3a:ba:e5:
95:a2:0d:f3:92:6c:af:29:d3:38:e7:7f:58:e2:8e:
40:a7:30:32:ed:98:3d:84:a2:48:ed:fc:e3:38:f2:
d9:f6:a6:59:46:ba:87:89:f3:ae:f8:28:eb:76:69:
2d:cc:71:22:38:bf:0a:39:5c:11:ec:ac:ef:84:79:
a4:a2:2e:37:22:ba:39:58:6f:14:7e:ce:33:99:53:
b2:d1:15:cc:93:89:c5:9b:64:ba:62:01:e3:67:77:
bf:3a:22:95:1d:24:3f:3c:f6:f7:b2:f5:aa:83:68:
50:37:b4:a8:76:49:d7:3d:28:32:89:b9:be:56:89:
25:16:49:0b:98:ec:e0:c0:45:b9:99:db:7a:9d:ae:
97:bc:93:1e:e0:41:b8:8e:0d:dc:2a:14:03:fd:1b:
44:38:70:d6:9e:04:fb:37:6e:8d:b9:50:f5:15:bb:
27:8a:64:5c:2b:06:6f:89:38:08:08:7e:05:cc:36:
2f:4a:b8:0d:04:41:61:65:f0:65:df:ea:6a:bf:e7:
e2:08:3a:d3:bb:77:54:24:d2:89:74:aa:f2:c8:9e:
a1:9b:e6:66:05:67:17:2d:f4:e3:33:5f:07:58:9d:
a6:8c:d8:eb:ef:25:f8:ba:d6:1d:e2:13:7e:9d:d6:
fc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:53:79:33:6B:F2:71:B1:4E:22:18:5A:41:8D:AE:54:CA:3D:CE:BD
X509v3 Authority Key Identifier:
keyid:8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/mFN5M2vycbFOIhhaQY2uVMo9zr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.61.0/24
193.104.108.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:8a:22:33:1d:e7:1f:86:50:bb:bf:27:7c:14:ad:20:61:2e:
8c:cb:25:1a:32:e4:93:9b:c6:16:7f:2a:e8:24:93:b0:a4:c2:
d5:d7:01:46:80:08:6b:20:7b:15:d9:ae:09:95:05:58:a2:99:
81:33:a4:c2:42:91:b5:17:5b:49:c3:6a:87:a2:77:9c:08:da:
f0:8e:a5:8d:05:fc:11:8d:38:48:ea:b9:81:87:8c:2e:d2:27:
70:95:d6:70:c6:00:fb:e4:2a:bf:2f:97:e2:4c:79:c9:4a:fa:
b9:7d:23:26:9d:e4:5e:be:c7:8f:e3:7f:12:7b:26:f6:4b:32:
5d:46:be:f2:a6:5d:3e:b1:e0:cc:70:42:6b:14:95:bd:92:ea:
5a:2b:2b:be:26:38:6e:9e:06:cf:15:f8:ff:b1:2a:a8:39:a1:
9a:2d:5f:89:ab:33:7a:56:17:c8:07:ee:77:b8:36:ed:bf:2d:
fb:ec:37:09:41:5a:2a:10:19:bc:e5:11:9c:b1:c8:fe:e0:96:
63:ee:5c:02:cc:02:45:42:f8:78:54:da:24:55:de:4b:40:d1:
65:76:44:07:2d:9b:bf:41:8a:dc:49:aa:e6:7c:b4:88:e3:b9:
e5:0e:83:93:d1:db:40:a9:68:c6:43:16:2b:01:9c:01:01:c7:
01:7f:ac:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:47 2024 by rpki-client on console-ams.rpki-client.org