Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/mKR7loIhlZ3r9jl_jnXE8sQyM-g.roa
File: mKR7loIhlZ3r9jl_jnXE8sQyM-g.roa (raw, json)
Hash identifier: irQh/GTsyxbS8whMYEsQgRkYN91XjfxF8x+cH36b61U=
Subject key identifier: 98:A4:7B:96:82:21:95:9D:EB:F6:39:7F:8E:75:C4:F2:C4:32:33:E8
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 0188427CF47E91DD4D13F1A40D2B4E27DAFA
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/mKR7loIhlZ3r9jl_jnXE8sQyM-g.roa
Signing time: Mon 22 May 2023 08:04:25 +0000
ROA not before: Mon 22 May 2023 08:04:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206282
IP address blocks: 94.240.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:42:7c:f4:7e:91:dd:4d:13:f1:a4:0d:2b:4e:27:da:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: May 22 08:04:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98a47b968221959debf6397f8e75c4f2c43233e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:8b:2b:2a:0f:b9:a7:dd:20:72:72:d8:a6:
e8:0c:b6:64:a7:1e:82:d8:0e:9e:70:c3:7d:ff:e1:
c4:86:ee:33:af:51:19:68:88:11:24:4d:d8:52:23:
6c:b0:3a:50:cb:8e:04:35:9b:85:eb:d3:36:15:1c:
62:22:ff:5e:e7:14:58:26:c3:55:48:94:41:64:f5:
64:ad:22:ba:28:81:f0:ad:cf:75:28:74:46:ed:34:
b8:52:1a:b4:3e:c7:62:82:ac:1b:b7:a6:63:a8:fd:
3c:98:85:ac:ec:b4:6b:3c:44:24:b7:25:ef:0e:44:
ff:51:25:00:a3:47:db:53:66:a5:cc:6f:7e:c6:97:
0f:52:2a:cc:a7:7b:f6:57:d2:f7:89:ea:10:aa:79:
55:e0:bc:42:42:01:ab:82:ca:28:ed:89:65:40:e3:
c7:5e:02:2a:6b:e4:da:3b:11:26:49:fd:11:d0:9d:
b6:6c:96:e5:b1:62:e5:b9:cb:50:61:6a:c0:87:49:
bd:91:40:59:61:d5:9c:38:f0:d2:ed:82:c4:97:d6:
c1:87:68:09:ff:01:90:31:bc:e3:fa:e6:86:49:81:
14:38:d3:4b:f4:47:64:ef:80:fb:8f:23:3e:fd:88:
5f:4a:e8:4f:ec:f6:47:f1:5d:29:8d:1f:d3:db:4a:
d3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A4:7B:96:82:21:95:9D:EB:F6:39:7F:8E:75:C4:F2:C4:32:33:E8
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/mKR7loIhlZ3r9jl_jnXE8sQyM-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.240.24.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b8:b3:8d:6d:b0:03:f4:a2:6b:b5:2c:71:c5:da:11:26:46:
29:89:f0:f7:90:d9:b0:ac:ee:13:21:93:02:9e:0a:d7:f7:3b:
35:ce:77:f4:5e:51:de:72:c1:f3:bd:ad:7f:2c:9c:76:cd:e5:
e2:6b:f2:be:4a:96:98:ad:ad:62:2d:13:99:3b:fd:0b:9f:86:
a2:46:9f:29:e1:a2:1e:ab:3e:e4:19:08:1e:dc:4a:de:42:da:
97:7b:57:fc:77:94:a3:45:a5:51:bc:81:79:3c:bd:e2:f3:07:
45:e6:cf:d4:57:a7:ea:00:fd:3a:6d:ae:f0:76:16:87:4a:b5:
1f:25:2e:72:3c:cd:e1:d4:11:53:86:cc:ab:e3:10:96:05:e7:
fc:43:0b:fc:98:21:4b:d1:37:ec:cc:e4:e4:00:e1:d5:61:04:
d8:59:87:56:cd:82:b4:1f:0d:aa:e1:22:98:15:f6:7c:54:42:
38:c1:34:0e:57:c6:85:dd:a4:54:9b:25:b6:43:c8:b4:0b:ed:
3f:36:93:55:2a:13:af:7e:20:3d:ad:d7:1d:61:da:9c:14:14:
95:29:a5:8d:f0:88:54:3b:52:66:15:f5:a4:8b:79:48:0d:37:
d2:cd:d2:9e:83:d0:8c:fc:9b:06:25:86:f8:cc:ac:f1:a2:dc:
db:fb:be:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:12 2024 by rpki-client on console-ams.rpki-client.org