Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/MdgTnUs3dpxqUFsq3m-KJ-LgMzU.roa
File: MdgTnUs3dpxqUFsq3m-KJ-LgMzU.roa (raw, json)
Hash identifier: 8X3yzd+Po0DEaThbcKBnmMYVmDnsDmFVFuBIB5rxMFs=
Subject key identifier: 31:D8:13:9D:4B:37:76:9C:6A:50:5B:2A:DE:6F:8A:27:E2:E0:33:35
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0189D4C1CCB76CD9F3CE3E0C79C7E3ED482D
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/MdgTnUs3dpxqUFsq3m-KJ-LgMzU.roa
Signing time: Tue 08 Aug 2023 10:46:57 +0000
ROA not before: Tue 08 Aug 2023 10:46:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 80.93.198.0/23 maxlen: 24
80.93.204.0/24 maxlen: 24
80.93.205.0/24 maxlen: 24
80.93.202.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
80.93.203.0/24 maxlen: 24
80.93.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Oct 2023 09:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:c1:cc:b7:6c:d9:f3:ce:3e:0c:79:c7:e3:ed:48:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Aug 8 10:46:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31d8139d4b37769c6a505b2ade6f8a27e2e03335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:66:f6:96:ff:d5:cf:de:5d:14:34:22:2a:98:
c8:ff:80:6f:8c:27:f3:8e:0d:63:af:49:7d:c1:16:
e5:4d:9c:d1:ad:33:8b:af:ae:89:1c:08:e5:be:fc:
3d:3a:ea:3d:26:5a:9e:91:1f:91:2a:3d:2f:44:76:
3d:fd:52:c1:18:5d:ac:0b:d5:1d:7e:d2:4c:f0:23:
f3:dc:80:f1:48:cb:13:38:5e:ca:77:26:03:d8:50:
38:41:d1:9b:64:84:f6:44:48:84:da:01:07:ef:f2:
eb:73:66:8b:e9:17:f1:07:1c:32:49:f3:1a:07:ce:
da:b5:7d:7a:2a:a5:21:da:5f:ba:0c:94:5b:4c:1b:
96:4f:61:fa:f6:11:46:ab:b7:fb:9c:9d:71:17:02:
29:17:cf:ce:94:88:eb:ff:46:b7:f1:fd:05:a5:49:
40:b3:2f:93:93:b4:de:b2:b8:4b:e5:0b:a2:c7:dd:
bd:3c:25:ec:bc:4b:41:9c:13:b0:f6:1c:9c:5c:c3:
a2:f6:fa:e6:80:69:80:66:fc:25:a1:25:dc:03:b8:
73:b9:e8:85:3d:a4:ed:77:d0:4f:f2:ab:a3:dd:b4:
34:f5:a9:39:87:ac:1d:4b:80:33:d2:b6:64:88:2f:
27:a9:13:14:14:a0:01:4b:88:bb:a4:dd:da:91:d5:
96:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D8:13:9D:4B:37:76:9C:6A:50:5B:2A:DE:6F:8A:27:E2:E0:33:35
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/MdgTnUs3dpxqUFsq3m-KJ-LgMzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.198.0/23
80.93.202.0-80.93.207.255
Signature Algorithm: sha256WithRSAEncryption
02:31:f9:9e:13:66:8d:35:37:4f:17:1a:71:2b:90:38:f7:9e:
52:bf:df:c2:d1:18:1f:ba:f6:12:2d:b6:5f:bd:fc:7d:3f:02:
7f:0c:95:5d:19:53:10:98:e4:c0:3c:2d:cf:cd:1b:0a:d0:ef:
cd:75:e6:6c:c6:c1:dd:09:d1:d1:08:48:e5:3d:3f:27:0e:1c:
50:c7:a3:46:2e:35:cb:df:47:13:2d:aa:21:e0:96:c1:e2:c7:
d2:0a:e9:77:00:4b:9f:18:cb:d6:e9:ea:cb:bf:66:b2:cb:e2:
3f:a6:8e:6e:d4:b2:6e:46:4c:e4:17:88:63:e4:df:e0:46:ba:
23:7a:36:59:0f:7e:46:a7:c5:92:a1:a8:18:cc:f6:e4:8d:37:
81:1c:85:69:b3:67:02:8f:2d:00:d5:c7:cc:4a:6c:b8:30:a0:
1e:09:82:e7:b2:0a:01:94:d7:98:49:cc:73:4b:28:b2:64:96:
ab:77:43:5c:9a:f1:8b:af:df:45:eb:85:59:5e:a7:bb:d2:3a:
ad:fd:cc:60:af:30:06:f9:f6:bf:9c:73:f1:a8:29:f8:cf:4f:
10:0f:04:28:95:bd:71:06:2b:d6:fe:e9:00:42:d3:37:48:28:
0f:f5:1f:94:cd:e0:4c:d2:70:c1:48:9c:97:97:37:5c:8d:7c:
61:93:c3:42
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:57 2024 by rpki-client on console-ams.rpki-client.org