Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MgvHvjKB_VhzLL9Z25geBe8uf8w.roa
File: MgvHvjKB_VhzLL9Z25geBe8uf8w.roa (raw, json)
Hash identifier: oIaZ707s+XpAqERNLHT80xHN4qiXM5b3/SwKdTCxLUA=
Subject key identifier: 32:0B:C7:BE:32:81:FD:58:73:2C:BF:59:DB:98:1E:05:EF:2E:7F:CC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A28A11871F17C1369DAFC7B449FFE9026
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MgvHvjKB_VhzLL9Z25geBe8uf8w.roa
Signing time: Thu 24 Aug 2023 17:39:20 +0000
ROA not before: Thu 24 Aug 2023 17:39:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 194.87.18.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
193.124.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Sep 2023 10:40:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:28:a1:18:71:f1:7c:13:69:da:fc:7b:44:9f:fe:90:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 24 17:39:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=320bc7be3281fd58732cbf59db981e05ef2e7fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:43:6e:c9:7f:46:fa:10:77:f1:89:be:7c:4f:
4b:0a:82:51:a8:f8:6e:e1:a5:85:12:39:fe:8f:ea:
7f:a9:4c:b2:a1:59:f2:11:83:77:3f:4c:85:1f:d4:
b4:dc:f7:72:1f:74:aa:3b:49:1b:eb:c7:32:c5:90:
76:8a:d1:ae:13:4d:4e:7c:26:ee:21:e3:3a:84:28:
4b:09:64:85:9f:84:38:26:0d:40:9d:d6:d4:af:10:
af:20:69:ff:f0:e7:d0:76:66:d1:33:e6:39:38:09:
fe:68:79:01:cf:6c:ee:d3:fe:fa:3c:83:7a:b3:c5:
f3:ea:b2:40:1b:c7:29:a1:a3:e5:a3:c2:de:09:71:
37:e8:c6:71:68:1f:82:c8:1e:29:f4:4f:fc:a9:90:
2d:62:c4:5a:e5:ef:02:67:f0:b3:3e:59:12:36:30:
e4:3f:b2:6f:a2:11:c5:9d:87:aa:bb:ab:d5:64:59:
21:63:e6:a7:52:d6:2e:2f:f9:0e:6b:64:6b:b3:c3:
4a:f8:5c:d1:94:f7:c2:e4:a5:46:7d:e4:2d:9c:9e:
38:8d:8e:61:e9:a7:5d:bb:5b:85:af:36:cb:df:79:
4f:ad:a8:f7:db:04:82:1d:fc:8f:cb:b7:f8:c7:db:
79:97:23:53:64:0a:dc:50:52:cb:69:b1:39:7d:0b:
87:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0B:C7:BE:32:81:FD:58:73:2C:BF:59:DB:98:1E:05:EF:2E:7F:CC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MgvHvjKB_VhzLL9Z25geBe8uf8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.182.0/24
193.124.205.0/24
194.87.18.0/24
Signature Algorithm: sha256WithRSAEncryption
30:7c:11:30:a1:71:67:49:5b:76:7d:04:38:4f:21:01:1c:ba:
6c:3b:50:4c:63:83:c8:95:8f:99:b4:8b:51:56:24:05:68:84:
de:4d:62:1e:aa:52:ff:ba:77:48:de:8d:fb:d6:69:d3:71:26:
1a:5f:30:b5:73:cb:66:0d:2c:3e:54:7f:f3:87:dc:ff:92:52:
f8:f9:2d:69:70:c9:2a:0b:43:94:69:f7:21:d1:bc:cd:7c:cd:
45:03:a8:7a:aa:f9:1b:f7:13:b2:5a:d7:49:de:78:8a:c9:79:
5a:0f:af:3f:14:8a:2f:2c:c4:5f:a2:15:87:74:15:43:fb:54:
c7:d5:8f:cb:a7:76:36:ca:84:d9:dc:e8:71:bd:b8:46:bb:95:
82:f6:7d:f2:4f:f4:7d:43:57:27:24:f2:74:76:b0:a1:61:61:
b0:a6:39:ed:4b:72:37:3f:ec:e3:34:d4:5c:32:b1:b6:4e:e1:
ec:5c:3e:4a:4e:88:c2:8a:3a:75:01:e4:97:5e:24:d1:81:b2:
d1:4e:9d:8d:2a:a8:67:ca:57:c6:92:fc:c2:9e:f7:64:9c:9b:
fc:99:a0:d9:59:29:a9:88:a2:38:71:31:a8:52:05:70:db:bc:
bf:5c:28:94:01:e3:07:89:91:bb:3c:20:3e:1c:04:75:58:3a:
b6:e0:63:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:14 2024 by rpki-client on console-fra.rpki-client.org