Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/p6cu5wvlVlQ9WtXk7FrgKa9-__8.roa
File: p6cu5wvlVlQ9WtXk7FrgKa9-__8.roa (raw, json)
Hash identifier: kd1vGu0VqIMuAk7wajlP3e7Ilmpvz+3S0yjGbvs/DLo=
Subject key identifier: A7:A7:2E:E7:0B:E5:56:54:3D:5A:D5:E4:EC:5A:E0:29:AF:7E:FF:FF
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 01856DD3ED3FBC90CE8F0323AEA572D921C1
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/p6cu5wvlVlQ9WtXk7FrgKa9-__8.roa
Signing time: Sun 01 Jan 2023 14:54:43 +0000
ROA not before: Sun 01 Jan 2023 14:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48663
IP address blocks: 188.246.192.0/23 maxlen: 23
193.108.199.0/26 maxlen: 26
2a03:9800:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d3:ed:3f:bc:90:ce:8f:03:23:ae:a5:72:d9:21:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Jan 1 14:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7a72ee70be556543d5ad5e4ec5ae029af7effff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cf:c1:87:e1:45:27:d8:dd:d1:77:00:b3:35:
3d:f8:bd:af:2a:45:a5:b1:7c:15:6b:3e:f7:07:23:
2b:fd:f9:0a:5c:a5:30:d2:42:5e:87:65:8a:23:91:
84:a7:43:bc:02:9b:5d:81:42:a9:dd:df:e2:7c:02:
95:2f:08:4a:54:4b:4e:96:25:77:df:0f:91:87:8e:
dd:e1:46:4c:5d:3f:55:cc:70:4e:1c:aa:55:43:95:
a9:c1:26:3a:d1:fc:05:64:d1:b9:3e:05:2d:77:a8:
83:b7:a4:c5:28:5b:28:6b:cd:7e:70:c8:f1:b7:dc:
03:8a:ee:0d:bc:18:24:01:c9:26:32:de:e1:67:45:
51:c8:9c:58:bc:aa:96:2a:c0:c9:4d:23:43:29:ee:
bd:df:7e:bf:0f:6a:8f:07:e1:b9:bd:13:d7:8f:70:
ad:38:f8:d6:26:b7:c0:12:6b:e2:16:7a:87:8d:51:
e6:e3:b1:7e:e4:e8:3e:34:00:94:71:2c:53:61:d3:
2e:7b:f0:1e:03:b4:58:e8:7d:95:4a:aa:58:2d:96:
2a:21:91:9b:09:54:07:e2:5f:eb:ea:a6:81:a2:0b:
31:df:38:d4:d6:69:46:5e:ed:ce:1e:db:06:b3:0f:
ab:9a:d4:67:a8:42:d2:90:21:a3:c8:f9:a8:dc:a8:
75:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A7:2E:E7:0B:E5:56:54:3D:5A:D5:E4:EC:5A:E0:29:AF:7E:FF:FF
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/p6cu5wvlVlQ9WtXk7FrgKa9-__8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.246.192.0/23
193.108.199.0/26
IPv6:
2a03:9800:1::/48
Signature Algorithm: sha256WithRSAEncryption
23:30:49:a2:99:4d:e7:fd:89:53:cf:52:79:18:94:8e:fb:0f:
dd:f0:4c:cf:ad:f5:6f:6d:79:3b:9c:12:a0:19:b8:9d:00:dc:
1d:38:82:fc:3a:89:4d:f2:fa:59:ca:c1:7b:88:46:dc:05:f5:
84:ab:fa:dc:9a:c6:92:ab:76:5f:bb:0e:e5:98:00:a1:8e:49:
22:90:da:78:23:b7:fd:44:4d:88:37:8e:48:62:0f:b5:cd:e2:
3c:5e:12:63:43:eb:b0:4d:b6:16:83:18:2a:cd:48:57:df:dd:
3f:9f:d4:76:de:36:d6:8c:28:16:f5:47:e6:e3:ec:c5:9b:a3:
da:75:a4:4c:a8:a4:0b:56:cc:11:4a:06:7a:cd:4c:f5:34:2a:
75:2a:b7:0e:b8:64:2f:43:e4:47:0b:3b:33:1f:78:2c:81:d4:
99:60:86:5d:92:df:41:f9:a9:78:18:73:f7:80:fb:d7:a5:8d:
8e:61:33:7b:b1:83:8e:ec:5e:a5:18:a7:43:67:6c:6c:8f:de:
4c:43:57:99:7d:7c:14:91:00:25:05:3d:3e:e6:07:c4:61:3f:
f8:31:85:23:51:23:76:4d:11:37:e7:17:6c:52:9c:d7:8a:ad:
83:0e:43:36:3e:25:69:6d:3f:d3:ff:22:bd:66:88:6b:44:a6:
77:40:67:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org