Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MRKuIK_qTHsR4FrIFzGZToMXP2E.roa
File: MRKuIK_qTHsR4FrIFzGZToMXP2E.roa (raw, json)
Hash identifier: DlbYNyEwwLhdU6VdHWCCjKWkJ+NymeTvQDBDxSss9EQ=
Subject key identifier: 31:12:AE:20:AF:EA:4C:7B:11:E0:5A:C8:17:31:99:4E:83:17:3F:61
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01902A38F86929540CF1CC503ED9C4857436
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MRKuIK_qTHsR4FrIFzGZToMXP2E.roa
Signing time: Tue 18 Jun 2024 07:21:34 +0000
ROA not before: Tue 18 Jun 2024 07:21:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63902
IP address blocks: 193.148.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Oct 2024 03:11:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2a:38:f8:69:29:54:0c:f1:cc:50:3e:d9:c4:85:74:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 18 07:21:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3112ae20afea4c7b11e05ac81731994e83173f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0b:83:b7:56:f0:14:d4:bc:d1:db:c9:23:51:
d5:66:d1:78:03:4d:0a:18:e3:a5:68:1e:fc:a8:40:
11:fb:61:8d:51:44:a6:f4:da:6f:1f:84:ae:8f:93:
7b:a0:9a:54:03:df:a1:64:21:91:f8:1b:ca:4d:9d:
ab:82:2a:d2:80:88:50:7e:72:fa:11:0b:56:17:d8:
ce:21:d8:43:df:1d:b8:fc:b8:a3:e8:11:11:9f:ef:
68:01:64:b6:85:22:b2:a9:03:3f:07:da:80:a8:bd:
b2:a3:bc:3a:a0:3c:1a:e3:aa:fc:be:df:39:a0:49:
75:6d:92:e7:ae:16:28:76:f3:9b:69:29:8f:db:40:
2b:fc:08:6b:78:c0:b0:d8:04:61:b0:83:78:7e:82:
0a:b2:9b:ad:ff:c2:e7:c6:44:3a:9e:1a:5d:d2:8a:
23:0e:b0:12:ec:09:8d:ba:a2:98:ec:e2:80:76:f9:
3f:17:e9:e0:72:d5:59:01:85:7c:28:28:1d:43:19:
c6:51:86:7e:e5:66:08:c7:80:58:36:2d:2c:5d:6a:
d6:f4:ca:98:e1:09:5c:10:8f:19:1e:33:88:06:2a:
a3:65:e2:2d:92:60:32:9b:48:14:c3:e5:ab:f1:67:
e8:34:02:81:21:3e:bd:5e:e5:ac:6d:9a:06:80:c9:
3c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:12:AE:20:AF:EA:4C:7B:11:E0:5A:C8:17:31:99:4E:83:17:3F:61
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MRKuIK_qTHsR4FrIFzGZToMXP2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.253.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:c2:47:12:c5:bf:e0:42:af:70:26:e4:fc:e4:25:ba:26:62:
2f:1b:b4:2b:f0:0e:7a:40:42:a7:64:4b:df:87:c7:fa:6b:06:
83:33:4a:72:65:10:2e:5f:b8:63:06:57:d0:9b:bd:27:d4:7f:
cb:2f:10:19:b5:c1:ed:2c:da:74:b1:34:40:6c:c6:b2:85:02:
1a:42:e5:50:2b:f7:63:c0:f7:d7:b4:44:48:16:b0:35:71:f7:
1e:39:ae:25:15:11:dd:d0:d5:88:43:87:f3:2a:22:e3:5e:06:
e9:56:3e:01:3a:b4:78:b4:a1:22:6d:a3:0c:9b:73:c8:23:f6:
9a:23:84:db:ea:83:2a:ac:7b:af:5e:82:01:ab:b6:0d:d1:ef:
25:bc:6f:fa:0f:10:94:25:a4:38:1c:63:59:4c:43:5a:8a:ed:
3a:f7:a5:b2:41:c5:83:4b:8a:7d:d0:5d:9c:fd:0f:3c:22:97:
88:14:a8:74:ab:0c:67:a0:51:b0:1a:e8:9a:5d:81:ca:45:21:
5c:2b:0f:73:ec:66:32:e4:5b:66:48:ec:b7:bb:19:80:88:c6:
8c:e6:c7:ca:1d:b6:2f:d9:25:8a:d2:60:05:0e:17:a5:5c:e5:
3c:a0:a7:a3:2b:64:3f:85:6d:80:0b:ef:e8:77:e2:be:8a:d0:
c8:4d:91:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 06:42:06 2024 by rpki-client on console-ams.rpki-client.org