Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mwj0Qpbhq5Y6Z13BaQFV_GxNTQI.roa
File: mwj0Qpbhq5Y6Z13BaQFV_GxNTQI.roa (raw, json)
Hash identifier: xQ9JnCTI/OFlf7R3PxMNqjYeAaQQ3uYdXFfydLiWw1w=
Subject key identifier: 9B:08:F4:42:96:E1:AB:96:3A:67:5D:C1:69:01:55:FC:6C:4D:4D:02
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01909A882F58A9EF9AAA5FE7414EBB2083A4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mwj0Qpbhq5Y6Z13BaQFV_GxNTQI.roa
Signing time: Wed 10 Jul 2024 02:45:34 +0000
ROA not before: Wed 10 Jul 2024 02:45:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 87.121.3.0/24 maxlen: 24
141.98.5.0/24 maxlen: 24
194.31.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 16:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9a:88:2f:58:a9:ef:9a:aa:5f:e7:41:4e:bb:20:83:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 10 02:45:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b08f44296e1ab963a675dc1690155fc6c4d4d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:72:9f:7a:c0:dc:a3:a3:1b:06:84:fc:8f:3c:
2d:29:fc:90:e5:f8:d2:c5:99:ae:77:62:e3:b2:2a:
f7:ce:30:57:73:42:a1:99:d8:5e:ec:5a:6a:de:25:
68:fc:b2:c9:c2:3a:be:88:ff:2e:27:e6:b6:a0:7d:
17:be:ce:7c:ac:83:13:75:1c:f5:c9:fd:7a:cb:dc:
b2:85:d9:0c:10:26:31:50:b3:c7:9e:fa:4f:83:4e:
ee:0b:b0:49:95:f5:9d:96:4d:54:ce:a5:71:90:c8:
7e:ec:eb:5e:21:88:85:2c:25:aa:f1:9c:b8:6b:3a:
6c:90:7c:ee:80:42:55:95:66:6b:97:f9:f4:fe:78:
bb:73:2c:bd:44:86:05:78:44:8c:12:b7:e4:a2:8e:
b1:50:4d:09:3f:ec:84:1e:81:37:d1:bc:bb:3a:27:
e7:31:7b:ea:71:4f:cf:27:d5:e3:6b:1e:a3:b3:3b:
cc:f9:b1:9f:ea:f8:e1:60:72:37:1f:16:a0:d0:b9:
98:23:91:75:55:ab:28:5b:dd:e8:4b:a8:b5:94:d9:
1a:79:e9:9a:3a:15:b6:40:3c:8a:3e:ff:b7:84:35:
cf:6e:14:6f:fe:c7:bc:90:f8:93:29:82:88:66:64:
0a:3d:40:3c:59:27:ed:fe:d0:7f:dd:20:3a:56:11:
4a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:08:F4:42:96:E1:AB:96:3A:67:5D:C1:69:01:55:FC:6C:4D:4D:02
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mwj0Qpbhq5Y6Z13BaQFV_GxNTQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.3.0/24
141.98.5.0/24
194.31.205.0/24
Signature Algorithm: sha256WithRSAEncryption
56:4c:e4:a3:43:2a:6a:2a:86:81:c2:4f:53:f6:6c:75:ed:a9:
f6:28:f7:11:96:76:be:cc:a5:e5:6f:9d:e8:01:4e:c4:84:3a:
1d:fc:70:e2:f5:7e:0e:c5:b2:43:64:ee:45:32:b7:e7:74:f9:
2c:2f:29:58:f1:2f:00:e3:5c:51:38:05:79:5f:a4:1b:a3:a4:
9c:84:da:c6:78:04:ad:14:d2:51:83:03:d7:76:4a:f9:8a:ce:
18:7b:fc:0e:52:6e:bf:e7:59:65:fe:d3:87:f4:13:f7:c5:af:
76:ed:b4:4a:f9:44:ca:bc:77:39:a3:03:68:6c:3b:ff:ff:03:
8a:4a:c3:3b:4c:92:a2:5b:49:3c:a8:0e:6b:a6:b7:2e:86:7a:
a9:55:e9:82:3b:75:09:97:6e:e0:05:ff:a0:ba:fc:7c:f9:82:
4b:82:1b:56:03:00:3c:3d:b3:d3:3b:b9:39:ba:7e:a3:85:1c:
96:ca:86:60:7b:56:0f:78:77:36:6a:9b:eb:40:1c:63:12:06:
2a:b2:3a:a3:b6:14:af:fa:35:6a:57:5e:32:eb:a5:a1:52:1e:
41:2e:3a:65:c8:71:ec:0e:6b:d2:ee:e7:93:85:b5:61:98:50:
a5:c6:86:b2:90:6c:06:f8:3b:0f:8b:42:e9:b0:e4:86:86:90:
b5:08:90:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 19:33:52 2024 by rpki-client on console-ams.rpki-client.org