Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/MWRlUUL0O6AGjL7WOFndF2JJrgw.roa
File: MWRlUUL0O6AGjL7WOFndF2JJrgw.roa (raw, json)
Hash identifier: PDRRf0VL7eAgl2UxMh3lepglf+IjzSwWWhtjkCKPB7s=
Subject key identifier: 31:64:65:51:42:F4:3B:A0:06:8C:BE:D6:38:59:DD:17:62:49:AE:0C
Certificate issuer: /CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Certificate serial: 01857070669EFF5FC8941167F1BBAC0BC8AA
Authority key identifier: C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/MWRlUUL0O6AGjL7WOFndF2JJrgw.roa
Signing time: Mon 02 Jan 2023 03:04:52 +0000
ROA not before: Mon 02 Jan 2023 03:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197610
IP address blocks: 213.174.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:66:9e:ff:5f:c8:94:11:67:f1:bb:ac:0b:c8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Validity
Not Before: Jan 2 03:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3164655142f43ba0068cbed63859dd176249ae0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:64:0d:b1:84:9d:db:81:b8:e9:e3:37:1b:c6:
b9:30:09:15:ac:ed:6f:f0:a4:d3:ad:66:6a:48:b6:
52:ea:c7:2c:63:4e:71:6f:b9:ff:8a:b3:51:6e:85:
05:e0:dd:42:39:1c:d3:eb:07:cb:7b:9c:ee:14:72:
90:44:ef:18:0e:ee:e4:e5:36:b0:50:26:16:2a:54:
0e:86:bf:a7:d4:08:a3:94:3d:9f:42:4a:35:51:5e:
8c:81:4e:ce:1e:ce:b4:ce:18:33:23:db:14:85:90:
e0:87:49:91:62:f2:1d:04:9f:ca:8a:11:e3:09:44:
1d:34:0f:92:c6:a9:4a:18:de:88:fa:79:2f:40:51:
46:f8:db:3e:19:da:2c:ea:53:8f:12:b2:37:9b:ca:
3a:3f:8c:72:b6:c0:d9:84:dd:b7:eb:b7:d8:3c:43:
ae:0d:ae:fd:fd:af:2f:8f:f2:5b:0b:ff:1a:db:e6:
64:8f:47:8b:8b:ec:59:6f:71:88:df:5e:4f:5f:50:
c3:ee:82:41:7f:c6:cf:d7:2c:9d:e9:56:3b:df:7e:
2e:f4:9c:e1:cf:e2:d8:ab:49:b4:ab:f8:6c:6a:fc:
94:39:c9:73:3d:b6:bb:06:ac:d7:13:91:87:b6:da:
57:87:63:96:46:34:81:09:65:a0:75:7b:41:c8:8c:
a2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:64:65:51:42:F4:3B:A0:06:8C:BE:D6:38:59:DD:17:62:49:AE:0C
X509v3 Authority Key Identifier:
keyid:C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/MWRlUUL0O6AGjL7WOFndF2JJrgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.174.28.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:fe:14:86:3b:30:4f:e6:de:15:76:af:98:cd:69:dd:dd:f2:
dd:3b:9d:5b:bc:71:67:66:69:92:b4:b3:8a:08:12:93:00:40:
eb:cc:ca:ee:c5:6d:53:8e:97:8c:57:61:29:3b:3d:93:02:a5:
65:8d:bf:75:d1:3e:2c:64:8f:16:8b:68:f9:fa:e2:4d:6e:03:
9d:ed:a0:da:ac:d9:ca:4e:f7:50:bb:67:47:a3:70:3c:22:50:
ef:f4:c3:29:1b:22:5f:6b:64:b1:5d:5f:ca:b8:fe:c0:68:d0:
18:53:07:4d:26:91:a8:8c:6e:0b:39:d3:b4:0c:df:34:77:e4:
11:6b:7f:40:14:bc:ba:8c:bc:f8:13:49:44:b1:17:ef:5a:7b:
af:fa:3f:72:37:59:c5:c0:3c:ca:81:b5:9d:6e:31:02:a2:e9:
b4:ac:c8:0f:9c:f8:49:d6:b3:c7:10:4f:58:be:ec:70:03:3b:
b8:8d:b8:fa:8a:9f:c6:91:fd:46:18:5a:79:43:4d:86:60:ba:
09:9a:6a:9c:99:c5:85:25:7c:f5:38:91:7a:78:c1:63:3f:07:
f6:79:a2:e6:16:40:a9:7e:ed:bd:1c:dc:02:b6:69:25:42:ae:
4a:f9:a3:99:75:c4:36:22:00:cb:ea:16:f1:8c:fb:dd:d3:cb:
21:23:7c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:55 2024 by rpki-client on console-ams.rpki-client.org