Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/TN_MBO_nPqQ2y77aAdjSPDVt_H0.roa
File: TN_MBO_nPqQ2y77aAdjSPDVt_H0.roa (raw, json)
Hash identifier: 09rbE7cNndau871IiB3PeAK6Ni0i93Y+GA5Jq/CU4s8=
Subject key identifier: 4C:DF:CC:04:EF:E7:3E:A4:36:CB:BE:DA:01:D8:D2:3C:35:6D:FC:7D
Certificate issuer: /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Certificate serial: 018BEC177254826EF9D7674EA6FE872770FC
Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/TN_MBO_nPqQ2y77aAdjSPDVt_H0.roa
Signing time: Mon 20 Nov 2023 09:37:21 +0000
ROA not before: Mon 20 Nov 2023 09:37:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199541
IP address blocks: 153.98.37.0/24 maxlen: 24
153.98.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Dec 2023 08:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ec:17:72:54:82:6e:f9:d7:67:4e:a6:fe:87:27:70:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Validity
Not Before: Nov 20 09:37:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cdfcc04efe73ea436cbbeda01d8d23c356dfc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5c:f7:b5:6b:ee:05:b1:5b:9b:a3:45:98:6d:
de:1c:a1:9b:d6:49:6e:2b:d0:b5:98:48:2a:df:e2:
7b:44:c9:74:75:9f:f7:b6:9f:03:82:7f:68:27:f0:
eb:e7:6c:5e:9c:89:2f:d1:10:44:3c:86:64:e4:c2:
41:a8:47:cf:68:b0:9b:80:a5:58:21:e4:34:89:62:
6a:9f:3c:0d:65:e0:4d:3f:a6:b6:bb:4f:32:8a:d7:
dc:5b:2d:ce:9a:05:05:48:23:74:f9:32:a1:8b:e7:
c7:aa:41:2b:58:73:ff:56:4d:ce:38:36:9d:49:80:
61:0b:3d:7c:75:73:51:93:af:56:2c:19:a2:78:22:
89:40:7f:63:be:b1:ef:b7:60:d8:4a:96:86:ca:4d:
cf:9b:ad:28:7f:97:67:2b:0f:6b:3f:f0:ee:7e:d7:
df:44:78:1f:4c:6c:e9:af:e2:88:62:b2:5c:d5:6a:
5d:07:21:dd:b5:fa:84:5d:76:d2:b4:62:59:2a:95:
b6:f1:ec:04:3d:b0:c9:20:c1:6b:cb:2b:fc:d5:c7:
f3:2c:0f:00:5f:5e:23:1a:7d:6b:56:d7:b7:d2:04:
62:41:64:9a:72:15:80:19:30:fe:fb:f8:bf:f1:05:
74:1d:b9:53:8b:c1:e5:23:b3:15:03:24:8b:81:21:
a5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DF:CC:04:EF:E7:3E:A4:36:CB:BE:DA:01:D8:D2:3C:35:6D:FC:7D
X509v3 Authority Key Identifier:
keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/TN_MBO_nPqQ2y77aAdjSPDVt_H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.98.36.0/23
Signature Algorithm: sha256WithRSAEncryption
61:4a:18:c0:3a:0d:9f:33:d4:de:96:f4:18:7b:76:ab:1a:d9:
15:27:73:3f:a3:c0:1a:fb:34:1b:56:e6:59:32:95:f7:2f:79:
aa:b7:cf:a8:7f:70:2b:4d:a6:ee:bb:fe:a5:1b:60:e3:d9:13:
40:4f:e5:c1:e1:ff:4b:8f:83:1d:ee:4f:d8:2c:3a:2d:c2:82:
cd:7f:01:d7:4e:dd:f3:09:3e:ba:81:04:43:86:be:12:2c:2e:
85:80:d5:14:87:12:d4:d8:66:87:db:0f:07:8a:b1:d5:d7:77:
e3:2d:f0:f5:e9:10:d4:a7:c3:fc:36:8b:7c:16:c5:fa:e4:7c:
a1:01:c2:24:e5:2e:81:c8:e3:02:b9:cf:e4:ed:3e:fc:01:7a:
9c:e9:cd:24:62:84:cd:1e:59:4f:a8:4d:13:c6:6e:75:c6:87:
33:33:76:c2:f5:33:e6:0e:62:3a:e9:11:50:15:bf:a1:dc:a8:
f1:c1:93:7c:0e:99:79:cf:37:9a:e6:c7:82:b8:b7:cd:79:76:
c8:b9:51:98:e9:f8:ec:e6:8f:4a:51:81:b8:ec:3d:99:42:e1:
03:03:22:2c:67:af:9f:32:77:e9:c2:ad:32:21:2f:d1:bb:74:
09:50:e9:12:16:68:1b:94:06:f6:74:0d:53:04:42:70:a8:29:
ac:2c:a2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:15 2024 by rpki-client on console-ams.rpki-client.org