Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/mDt-Yv97tB-yBj--9_MbgogxB3w.roa
File: mDt-Yv97tB-yBj--9_MbgogxB3w.roa (raw, json)
Hash identifier: rpbuuMcmeAFgLO8t2zvFS4cBYZcPyM0fmxubhMVuSdo=
Subject key identifier: 98:3B:7E:62:FF:7B:B4:1F:B2:06:3F:BE:F7:F3:1B:82:88:31:07:7C
Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial: 0188672D58920F7F9E7D2EE35504F10EEDC9
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/mDt-Yv97tB-yBj--9_MbgogxB3w.roa
Signing time: Mon 29 May 2023 11:03:24 +0000
ROA not before: Mon 29 May 2023 11:03:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209671
IP address blocks: 46.174.140.0/22 maxlen: 24
2a09:de80::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:67:2d:58:92:0f:7f:9e:7d:2e:e3:55:04:f1:0e:ed:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Validity
Not Before: May 29 11:03:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=983b7e62ff7bb41fb2063fbef7f31b828831077c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:25:36:7e:19:24:54:ff:a0:4d:c6:f7:42:23:
94:d7:b6:a6:57:c8:33:e6:da:c4:1e:59:ca:80:3b:
fd:c9:7e:4e:21:34:c0:01:cd:da:6f:3e:32:27:66:
d8:dd:82:86:cc:9a:c6:7d:8c:f3:a1:a6:11:df:52:
cc:af:c5:af:4c:d4:b3:46:bf:e3:4a:b3:30:d4:62:
42:d6:c4:33:82:6d:51:01:4f:81:63:f4:7c:39:48:
c0:c9:7a:96:2b:dd:18:13:56:84:aa:2f:6c:ac:96:
1f:28:f7:9c:1b:2f:a8:48:d0:76:fb:f8:e4:63:b7:
4f:aa:5c:c5:f0:28:b2:cb:b8:11:4b:37:f6:95:e1:
af:b0:ad:79:98:5f:de:e8:46:b8:e3:45:14:be:89:
fe:eb:77:c7:a0:fc:de:31:b5:30:62:12:af:e4:99:
7e:18:8b:b8:a7:b5:37:61:ef:02:be:17:14:6b:1f:
2b:b6:db:a5:26:87:7b:7e:6d:7b:2b:45:24:8a:72:
71:4b:e5:52:5b:2e:ef:3c:fd:46:90:a6:44:81:48:
c3:6a:b5:d7:a2:a4:3a:74:c6:ac:d7:41:92:84:d0:
3e:70:ba:81:3c:a6:b1:95:04:c3:eb:bb:b2:b6:a1:
cd:8f:10:34:e8:25:93:1b:5c:31:8e:4d:be:95:92:
de:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3B:7E:62:FF:7B:B4:1F:B2:06:3F:BE:F7:F3:1B:82:88:31:07:7C
X509v3 Authority Key Identifier:
keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/mDt-Yv97tB-yBj--9_MbgogxB3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.140.0/22
IPv6:
2a09:de80::/32
Signature Algorithm: sha256WithRSAEncryption
17:4b:53:b1:b2:e7:99:d0:b1:ef:c8:2b:b3:3c:fb:24:b4:96:
29:aa:bd:c5:b4:56:b6:19:5e:30:dc:03:73:4f:01:ff:45:55:
b6:a6:b2:64:ec:49:3e:44:ef:8b:b4:c4:b3:02:1b:49:78:d1:
6d:36:ef:51:f2:fb:2e:1e:1d:f5:99:75:f3:17:65:7e:f3:a7:
95:54:0c:8c:ad:a9:52:7f:e8:5e:1b:e0:18:c1:83:eb:b9:3c:
4d:19:ae:25:0e:91:6f:79:61:f4:be:b7:c7:01:c8:08:96:4e:
d7:8e:7d:26:f2:26:dc:17:0a:b2:61:f8:8f:ce:aa:72:a3:68:
87:e0:ad:26:63:81:84:23:16:8e:21:98:60:e7:d6:71:cb:33:
42:8d:4c:ef:09:27:2e:65:76:74:ad:b5:42:6a:0a:a9:75:0e:
76:0d:44:64:e3:f6:11:e4:ba:bb:77:5c:dc:0a:cb:e3:f2:f6:
db:47:0a:3b:fa:d9:55:3f:fb:83:f1:f6:48:e9:a0:d3:98:02:
d1:b3:9a:fd:4c:c3:7b:bd:9b:2f:ea:2f:59:7e:0e:b3:63:97:
9d:c8:55:ef:8e:b4:9f:43:63:01:1e:3d:8f:70:55:3c:b8:65:
de:a6:33:41:62:79:5b:9b:5b:2b:4a:72:c8:e1:94:2b:be:98:
ba:21:c2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:03 2024 by rpki-client on console-fra.rpki-client.org