Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/MsenBxRqRnikF5DDq3xH00JphWI.roa
File: MsenBxRqRnikF5DDq3xH00JphWI.roa (raw, json)
Hash identifier: win/bj8Pn/zHUPL2Ps+r2ne82vS4RYedofGIphFdHpA=
Subject key identifier: 32:C7:A7:07:14:6A:46:78:A4:17:90:C3:AB:7C:47:D3:42:69:85:62
Certificate issuer: /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial: 0187E23A95B7A748D41179E0264197001F78
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/MsenBxRqRnikF5DDq3xH00JphWI.roa
Signing time: Wed 03 May 2023 15:28:22 +0000
ROA not before: Wed 03 May 2023 15:28:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142111
IP address blocks: 80.91.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e2:3a:95:b7:a7:48:d4:11:79:e0:26:41:97:00:1f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
Validity
Not Before: May 3 15:28:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32c7a707146a4678a41790c3ab7c47d342698562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cb:1b:5e:a5:ba:89:d2:d3:2f:e9:3f:8f:4d:
21:49:8c:1f:fa:7e:ac:13:b7:c7:02:c1:16:85:b6:
0d:ba:0a:5a:03:64:ed:f6:64:56:76:2b:63:24:37:
02:cb:93:f4:34:c2:1d:00:ad:51:1c:cc:48:1f:b7:
f3:cd:4c:21:5a:ba:2e:53:b4:2d:54:ae:ea:9a:f6:
42:67:b4:e1:e4:16:10:cc:3f:2a:4e:2c:40:0a:59:
77:3a:b4:26:58:67:6f:cb:68:c5:ee:af:5b:de:1c:
5d:ff:69:49:be:a2:4c:cc:c4:7d:d4:ae:92:10:72:
3a:3a:3f:94:ae:94:04:45:6f:d2:f3:11:cd:d9:f4:
f8:50:58:10:93:eb:79:39:ec:cb:dc:bf:05:06:51:
bd:56:ab:9c:ff:a2:92:cf:90:ca:8a:f2:85:49:22:
19:c3:20:dd:3b:6b:74:4e:91:1b:19:90:df:db:fb:
e4:db:59:e2:93:0c:42:6b:47:8d:3c:1c:bd:71:5a:
8b:62:7c:f4:27:b8:51:21:ad:80:c0:82:48:77:8f:
a1:2e:8e:0f:36:75:67:61:4b:41:b1:49:ad:52:f6:
35:04:33:31:55:b6:94:f8:0f:ad:70:01:73:2d:bc:
f4:73:7d:46:a3:dd:fe:9c:46:83:aa:49:7b:59:66:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C7:A7:07:14:6A:46:78:A4:17:90:C3:AB:7C:47:D3:42:69:85:62
X509v3 Authority Key Identifier:
keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/MsenBxRqRnikF5DDq3xH00JphWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.218.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:62:6f:40:de:94:75:81:0b:5c:c4:81:4f:53:e9:e6:da:da:
c3:d8:99:0f:39:c3:9e:cb:a8:bc:fc:26:c0:fe:1f:ee:67:12:
15:39:4e:bf:b7:00:d7:0d:95:51:c2:06:f2:84:f4:29:08:1f:
5d:10:7e:61:35:1b:35:50:45:70:61:ab:f5:a2:12:39:35:98:
9f:fa:1c:80:ea:3e:c0:db:36:38:37:30:05:ed:e6:41:3c:9a:
e1:2d:56:7c:a7:e8:ab:04:a4:46:03:56:28:a8:94:4a:05:e9:
35:25:a9:95:89:d8:de:50:f7:1c:02:2f:49:31:84:86:3f:5b:
92:9a:73:b4:5c:1f:03:4d:45:38:86:4d:ca:ea:d9:31:ae:4c:
01:c9:b2:ad:3b:9b:0c:fe:fd:15:50:81:56:fe:88:7e:b5:62:
92:fb:05:07:e3:41:f3:c7:4f:9c:de:22:43:df:45:21:d9:c7:
3c:d2:c4:c4:f0:40:04:65:b3:fc:0d:56:b9:05:21:f2:57:bd:
e2:1b:de:dc:a0:d8:58:7f:76:da:52:31:05:58:fd:af:11:bd:
63:f1:72:4c:06:cb:7d:b9:63:bf:38:9f:60:d9:be:6c:26:aa:
1d:71:43:22:64:35:5a:ce:0a:12:04:d0:aa:05:28:de:c4:be:
e5:1a:99:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:15 2024 by rpki-client on console-fra.rpki-client.org