Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/2MjAmXwuTPvc2Riu45nNbVKjezc.roa
File: 2MjAmXwuTPvc2Riu45nNbVKjezc.roa (raw, json)
Hash identifier: aTaZ/oTCjSE77W4lTC6CYsTTpe0ygCgU493dkcrZbtQ=
Subject key identifier: D8:C8:C0:99:7C:2E:4C:FB:DC:D9:18:AE:E3:99:CD:6D:52:A3:7B:37
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01856DEF6E03802B24F632010470DBB571AE
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/2MjAmXwuTPvc2Riu45nNbVKjezc.roa
Signing time: Sun 01 Jan 2023 15:24:45 +0000
ROA not before: Sun 01 Jan 2023 15:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49926
IP address blocks: 195.187.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:6e:03:80:2b:24:f6:32:01:04:70:db:b5:71:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 15:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8c8c0997c2e4cfbdcd918aee399cd6d52a37b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:7a:9a:a8:16:4d:85:6c:fb:4a:df:9f:1b:
bc:2c:db:2b:2d:14:f4:ff:a8:1b:06:75:f6:11:e5:
82:8a:00:da:1b:7b:db:b9:a9:04:ac:c8:4d:ea:02:
6f:7d:e7:0a:b3:59:fc:e8:0d:5c:7e:b7:bf:27:24:
92:a1:db:0b:ed:7f:16:a0:17:a7:2d:a9:00:47:3b:
bd:5f:a7:ea:c0:b9:64:f5:ae:8a:aa:64:ed:29:ec:
a6:80:ff:1f:2b:a1:68:4b:3c:26:26:ba:6b:5c:dd:
81:ae:e3:46:5e:61:99:6c:72:56:12:75:a7:5f:b6:
0c:b1:c6:43:fb:50:5c:00:30:f0:f8:ef:6e:43:cc:
11:63:b1:41:ee:6f:74:7b:a9:85:d8:78:10:7f:6f:
66:e0:93:86:8c:49:22:18:98:76:3a:78:f9:90:ea:
71:ef:b1:41:c1:4e:aa:27:eb:b2:3d:65:f6:1b:98:
12:00:df:3a:6e:25:b8:a9:86:24:23:dd:84:a1:03:
2a:23:fc:49:d6:a4:a6:4c:71:c4:b5:a5:28:fd:3f:
63:d8:14:77:5e:f3:f0:35:4a:37:4a:d2:aa:b8:de:
e3:95:7d:e4:81:b9:c3:d4:ba:e2:bc:10:01:60:d7:
c7:39:d6:3f:7d:b7:d0:85:86:fd:60:1a:46:23:71:
be:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C8:C0:99:7C:2E:4C:FB:DC:D9:18:AE:E3:99:CD:6D:52:A3:7B:37
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/2MjAmXwuTPvc2Riu45nNbVKjezc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.187.39.0/24
Signature Algorithm: sha256WithRSAEncryption
36:0d:62:b7:93:08:46:4b:b7:43:c9:cc:16:86:17:89:a3:fa:
7c:1d:ae:92:fd:41:51:8c:7f:7a:74:50:d9:ce:09:83:17:e6:
c2:76:07:26:a0:cd:1a:cd:7b:fd:37:53:88:44:c9:3f:2d:ae:
5f:2c:72:f6:93:1d:b0:54:61:d7:bc:e3:3d:2e:4c:ec:ac:66:
f2:88:65:b3:b3:86:5c:a9:b7:75:c4:8e:38:35:4d:37:82:ff:
28:aa:33:07:05:78:37:f5:d8:21:da:3e:c4:e9:f7:c8:09:e6:
06:7a:21:00:de:8a:23:03:e6:20:6d:40:35:7f:c3:f2:bb:60:
e8:8b:a7:9f:29:09:a5:19:0e:14:61:d8:04:cd:33:b8:2b:cd:
05:4c:ab:01:85:e0:68:79:a3:f6:9f:02:e2:55:bf:e6:9e:a8:
a4:5a:ae:92:d3:1c:a6:31:d4:a7:3f:18:3f:37:f9:e1:2d:b0:
b3:2b:cd:3d:00:f9:49:3d:55:42:70:28:17:fa:aa:42:6c:a0:
c3:0c:ea:e2:02:db:10:6c:be:b5:82:42:c4:2f:9f:f9:83:3f:
59:a5:d7:10:fc:bc:19:e1:cb:86:7c:cd:13:03:cb:7b:b2:51:
ea:a1:21:94:cf:93:8c:2c:90:c2:95:16:15:a8:ee:11:d0:51:
6f:e2:de:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:05 2024 by rpki-client on console-ams.rpki-client.org