Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Y-g-N_MnJU-aHsrzH8mgqKobZqA.roa
File: Y-g-N_MnJU-aHsrzH8mgqKobZqA.roa (raw, json)
Hash identifier: 8Yg33qesgpe3nAuvLJhb8GE/pf9RFe/q+mApKJq0Tpw=
Subject key identifier: 63:E8:3E:37:F3:27:25:4F:9A:1E:CA:F3:1F:C9:A0:A8:AA:1B:66:A0
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01856DEF70B704A85527CC9D81C824130707
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Y-g-N_MnJU-aHsrzH8mgqKobZqA.roa
Signing time: Sun 01 Jan 2023 15:24:46 +0000
ROA not before: Sun 01 Jan 2023 15:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60421
IP address blocks: 148.81.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:70:b7:04:a8:55:27:cc:9d:81:c8:24:13:07:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 15:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63e83e37f327254f9a1ecaf31fc9a0a8aa1b66a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:ec:24:fa:03:5c:ef:ae:a8:50:28:46:e2:
ca:e3:39:51:cb:44:0e:fd:22:46:fe:b2:e7:f7:95:
52:ee:ee:31:d2:06:2d:10:05:a9:40:af:7f:8a:6d:
2e:88:b8:62:d6:88:60:79:02:72:86:8e:d0:ff:1f:
45:11:b7:5b:a7:f3:45:01:74:ff:11:76:e7:36:f7:
b7:ff:e5:45:9b:6f:fa:78:3f:0e:fa:aa:b9:84:d2:
ad:9d:48:d0:ca:03:aa:28:58:84:2a:dc:2a:71:8e:
d8:fa:a2:bc:f2:ec:9c:c5:e4:b5:78:88:8f:c4:5c:
b5:a7:d0:53:c4:d0:5f:c4:31:c7:8e:5f:ae:74:e9:
2a:d0:07:71:15:cd:26:9e:03:26:19:86:82:56:61:
94:ce:77:8e:a4:7d:52:f5:7d:52:10:2e:b5:55:e4:
b5:5d:ff:91:04:27:86:4c:01:fa:e2:cc:79:f4:1d:
ba:f1:d7:72:e4:3d:69:86:67:79:52:32:05:95:ff:
79:cc:ea:38:c6:34:d1:61:7c:0c:7d:0a:39:d7:f4:
4e:ac:26:a7:c9:17:03:1a:7e:ca:09:e8:6f:50:3a:
c8:53:ff:e4:43:27:a1:24:00:e1:c3:1f:13:60:31:
d7:c5:0c:8b:ea:90:c2:9d:6e:3c:dd:8b:63:3b:99:
bb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E8:3E:37:F3:27:25:4F:9A:1E:CA:F3:1F:C9:A0:A8:AA:1B:66:A0
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Y-g-N_MnJU-aHsrzH8mgqKobZqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.116.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:27:b9:8c:8c:f5:fc:a9:66:7b:a3:6c:84:de:69:db:3e:b2:
4b:0b:d1:46:63:f5:74:32:fd:a7:da:d3:3b:a5:65:17:3b:63:
cb:08:9b:a1:ac:50:45:73:93:89:b6:e5:41:88:00:38:52:c7:
ca:7c:3a:cd:39:65:1d:64:f1:16:ad:0b:9b:21:74:bc:a9:f5:
52:92:77:e0:10:52:55:d5:e7:c7:bb:f1:7c:4a:6c:9f:04:b3:
99:ba:9d:f3:25:62:21:dd:bc:87:8b:be:03:e2:58:2e:ba:7c:
12:e1:42:5f:7a:cc:61:2e:95:26:d9:ba:47:7b:dc:75:c3:43:
c2:55:1a:9a:37:1b:50:74:48:5d:d7:24:2b:da:c4:be:4c:01:
ae:fa:cf:af:2b:f3:50:50:60:c1:73:52:b1:0d:d3:46:7f:ed:
77:b9:63:3b:1e:2a:20:28:ca:f3:2b:59:c6:3d:9a:15:56:f4:
ff:e1:eb:54:bd:bc:63:f1:82:fc:fc:66:3e:60:e9:56:2c:d3:
17:46:fe:e9:0a:d2:45:bd:31:91:46:21:ca:35:72:f3:99:7b:
77:c3:1a:dc:b4:cc:e5:d3:42:28:6d:91:8c:66:7e:ce:a0:0c:
4c:e6:17:ef:9b:f6:6c:0a:ed:d7:03:ab:dc:c0:53:ed:d3:31:
27:68:78:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org