Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/rM0J0w7-Xy-7AJJFp1VCY51sFBw.roa
File: rM0J0w7-Xy-7AJJFp1VCY51sFBw.roa (raw, json)
Hash identifier: TCzkn4dRXTywAeSEkG+IVArN7hzhhnnku+Z55m3ljDE=
Subject key identifier: AC:CD:09:D3:0E:FE:5F:2F:BB:00:92:45:A7:55:42:63:9D:6C:14:1C
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01856DEF7616BC6A250CC1FEFD7D9D386BB3
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/rM0J0w7-Xy-7AJJFp1VCY51sFBw.roa
Signing time: Sun 01 Jan 2023 15:24:47 +0000
ROA not before: Sun 01 Jan 2023 15:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201143
IP address blocks: 193.59.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:76:16:bc:6a:25:0c:c1:fe:fd:7d:9d:38:6b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 15:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=accd09d30efe5f2fbb009245a75542639d6c141c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:47:03:4c:24:0a:3e:ca:e8:d2:66:19:de:
d3:0d:c0:72:78:35:d7:d9:00:b3:e1:d6:b6:14:83:
e9:99:56:0a:04:09:0c:b1:cd:48:6f:70:9d:6c:7c:
9f:89:82:29:eb:3f:08:7a:1c:8e:a9:48:6f:e6:20:
1c:58:06:69:f5:34:9a:43:01:21:08:5a:73:e6:00:
93:41:84:3f:4a:79:fa:e2:4f:8b:ee:be:e3:2a:8b:
aa:c7:1a:fd:27:04:0d:9d:90:e4:f0:58:a8:99:c0:
33:c5:e9:f1:24:f8:6a:81:c2:df:69:ee:25:47:05:
3b:b3:56:2e:a2:32:ba:d4:0a:75:5c:c1:60:78:a8:
9e:b5:60:ec:ba:23:9e:57:72:c8:11:e9:bf:50:90:
4f:ca:94:19:d1:3c:29:98:a4:1f:49:ca:0e:3e:a8:
49:88:c1:d7:12:f3:60:25:03:aa:63:11:e2:93:68:
0b:1b:8f:76:9d:35:14:49:06:bd:47:fb:85:0f:c7:
9b:5d:8d:66:5d:57:6f:02:6e:9b:82:60:f5:64:77:
a9:72:bd:c4:80:39:2e:31:86:4e:d0:4b:be:f5:ba:
99:72:f5:24:73:0b:0f:07:80:d9:ce:91:d1:62:d3:
25:29:88:2c:29:72:5e:28:9b:b7:61:69:94:21:3b:
a4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CD:09:D3:0E:FE:5F:2F:BB:00:92:45:A7:55:42:63:9D:6C:14:1C
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/rM0J0w7-Xy-7AJJFp1VCY51sFBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.96.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:d1:91:2a:49:58:17:3e:81:b8:3f:67:d9:82:75:4d:48:90:
a0:a2:dd:14:fd:b7:a3:4b:53:68:d1:df:62:57:fe:1a:93:c1:
87:41:1d:e5:30:50:74:bb:7e:0a:07:91:0f:b3:d5:3f:d4:d3:
e1:1e:d7:77:b3:a6:08:84:a8:b9:03:9b:4b:63:a2:4b:e9:ad:
c1:d2:1f:66:d3:64:d2:3f:a5:28:87:f7:cb:c8:f1:c1:33:f9:
a7:05:7f:20:ee:74:0c:f9:78:3f:78:7c:58:44:85:79:44:fc:
bf:34:fb:f9:5e:40:8f:b8:cb:7d:12:6b:10:56:14:c1:3a:4f:
8f:4d:8c:d2:4d:5a:c0:a1:98:65:01:57:fe:31:97:10:25:3f:
fc:3d:b1:12:78:d3:cc:69:33:a4:98:c7:d5:ad:3c:3c:64:de:
36:44:87:60:31:fa:25:de:d4:ed:2e:0b:02:20:02:23:0d:63:
19:30:1d:6f:88:d7:f2:b4:78:32:d1:48:c6:cb:9c:a0:f1:7a:
b1:c9:e8:de:69:3f:f6:4e:6e:b5:06:a3:e4:32:84:de:e4:8a:
1d:8d:01:6a:50:15:b1:36:3a:1d:ba:2e:e6:84:b5:0e:f1:3c:
41:ae:01:f7:a8:b3:b3:95:c0:3f:00:30:7f:23:29:b2:80:4b:
80:86:28:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org