Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/MVx5eaGm9giIegpnZJ6ge9L00xU.roa
File: MVx5eaGm9giIegpnZJ6ge9L00xU.roa (raw, json)
Hash identifier: ljGl5/NOREfhLkotUorscSf3mj8/RKVvpkmKWvZnerY=
Subject key identifier: 31:5C:79:79:A1:A6:F6:08:88:7A:0A:67:64:9E:A0:7B:D2:F4:D3:15
Certificate issuer: /CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
Certificate serial: 018573C3C35C5D8730DF69BA88BA8EF72C8A
Authority key identifier: D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/MVx5eaGm9giIegpnZJ6ge9L00xU.roa
Signing time: Mon 02 Jan 2023 18:34:47 +0000
ROA not before: Mon 02 Jan 2023 18:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49010
IP address blocks: 193.0.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:c3:c3:5c:5d:87:30:df:69:ba:88:ba:8e:f7:2c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
Validity
Not Before: Jan 2 18:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=315c7979a1a6f608887a0a67649ea07bd2f4d315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ae:80:b1:1f:ca:5b:28:af:66:6c:89:f0:e1:
27:9b:87:a1:59:31:9b:5c:cd:53:00:73:1d:0f:67:
b8:d9:49:e1:69:7b:18:94:e5:9e:5d:44:11:05:27:
c1:5b:d2:e7:96:40:f6:3b:1e:10:ed:ba:ea:06:ef:
cb:e0:7e:a3:48:7b:bb:b3:68:31:ee:0d:f7:a3:4f:
7e:d3:c7:dd:e0:93:1e:de:e5:a5:95:bc:1d:c3:a0:
fd:a2:13:80:56:82:09:64:d0:cf:40:21:0c:aa:fc:
76:3a:a7:b2:2f:84:d0:b8:d4:42:0c:bb:4b:c7:da:
a7:f0:d1:d9:47:6c:27:51:be:93:1f:a0:24:10:33:
11:9a:6f:3f:90:37:99:28:7b:5a:1a:69:8c:55:31:
04:a9:0d:09:0e:0b:6e:67:d3:21:2a:3f:df:3a:6d:
d0:1d:09:47:ca:e6:9f:ed:15:25:b4:7e:19:5b:57:
62:48:7e:35:3b:21:62:7c:12:46:0f:db:26:3e:49:
60:6b:57:6a:6e:cc:37:c5:ba:f4:8b:ae:8c:44:46:
bd:56:a4:48:1b:db:67:8b:71:b1:dd:64:c8:e5:a6:
99:ce:62:70:22:14:13:0d:a4:b7:c8:96:52:49:83:
cb:3b:c5:12:35:a5:47:09:87:cb:66:26:d7:c4:da:
8d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5C:79:79:A1:A6:F6:08:88:7A:0A:67:64:9E:A0:7B:D2:F4:D3:15
X509v3 Authority Key Identifier:
keyid:D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/MVx5eaGm9giIegpnZJ6ge9L00xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.161.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:2a:d7:8e:03:b9:06:f2:14:f1:cd:04:c2:81:6c:a1:79:4b:
fa:07:4a:0b:b4:c1:31:78:30:c4:5f:01:61:e1:3b:ee:fb:2d:
88:e2:d5:9f:e8:9a:1f:5e:8b:ba:6f:30:b1:97:5e:fc:5d:aa:
b6:6f:db:8c:38:13:80:b8:30:22:59:9f:ae:7e:bb:b8:e7:33:
7f:ea:27:c8:8b:3d:30:68:0e:74:c8:a4:e6:fe:6b:b9:51:77:
63:cb:19:3b:e2:7b:6d:d6:31:1b:06:d3:40:3a:a3:36:eb:42:
c4:29:98:60:a5:1a:47:d3:a9:c3:58:5c:12:61:33:9b:81:c3:
fd:9f:e2:47:17:ef:08:8e:13:b4:8c:42:cc:40:45:13:0a:26:
9a:13:cb:74:c1:16:27:ad:ce:80:2b:ff:d0:1e:df:3f:ed:10:
de:b2:0c:af:69:73:4e:a8:dd:46:29:df:5e:6e:9b:27:1f:63:
aa:dd:c6:1d:0a:06:e5:e0:21:17:cb:a8:4f:a4:99:d6:79:da:
3d:ad:5f:b4:58:f6:04:9d:dd:6d:1a:58:e4:ec:a8:ee:2d:43:
8f:25:58:a5:fb:d2:a5:9d:af:11:76:f9:81:50:38:2a:e0:3c:
f1:dd:fd:ba:64:34:3e:e3:28:bb:f0:01:d3:aa:af:bb:14:b4:
bd:cf:c3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:15 2024 by rpki-client on console-ams.rpki-client.org