Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/Mp_PQWkoqzYtRFxxUPFiq8fwsE8.roa
File: Mp_PQWkoqzYtRFxxUPFiq8fwsE8.roa (raw, json)
Hash identifier: YHnIXJHJH4Pkx0RRLqM+h3h33Z2oNq/mAipXmqqx37Y=
Subject key identifier: 32:9F:CF:41:69:28:AB:36:2D:44:5C:71:50:F1:62:AB:C7:F0:B0:4F
Certificate issuer: /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial: 01856EA68209EEED3E3BE84EF00A98284844
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/Mp_PQWkoqzYtRFxxUPFiq8fwsE8.roa
Signing time: Sun 01 Jan 2023 18:44:44 +0000
ROA not before: Sun 01 Jan 2023 18:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10010
IP address blocks: 193.151.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:82:09:ee:ed:3e:3b:e8:4e:f0:0a:98:28:48:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
Validity
Not Before: Jan 1 18:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=329fcf416928ab362d445c7150f162abc7f0b04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:7f:47:9a:16:01:5e:39:38:40:71:65:8e:
45:5b:77:15:7e:96:91:62:a1:2b:12:a1:04:45:06:
31:55:14:3f:1d:33:40:83:5b:f1:49:66:89:b2:93:
37:db:29:1a:b8:b1:fa:b6:ae:29:48:e9:ec:a9:76:
e3:d4:8d:d4:8b:2a:89:5f:b0:0d:fc:ef:6f:34:d3:
a1:ef:01:5e:7a:90:03:e3:52:01:06:9a:9b:11:4f:
97:72:4f:f6:0b:bf:a9:78:d7:bf:71:75:c3:b8:cd:
1b:3e:66:72:d9:74:1c:91:23:1a:f8:8a:87:4f:4b:
da:dc:e4:bf:4f:65:64:40:18:17:06:81:db:4e:79:
cf:ca:3a:1b:a1:ed:c6:fd:c3:06:a7:2c:9b:71:57:
0c:8c:67:7b:65:84:e3:c3:cd:85:0e:c5:68:e8:de:
41:5e:83:69:a5:11:8a:3e:5c:6e:89:58:8b:29:98:
3e:c3:10:1f:83:fb:e0:2d:a7:1e:ed:ef:20:b9:0f:
98:46:f7:40:a7:06:8c:9d:33:c5:f1:20:d3:10:4c:
a9:86:4f:75:68:23:72:0e:d6:aa:d3:e0:93:4b:c3:
40:4a:bf:ba:9a:ff:fa:a9:4f:06:1b:3d:e1:e0:43:
c8:9b:f0:db:20:88:e0:32:72:5c:25:c1:dd:2c:05:
dc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9F:CF:41:69:28:AB:36:2D:44:5C:71:50:F1:62:AB:C7:F0:B0:4F
X509v3 Authority Key Identifier:
keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/Mp_PQWkoqzYtRFxxUPFiq8fwsE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.111.0/24
Signature Algorithm: sha256WithRSAEncryption
46:dc:aa:15:05:fd:fb:6e:e1:20:ae:4c:b7:ef:bf:28:81:a1:
05:85:31:b8:4a:6f:b8:39:23:23:12:37:f9:b1:24:03:d6:c9:
17:62:f1:e0:04:d3:c1:ba:32:8a:0b:fe:77:6f:84:3f:8c:d5:
d8:84:47:d8:f4:c7:4a:84:5c:27:1d:c9:40:83:a8:0c:10:cc:
f1:fc:9b:df:f6:57:51:85:a1:dc:f0:10:98:70:d0:82:41:e3:
c2:b9:1e:fd:e7:f8:6d:4c:04:8a:b5:ea:87:0e:7d:7e:23:a3:
98:35:7e:bd:7c:8f:d3:79:0f:b3:72:9a:1f:1b:63:3b:b5:78:
cb:94:d8:e7:31:3a:7e:24:8a:d9:ec:e7:65:b7:5e:24:42:ae:
e2:41:0f:68:37:cd:15:c2:1a:50:91:98:c2:a8:fd:db:11:c8:
07:a4:9d:28:e0:18:92:bd:1d:19:aa:4e:d3:6f:c3:bf:40:c1:
d2:23:6f:8d:9c:02:f6:66:4e:30:26:95:e9:99:bc:cb:c6:27:
0f:22:0c:39:27:23:fb:3b:61:74:f0:75:28:e0:e1:de:19:73:
a1:c3:1f:c0:58:ce:26:3c:df:67:cd:2c:73:1c:23:15:a8:be:
07:c8:9e:76:30:7c:1a:d5:55:0d:7e:70:b2:2c:7d:2c:8f:4b:
84:a9:80:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:19 2024 by rpki-client on console-fra.rpki-client.org