Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/MjjGHWbi1vn16xlNu3g8SdplfKg.roa
File: MjjGHWbi1vn16xlNu3g8SdplfKg.roa (raw, json)
Hash identifier: jah9JJYpoE9PjATp9R+zx1X1bX12L6NWWX9+QHaZK4M=
Subject key identifier: 32:38:C6:1D:66:E2:D6:F9:F5:EB:19:4D:BB:78:3C:49:DA:65:7C:A8
Certificate issuer: /CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
Certificate serial: 0185A4FC677FC9A572F9A5E1E86923ED3CDA
Authority key identifier: E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/MjjGHWbi1vn16xlNu3g8SdplfKg.roa
Signing time: Thu 12 Jan 2023 07:58:03 +0000
ROA not before: Thu 12 Jan 2023 07:58:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 193.8.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a4:fc:67:7f:c9:a5:72:f9:a5:e1:e8:69:23:ed:3c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
Validity
Not Before: Jan 12 07:58:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3238c61d66e2d6f9f5eb194dbb783c49da657ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:15:71:7f:d7:fd:c8:7b:3b:e3:1c:e0:18:
97:7a:63:33:58:61:4b:f1:06:36:41:a1:cc:84:68:
f3:52:7e:97:fd:6c:29:ef:cb:e3:cd:d3:dc:d2:b6:
7b:13:fa:b0:72:b2:3a:e7:9c:4a:20:c8:21:42:20:
c4:d2:49:ea:f1:07:cb:37:17:d5:c4:f2:d2:ef:4c:
ec:56:7e:e5:c3:e3:98:5f:5e:ff:b8:55:c7:ab:9b:
7d:ce:27:c2:74:c7:4e:00:2e:69:42:ed:eb:f2:83:
4c:e1:d4:ad:e8:45:29:1e:00:05:e7:70:35:c2:28:
13:60:73:30:86:9a:f9:f1:9a:c0:48:2e:7c:dc:3b:
82:a6:39:97:d7:e8:98:7c:4f:ba:89:4f:af:d3:81:
16:5c:ee:96:8c:e8:e5:d0:90:88:34:f3:fb:3e:fb:
8b:8c:a0:93:78:4d:7a:bc:d3:fd:fe:11:41:9e:20:
19:6a:b9:77:7f:c8:65:4b:91:ed:99:d4:b4:75:5b:
73:df:d0:b9:40:b4:65:a3:94:89:22:3a:ca:c5:a0:
fc:65:d0:4a:ff:25:d1:f1:da:9b:27:d9:f5:3c:ec:
41:47:d5:92:61:d8:93:d2:cc:4d:a5:2e:71:3e:2c:
bd:fd:de:14:91:05:0e:8d:ec:b4:96:cd:14:63:02:
1f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:38:C6:1D:66:E2:D6:F9:F5:EB:19:4D:BB:78:3C:49:DA:65:7C:A8
X509v3 Authority Key Identifier:
keyid:E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/MjjGHWbi1vn16xlNu3g8SdplfKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.170.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:eb:3b:f6:15:12:f0:4e:53:05:a5:e3:92:fe:6a:8b:30:7d:
2b:ae:c5:9d:bb:6d:d0:33:de:63:ca:1e:c1:06:69:5d:d4:5c:
35:62:82:1b:f9:a3:8e:91:e6:65:0d:b5:ee:9c:9f:93:7f:57:
de:5f:fc:7a:b1:a0:22:d2:db:af:0d:c0:6e:f6:36:3d:ac:5d:
8a:de:da:fd:75:ec:ad:53:5c:30:27:87:3d:07:b3:94:5d:e6:
3e:03:c4:8f:0f:d1:26:9b:46:e9:d3:68:18:32:2a:c9:3d:b2:
03:04:26:a2:3a:a1:a2:9e:23:49:50:72:61:74:27:55:a3:11:
ed:d7:b5:a6:05:51:af:f7:c6:b2:c6:2a:50:aa:a3:81:9e:5d:
ba:da:85:4d:97:53:86:b2:65:f8:6c:bf:2a:a1:60:7f:5b:66:
fd:96:9d:64:9f:9b:5d:6e:4d:f5:9b:89:5d:b8:cf:98:a9:07:
73:a5:fd:36:f8:b3:2a:b3:fc:e6:3e:c9:57:b0:c9:9a:31:2b:
a8:e7:b4:93:33:28:d9:3e:3b:e2:97:29:ad:07:fb:f4:84:f4:
1b:f6:dd:72:ef:db:9d:ad:9e:f4:48:99:07:3c:b0:3b:fd:98:
00:24:1b:5d:b3:77:da:f9:d6:ce:9d:1a:93:f8:9e:e9:88:70:
1b:74:ec:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:47 2024 by rpki-client on console-fra.rpki-client.org