Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/MbeUsmh_p0JJSL5-zQaxxMZTYvU.roa
File: MbeUsmh_p0JJSL5-zQaxxMZTYvU.roa (raw, json)
Hash identifier: Q5Kfl1FvKMLVUS/ml1A8ot/2ppt1ojUnT+y3c1t6qAI=
Subject key identifier: 31:B7:94:B2:68:7F:A7:42:49:48:BE:7E:CD:06:B1:C4:C6:53:62:F5
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 018CAE46CCA25E067C5D8DCDF3B457ABFD7F
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/MbeUsmh_p0JJSL5-zQaxxMZTYvU.roa
Signing time: Thu 28 Dec 2023 02:35:24 +0000
ROA not before: Thu 28 Dec 2023 02:35:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64267
IP address blocks: 192.94.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ae:46:cc:a2:5e:06:7c:5d:8d:cd:f3:b4:57:ab:fd:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Dec 28 02:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31b794b2687fa7424948be7ecd06b1c4c65362f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:ce:41:e5:73:8d:c2:0a:16:13:6d:d3:6a:
12:33:71:1e:63:2d:fa:15:69:7e:db:1f:f0:7f:72:
55:67:ea:1e:66:de:22:0c:ad:f1:fe:6d:c4:fe:19:
a1:11:41:9a:6c:9a:e0:18:6d:ea:bf:6d:35:66:7c:
43:a7:67:d6:c8:a0:54:de:3f:c9:9d:88:db:7b:12:
fd:2e:d8:0f:7a:a0:55:fc:55:de:e1:d5:de:e3:76:
3a:e3:c6:46:65:5d:be:c0:62:74:06:73:94:cd:f1:
36:24:d1:99:29:aa:29:2b:61:33:5d:9e:0b:ad:ee:
4b:1f:4f:10:bc:1a:01:2d:1b:60:37:05:46:2f:ab:
fc:71:ef:ee:e7:3e:9b:18:71:9b:8b:a3:4d:be:b2:
f3:51:1e:01:f5:41:7f:5e:cd:7c:0d:46:82:0d:0e:
74:bd:ca:05:4c:12:d3:9e:a6:52:72:86:f9:2e:9e:
0b:0b:cf:e6:1c:0d:7e:09:b9:8a:5f:78:23:0b:46:
ac:49:f0:01:67:18:30:47:18:2b:72:68:13:34:ca:
63:8b:85:6a:27:39:b9:3e:aa:90:cf:03:fb:e4:b7:
2c:2e:73:eb:2b:e5:6d:33:72:af:f8:4d:3c:9a:4c:
c4:6c:ac:98:7f:b9:d3:24:3c:f6:87:a3:d6:b0:bf:
1e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B7:94:B2:68:7F:A7:42:49:48:BE:7E:CD:06:B1:C4:C6:53:62:F5
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/MbeUsmh_p0JJSL5-zQaxxMZTYvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.94.58.0/24
Signature Algorithm: sha256WithRSAEncryption
18:44:c3:3c:01:89:1b:3d:44:62:a9:16:d4:50:3b:32:20:f2:
3f:a8:25:0e:44:c0:ea:09:78:ea:70:6b:6b:57:fa:43:50:66:
bc:9e:1c:95:63:ee:e4:f1:55:48:62:28:9d:0f:75:ce:68:85:
5b:58:90:82:ea:8a:01:f8:ad:05:3c:a0:d2:5c:37:b1:15:ac:
90:b2:4e:2a:a8:5b:5c:91:ba:48:b6:f1:ce:42:30:74:16:7d:
aa:9e:54:ed:86:b1:ec:dd:11:0a:42:5a:bc:61:61:82:8f:68:
1a:61:00:85:66:4e:a4:0b:51:38:09:ba:53:a2:97:2c:26:1c:
c6:aa:87:0a:3a:eb:19:de:3c:2b:18:7a:08:58:19:1c:c4:5b:
9e:ff:c6:29:6a:6d:4b:35:13:0a:7c:18:59:2c:81:c6:77:d7:
0b:17:92:ce:64:13:40:6b:3c:ce:97:1b:9a:18:24:2c:07:d1:
f8:2e:84:b8:01:c6:97:bf:03:57:d4:30:50:03:ac:2b:bc:a9:
15:02:c0:ce:9e:36:76:e6:5a:49:fa:ee:03:ad:d7:1a:6e:27:
06:c7:7c:ee:d1:c4:70:96:ce:14:ad:35:53:68:ea:10:a3:69:
6a:a8:93:32:e5:45:1c:33:fd:23:6d:66:05:7b:58:ba:1d:ea:
95:0b:f2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:44 2024 by rpki-client on console-fra.rpki-client.org