Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/7MUBIGYLHk4ubmh3KMqqdonSu8k.roa
File: 7MUBIGYLHk4ubmh3KMqqdonSu8k.roa (raw, json)
Hash identifier: ZHXCIy0/XWLrDSbAWWcAlP2dQWSa9Zyi3hCRbm4IjKM=
Subject key identifier: EC:C5:01:20:66:0B:1E:4E:2E:6E:68:77:28:CA:AA:76:89:D2:BB:C9
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018F248ACCB010571825C0B563A1A0986C94
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/7MUBIGYLHk4ubmh3KMqqdonSu8k.roa
Signing time: Sun 28 Apr 2024 11:50:27 +0000
ROA not before: Sun 28 Apr 2024 11:50:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215133
IP address blocks: 188.93.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 05:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:24:8a:cc:b0:10:57:18:25:c0:b5:63:a1:a0:98:6c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 28 11:50:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ecc50120660b1e4e2e6e687728caaa7689d2bbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:3d:04:ad:2e:3e:1c:1b:8a:89:dd:38:f4:
08:a5:19:c5:94:3a:6e:ad:27:0a:c5:34:7a:3b:33:
4d:d5:28:96:e9:d5:7e:f1:e3:9a:44:c8:c9:b6:81:
3a:8d:1c:c8:46:7a:e7:ca:9e:ce:76:87:8b:eb:bc:
f0:64:70:1d:01:1b:d8:1a:78:3e:13:be:26:28:e1:
29:30:63:fa:36:0b:70:56:70:f1:89:8b:16:71:13:
23:d8:14:96:f4:c5:05:73:f1:bf:de:48:1b:ed:14:
87:76:23:e6:e2:eb:56:b2:e6:10:08:a9:7e:06:b6:
1c:e0:b4:51:4f:83:96:88:55:0c:f2:79:ac:1a:9c:
cb:14:50:1f:b1:8a:1b:09:ee:cd:92:6b:6c:70:23:
34:96:71:7a:7f:0d:13:93:45:2b:27:bc:b8:21:39:
72:34:28:9e:48:a8:6f:33:4f:ba:b1:68:84:88:08:
ff:63:22:a3:1d:23:81:b9:90:16:03:ba:77:8e:a3:
86:e5:ca:4b:40:7f:d7:4a:c0:a8:2f:44:13:8a:f0:
ea:45:e2:1a:53:40:fe:28:e1:40:7c:7c:e9:15:e3:
78:94:26:42:b3:d8:d2:ee:4f:a6:87:03:1d:fd:d6:
9d:3a:88:24:6e:87:da:4c:2f:6e:83:d7:d0:c2:06:
fe:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C5:01:20:66:0B:1E:4E:2E:6E:68:77:28:CA:AA:76:89:D2:BB:C9
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/7MUBIGYLHk4ubmh3KMqqdonSu8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.138.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:24:80:f0:56:8a:26:72:57:2d:be:e6:b1:a5:72:04:cf:af:
c2:c5:33:c2:dd:a2:ba:d6:71:25:93:90:0a:ef:00:ed:1b:9b:
3c:54:0c:6f:c7:de:fd:06:74:5d:3d:25:67:e3:4d:2a:e7:0e:
36:51:a1:c3:a2:b1:14:b6:ca:01:2b:ac:fc:41:0a:16:b2:1b:
46:a4:7c:d9:05:aa:2b:03:2d:86:77:8d:a7:e9:34:03:b4:e6:
ad:7a:8f:83:b1:b7:2e:20:30:fd:86:82:0a:2e:c3:b9:79:3d:
de:30:e3:d8:01:c7:68:f2:a4:4d:09:08:72:5a:9b:e6:3b:a4:
f8:3f:72:56:39:cb:5c:a4:ba:4b:87:47:c3:d0:3f:e3:49:52:
c9:28:c7:09:d2:b5:85:8f:58:2a:91:05:3a:27:62:32:8e:e6:
04:ae:a3:9c:88:c7:b6:ee:91:16:97:6e:b4:a8:89:04:c2:a1:
33:b7:6b:9c:2b:a9:23:47:b7:1c:f3:8f:b7:f5:67:18:66:69:
d2:c2:36:0f:c9:73:af:22:dc:d4:6d:ff:1a:c5:a2:ee:a2:79:
29:59:c2:f8:7d:a7:c8:6b:43:95:36:45:46:83:bd:ab:74:a4:
de:99:a8:7e:83:f9:c5:b0:6d:be:aa:95:bd:17:45:bd:59:02:
91:ae:b7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:50 2025 by rpki-client