Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Mqktnq_aFzn5pH26i_RHe_GitmU.roa
File: Mqktnq_aFzn5pH26i_RHe_GitmU.roa (raw, json)
Hash identifier: QPoZa7IRKoN0DPOL7EGPz65b8BJcw+xqQu+Dg3uN52I=
Subject key identifier: 32:A9:2D:9E:AF:DA:17:39:F9:A4:7D:BA:8B:F4:47:7B:F1:A2:B6:65
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018CBAAF46BC7AF1E6E5A54ABEA8737B4DC4
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Mqktnq_aFzn5pH26i_RHe_GitmU.roa
Signing time: Sat 30 Dec 2023 12:24:58 +0000
ROA not before: Sat 30 Dec 2023 12:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210107
IP address blocks: 188.93.138.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ba:af:46:bc:7a:f1:e6:e5:a5:4a:be:a8:73:7b:4d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Dec 30 12:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32a92d9eafda1739f9a47dba8bf4477bf1a2b665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:17:2a:a0:29:22:09:aa:a4:75:f1:fc:ae:86:
24:32:3b:3b:66:89:0e:48:66:83:92:ea:bb:cf:4c:
f3:83:96:49:f3:78:89:cc:3f:dc:49:95:68:22:fd:
f7:ee:46:73:e9:5b:19:61:84:15:6d:b5:42:75:4e:
94:11:db:bc:68:a5:07:d3:90:9d:8d:86:d2:01:dd:
0e:c2:1e:96:30:4c:33:4f:8b:97:7b:96:99:ff:a5:
4f:9b:91:9c:d1:70:ab:d9:5a:42:8c:7f:3b:4d:f2:
63:aa:d1:fd:50:5b:f6:62:f0:3b:22:15:d5:6d:16:
53:03:81:44:35:92:c4:fe:6c:36:7c:d1:e5:a9:8d:
a5:cd:0e:ce:c1:9f:e5:66:a5:dd:f1:31:a2:58:25:
92:14:7f:65:f5:85:8d:c5:1e:6a:8a:21:c2:b9:ba:
8d:ca:7f:7b:25:43:a9:91:7b:ac:ca:0c:3c:f0:ae:
2c:08:d0:36:41:fe:4a:00:cb:1a:da:ad:77:7b:6b:
4e:de:12:d8:63:2f:76:87:c7:6e:82:94:21:75:7e:
e5:b5:6d:ca:73:d2:93:17:71:ec:65:bb:b7:c3:f7:
28:12:2a:7f:d4:36:71:52:ab:5d:99:05:00:82:ec:
8c:8a:ad:a0:fa:75:b2:07:74:b5:08:90:ac:c3:04:
79:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A9:2D:9E:AF:DA:17:39:F9:A4:7D:BA:8B:F4:47:7B:F1:A2:B6:65
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Mqktnq_aFzn5pH26i_RHe_GitmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.138.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:bb:fd:58:10:ba:08:ce:55:f6:50:e5:01:6f:8f:79:7a:02:
74:92:70:a2:62:15:b5:da:34:a4:5a:82:3e:3e:cc:a9:43:35:
26:ea:b7:b7:fb:38:9c:f7:48:7b:fd:36:d3:ba:f0:76:1a:29:
60:61:d1:60:52:92:4b:65:94:37:e7:79:7e:fd:04:dd:83:a7:
4b:7a:4f:9d:60:0b:8b:ba:f0:66:79:bf:ee:ca:59:e3:e6:5a:
60:ac:61:12:4e:89:d1:c7:8e:b3:b5:12:b7:ef:2a:ba:cc:fc:
57:d4:36:d2:6a:0a:de:5b:d7:a0:79:e4:bb:c7:03:a6:05:e8:
89:1c:bb:95:cd:1c:35:40:ff:8a:9b:d2:99:d0:84:75:45:11:
a5:94:ba:81:56:9c:82:e9:21:30:80:11:8c:6c:5f:37:54:ae:
df:86:56:62:d6:33:1e:14:6c:5d:e2:0e:de:23:ed:f1:86:18:
e9:28:a7:38:dc:10:80:5c:8b:ed:1e:f6:29:2e:d8:1d:7e:b5:
9e:07:b9:19:33:74:69:66:c4:78:13:9e:15:94:b2:49:d7:a4:
4b:c8:cc:b2:9d:45:59:5c:74:8d:72:45:1c:60:2d:25:6f:34:
50:a1:c6:e0:3f:40:64:b9:32:6e:d6:77:c7:6b:32:60:64:2d:
d6:57:4b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:25 2024 by rpki-client on console-fra.rpki-client.org