Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/mWCHajycWd2tLmvND0gwBAwmWKM.roa
File: mWCHajycWd2tLmvND0gwBAwmWKM.roa (raw, json)
Hash identifier: +MKBt6kZJ8MZqM8pl1NviCyHb9yiK4OIhdDu/KK8GcM=
Subject key identifier: 99:60:87:6A:3C:9C:59:DD:AD:2E:6B:CD:0F:48:30:04:0C:26:58:A3
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018BFDA046AFC7139544B269CE97D7467777
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/mWCHajycWd2tLmvND0gwBAwmWKM.roa
Signing time: Thu 23 Nov 2023 19:20:21 +0000
ROA not before: Thu 23 Nov 2023 19:20:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400039
IP address blocks: 188.93.137.0/24 maxlen: 24
146.19.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fd:a0:46:af:c7:13:95:44:b2:69:ce:97:d7:46:77:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Nov 23 19:20:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9960876a3c9c59ddad2e6bcd0f4830040c2658a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ef:03:26:32:b8:4c:78:83:7a:73:99:70:bf:
98:1f:37:28:b5:2d:93:ce:cf:b7:69:64:ca:b6:bd:
3f:77:a4:fd:41:4b:fa:aa:9b:5e:4d:e7:b0:85:37:
e6:12:e9:32:f0:94:69:97:23:d6:d5:a3:c6:27:0a:
42:35:49:8c:8c:0f:9b:93:38:20:ce:95:8f:ae:c0:
80:36:78:2e:cd:cd:72:a7:2f:fb:6f:01:75:ce:f4:
e1:6c:a6:9c:97:90:e3:4f:1e:5f:52:2a:66:3b:e1:
93:b4:1b:84:23:b9:88:ef:f0:c6:b6:4c:3c:97:03:
14:6f:33:20:f3:3a:11:b3:5d:c4:49:f4:63:1d:13:
cb:5e:2b:5f:d4:cc:4c:43:70:67:75:25:4f:52:fd:
4b:73:5d:8b:7b:a6:8b:7a:7d:aa:c4:fd:e7:fa:c6:
82:16:cf:be:b2:cb:35:ee:70:84:b1:43:33:76:9a:
24:3a:5f:41:36:63:a4:fb:2e:7d:dc:29:7c:d2:13:
8b:71:ac:55:26:a1:da:1c:28:05:41:87:4e:81:74:
8a:d8:7c:5c:05:5d:ca:f0:be:33:22:de:15:5e:74:
ab:45:23:8a:5f:54:a0:7c:64:18:db:96:62:f6:dc:
e4:a6:e7:f6:2a:ff:b4:05:f5:68:92:a0:27:0d:a8:
65:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:60:87:6A:3C:9C:59:DD:AD:2E:6B:CD:0F:48:30:04:0C:26:58:A3
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/mWCHajycWd2tLmvND0gwBAwmWKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.237.0/24
188.93.137.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6b:8e:c3:fa:db:e4:28:e6:36:bd:4b:0a:20:70:b0:df:b0:
66:99:a2:98:0c:98:42:56:ab:df:70:65:e1:ec:b2:13:72:40:
17:fc:a5:0e:b3:e4:35:e5:bd:68:6e:03:e1:d7:6e:09:26:71:
8d:fc:cf:f0:4a:7a:b2:9b:85:24:43:70:6f:0e:0a:77:d9:2b:
6e:0c:a8:3b:47:86:f0:dd:3c:12:be:e9:44:af:68:11:ee:74:
c1:1b:9d:be:3b:b0:08:60:aa:22:9d:ee:2b:f9:aa:77:58:89:
13:8c:8a:ec:5e:7f:ce:c0:a5:30:1d:63:c2:ca:b1:eb:de:81:
49:d6:30:f9:97:7b:a6:61:a9:31:6b:12:6c:1e:1b:68:26:39:
9e:34:46:e9:60:39:8c:2d:fa:dd:82:f5:94:fb:00:82:46:13:
31:fe:a7:2d:cb:38:1a:44:0c:55:f0:59:2a:ff:72:f3:cf:85:
49:bd:6c:9b:33:3d:bf:08:4f:c0:40:b3:b1:fe:6d:62:3f:e0:
fb:54:09:ea:0a:4f:90:d6:1d:d1:f0:31:23:23:92:e1:01:d1:
bb:2e:af:5c:c9:a7:6a:bb:a2:45:af:00:15:89:11:be:cc:51:
36:74:cd:83:5f:b5:33:a2:39:50:53:50:96:68:bc:e5:d3:d1:
24:7c:a9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:25 2024 by rpki-client on console-fra.rpki-client.org