Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/MngZ6Ubg3LgSTcvSvBPoErg1PA8.roa
File: MngZ6Ubg3LgSTcvSvBPoErg1PA8.roa (raw, json)
Hash identifier: V0JkUBr6AXpc2cuTsFBcZ/tvw+Hwf7wLCA7wUVV5HnM=
Subject key identifier: 32:78:19:E9:46:E0:DC:B8:12:4D:CB:D2:BC:13:E8:12:B8:35:3C:0F
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 01856C7833D2A244BD3539E5908484548C18
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/MngZ6Ubg3LgSTcvSvBPoErg1PA8.roa
Signing time: Sun 01 Jan 2023 08:34:54 +0000
ROA not before: Sun 01 Jan 2023 08:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12350
IP address blocks: 193.247.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:33:d2:a2:44:bd:35:39:e5:90:84:84:54:8c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Jan 1 08:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=327819e946e0dcb8124dcbd2bc13e812b8353c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bf:7e:e8:47:19:01:49:28:5f:18:f0:6b:9c:
0c:a9:70:b1:7b:1c:7e:64:57:c2:6a:37:84:7b:da:
5c:81:cd:c0:0d:69:91:12:af:11:d0:59:a0:7e:92:
5a:fe:76:d0:1d:76:b3:30:64:33:72:2d:2f:8a:70:
70:a9:cc:1a:32:9c:cd:60:a5:2f:a8:70:60:a8:ef:
8a:7c:be:cf:b6:bd:a6:3f:71:f4:ef:e2:0d:d7:4f:
20:43:31:f9:04:18:0b:37:02:bb:ac:31:42:d3:16:
ba:02:41:08:f7:c6:fa:1b:51:cf:cd:70:d9:bb:ad:
ef:0b:e2:08:45:ef:57:aa:38:e1:a1:89:72:52:46:
55:c6:9b:4f:85:8e:12:1f:41:10:6c:3e:f9:86:b3:
98:25:14:a0:80:c3:e4:bc:e9:04:65:cb:c9:5b:0b:
9b:c7:66:7e:1a:7b:be:93:b0:e2:b5:9e:86:65:27:
db:ed:9f:aa:4c:5b:82:3b:e5:95:ac:71:84:8b:8b:
c9:8c:7e:90:59:30:e6:0f:b0:06:1d:00:31:4e:09:
86:21:62:e8:b5:db:79:cf:da:95:0e:e8:9f:72:64:
60:40:9a:53:0c:a5:c7:69:af:93:af:c2:13:ed:50:
62:06:33:dc:4f:dd:b8:0b:4d:13:30:48:c2:09:e8:
10:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:78:19:E9:46:E0:DC:B8:12:4D:CB:D2:BC:13:E8:12:B8:35:3C:0F
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/MngZ6Ubg3LgSTcvSvBPoErg1PA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.66.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ec:aa:54:ed:8e:db:84:10:30:c0:84:f0:2b:b1:7a:80:d7:
94:8f:cf:e3:1e:f4:7d:9e:cf:2e:49:2e:d7:89:9f:d3:05:f8:
b3:d2:11:92:e2:c9:b5:69:38:92:73:fa:d9:8b:ea:a8:1e:82:
b0:96:82:33:29:87:88:c0:65:b6:d5:36:0f:87:5a:b4:18:34:
ac:17:de:fc:c0:f6:f2:4b:9f:e3:fb:7d:6b:e7:5d:45:3e:cd:
28:fc:c2:25:c6:0e:8d:35:02:8d:76:76:9d:c5:df:65:4c:9f:
19:90:21:73:ff:fa:ef:cd:3a:08:22:ba:58:2c:9f:dc:5d:f2:
76:7a:d1:b8:dc:5a:67:63:d6:90:8a:7c:12:7e:b5:e3:91:e4:
b5:d2:51:f8:5b:73:f6:ef:5d:50:33:15:21:73:da:d1:9e:89:
d9:a4:1a:ee:d3:a3:35:83:1f:fe:11:e2:c7:01:3e:df:82:88:
55:47:9a:d1:08:e6:d7:ae:26:88:d4:1c:55:1e:82:f8:8e:22:
d3:f3:b1:1b:81:36:7f:3c:f1:35:df:98:38:e4:9c:4c:24:67:
5c:9f:c8:70:64:0e:2e:1a:79:6a:e8:bd:f4:19:b4:3f:1c:d3:
86:bb:63:42:84:80:d7:b8:93:05:50:ea:07:fa:0c:f7:50:f0:
eb:52:8f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:18 2024 by rpki-client on console-ams.rpki-client.org