Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/Mp-3TksUKF9EFEb4-XHJKmcB_NU.roa
File: Mp-3TksUKF9EFEb4-XHJKmcB_NU.roa (raw, json)
Hash identifier: jhgrLywq44KBmg5c/xFHrGuhbr920lSnIgRlQ7c4kzE=
Subject key identifier: 32:9F:B7:4E:4B:14:28:5F:44:14:46:F8:F9:71:C9:2A:67:01:FC:D5
Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial: 01885218523ED5BEA714D14173C86088CFBB
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/Mp-3TksUKF9EFEb4-XHJKmcB_NU.roa
Signing time: Thu 25 May 2023 08:48:25 +0000
ROA not before: Thu 25 May 2023 08:48:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205297
IP address blocks: 178.236.138.0/24 maxlen: 24
193.32.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:18:52:3e:d5:be:a7:14:d1:41:73:c8:60:88:cf:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Validity
Not Before: May 25 08:48:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=329fb74e4b14285f441446f8f971c92a6701fcd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ba:09:33:07:7d:e1:0b:44:4a:27:b6:21:0f:
89:67:16:02:d6:d4:f3:4b:57:72:11:5a:69:84:0c:
34:5b:08:26:f1:07:d6:1a:78:18:fa:77:9b:ed:79:
c8:d1:00:dc:df:26:84:60:50:cc:28:77:16:c1:5d:
20:23:35:66:b6:d6:0f:d8:43:10:e4:f0:0d:1a:cb:
a2:2f:81:cf:44:3c:d8:1f:d7:71:7c:85:02:d0:2c:
f1:65:f4:c0:77:b1:db:92:15:f1:bb:96:16:46:f7:
91:8d:7d:8e:cf:c3:d6:52:77:49:e3:ef:e1:ab:7a:
55:86:68:ce:a5:6a:95:e6:1c:9a:6c:9c:77:06:9d:
52:f7:6d:df:c9:4a:54:3e:41:ab:0c:53:b2:ab:7b:
a9:c0:3d:39:69:37:e2:b4:2f:97:40:19:a9:5c:68:
00:c4:c9:e7:8d:d5:5e:10:29:19:2b:37:ef:22:0f:
0d:24:4c:b7:f7:70:a0:5b:92:6c:c7:ad:ba:0f:df:
e7:f8:b8:0e:15:21:6c:c7:d4:d2:74:9d:8a:84:be:
f9:6a:1c:e8:66:15:6c:24:f5:aa:00:b4:69:ee:91:
d0:79:7d:6d:93:36:f8:6b:22:e3:b8:ac:15:c5:2b:
9a:b7:74:78:8e:03:b5:fc:40:f5:22:c7:3d:bc:1a:
ec:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9F:B7:4E:4B:14:28:5F:44:14:46:F8:F9:71:C9:2A:67:01:FC:D5
X509v3 Authority Key Identifier:
keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/Mp-3TksUKF9EFEb4-XHJKmcB_NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.138.0/24
193.32.200.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:dd:74:77:9d:7e:a1:38:60:b1:fc:ac:23:cf:17:2c:9a:10:
6c:69:8f:07:88:a3:f8:98:5f:da:75:d0:f8:ac:89:da:f4:40:
b7:39:9c:7c:83:9a:fe:fe:c4:48:7c:13:fb:6f:70:e2:5e:d1:
4e:32:46:79:39:6f:97:43:74:40:79:81:9a:06:ee:a0:b5:8a:
82:ae:19:be:81:44:03:7d:b8:b2:0f:83:e9:a3:8b:73:c1:42:
15:bc:e9:95:48:ab:f7:82:d6:47:ca:f9:27:5f:7c:7c:86:1b:
25:d6:e7:a5:29:10:01:7b:e7:46:6b:de:24:9e:03:df:c9:48:
95:d7:c4:31:d6:dc:7b:b8:b5:98:49:28:27:c5:21:a6:b7:33:
de:25:15:fa:7b:c7:bb:88:90:01:f5:12:c9:a3:70:86:04:35:
97:b3:e0:af:dd:2e:fb:b8:1d:62:39:db:14:ec:a0:26:a4:f1:
c7:8e:2a:e7:c5:a9:37:81:ec:c6:12:d0:76:db:8e:91:95:3f:
37:81:bc:66:62:40:7d:8b:f4:6c:62:60:9d:d3:aa:32:5c:34:
3b:f2:68:f0:d2:ce:89:5c:9b:b9:1d:3d:58:8d:ed:a5:16:2d:
d0:b7:87:93:2b:97:b4:ec:09:43:69:e8:0d:bb:63:df:5a:aa:
7f:95:a8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:16 2024 by rpki-client on console-ams.rpki-client.org