Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EPU-MWG0f2kvm44ATo7xpvtUyrA.roa
File: EPU-MWG0f2kvm44ATo7xpvtUyrA.roa (raw, json)
Hash identifier: WsRrxeJv2h2KxJRSoEigneNa3XQPnDiKTWMfksSftlo=
Subject key identifier: 10:F5:3E:31:61:B4:7F:69:2F:9B:8E:00:4E:8E:F1:A6:FB:54:CA:B0
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01856BDCAA9FB6E1FF18495EC32CBBC88AEF
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EPU-MWG0f2kvm44ATo7xpvtUyrA.roa
Signing time: Sun 01 Jan 2023 05:45:01 +0000
ROA not before: Sun 01 Jan 2023 05:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58065
IP address blocks: 176.103.122.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:aa:9f:b6:e1:ff:18:49:5e:c3:2c:bb:c8:8a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 1 05:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10f53e3161b47f692f9b8e004e8ef1a6fb54cab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f2:fb:51:22:d4:1c:36:ff:42:bf:f2:fb:c1:
49:58:35:4d:b3:af:55:8f:c6:a9:c4:fa:45:a1:84:
2f:2c:70:02:bc:96:3e:00:c4:c7:0b:d7:73:9a:98:
14:26:3b:40:3b:07:a8:aa:92:fb:2e:48:15:2f:87:
92:d6:01:7f:68:28:c3:f7:91:94:95:cb:c9:9f:25:
26:4e:52:71:1a:2f:ad:22:ff:84:fc:1c:da:77:9a:
7b:e3:9c:e9:e9:00:65:9c:32:b9:c6:04:e4:1c:d7:
b5:fd:92:fc:f4:3f:9e:27:b9:aa:3d:c3:7f:b7:0e:
a0:ea:4c:d9:41:83:de:65:43:71:a3:0c:99:24:ed:
61:fa:f2:d8:89:b6:06:9b:43:45:10:c8:0e:30:c2:
29:14:20:5a:a6:bf:8d:2c:49:77:ea:99:ac:9b:cc:
65:a3:d1:25:cc:8a:86:3e:9e:e2:7c:22:2a:b7:73:
3c:8a:60:d2:f0:ea:0d:a4:e1:a9:aa:1c:8a:70:96:
37:40:a7:06:00:01:ca:0b:64:8d:ef:70:d3:53:f0:
c8:49:f9:c1:1c:1d:40:23:7c:cb:fb:3d:35:f4:10:
df:44:de:93:13:31:7b:d6:61:30:91:d7:71:18:db:
f3:91:12:b8:41:c7:85:8c:e0:68:9e:f8:3c:e3:30:
03:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F5:3E:31:61:B4:7F:69:2F:9B:8E:00:4E:8E:F1:A6:FB:54:CA:B0
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EPU-MWG0f2kvm44ATo7xpvtUyrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.122.0/23
Signature Algorithm: sha256WithRSAEncryption
76:53:58:fe:41:1e:20:d0:fd:a5:61:fd:64:f2:65:fd:aa:97:
ba:ed:76:86:b8:a7:07:de:46:4a:90:21:a3:10:e2:4b:36:05:
f6:c8:f2:9e:14:fb:21:40:b4:41:e8:00:9f:8d:55:f8:ca:d6:
53:78:d3:56:9c:04:45:1d:5e:c3:7e:07:a0:80:b6:72:3c:54:
59:e4:d7:22:2d:93:3e:4d:e8:c3:ab:9b:94:73:d3:e8:d0:ef:
3b:12:35:c2:ea:8f:95:ed:88:00:ff:bf:41:92:fd:a1:21:b8:
5a:23:9c:87:07:8e:c5:6e:08:12:04:65:2a:25:35:0e:36:6e:
27:f2:62:cd:84:7a:4c:4c:85:81:35:82:ed:72:94:af:db:be:
70:19:36:5c:de:67:17:73:4e:62:7f:2a:82:69:b9:aa:d2:39:
8f:b6:32:d1:e4:5c:b1:37:9c:45:62:a7:d9:35:3b:fe:53:71:
f6:4c:35:c1:92:81:0d:e5:13:49:7d:31:68:30:ea:31:71:56:
c0:9e:2a:4e:d0:32:9f:11:5d:c5:4b:d0:0a:db:67:e8:7e:19:
20:f6:10:c1:52:76:9f:79:90:b2:dc:3b:fe:2a:47:2c:25:47:
46:55:34:b4:c0:ba:df:54:3d:ba:50:97:0e:fe:40:b0:0f:93:
a0:b8:0c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:10 2024 by rpki-client on console-fra.rpki-client.org