Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/MYezOm_IS6Fd1Qhv3pvWw65HRRI.roa
File: MYezOm_IS6Fd1Qhv3pvWw65HRRI.roa (raw, json)
Hash identifier: KG1V44neVC0Tjpqk/esm9FUYIdviqoWAtwwaKb9z6tg=
Subject key identifier: 31:87:B3:3A:6F:C8:4B:A1:5D:D5:08:6F:DE:9B:D6:C3:AE:47:45:12
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 01856F42D6B557054645BA01D436E7802504
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/MYezOm_IS6Fd1Qhv3pvWw65HRRI.roa
Signing time: Sun 01 Jan 2023 21:35:29 +0000
ROA not before: Sun 01 Jan 2023 21:35:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61341
IP address blocks: 193.27.212.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d6:b5:57:05:46:45:ba:01:d4:36:e7:80:25:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Jan 1 21:35:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3187b33a6fc84ba15dd5086fde9bd6c3ae474512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:50:30:45:57:55:1f:ed:94:93:4b:98:ab:fa:
ea:4c:cd:32:e8:52:69:36:8a:86:33:ff:f5:06:c6:
2a:be:4b:c3:ec:b3:38:f0:1d:e4:50:2f:45:f4:8a:
00:2d:db:37:bc:83:61:ea:33:84:91:2e:22:c0:6d:
9a:a0:57:d6:7f:65:2f:7a:5a:87:fc:a4:38:29:a1:
e1:e9:71:0e:2b:ea:17:16:86:df:8c:55:6a:06:a8:
18:f6:9e:a5:8b:86:af:43:df:1e:47:24:5a:f8:8f:
ae:e9:ee:96:66:1f:d8:69:6a:cb:86:cc:42:a2:51:
33:7f:58:22:fb:de:ea:2c:f5:60:c2:8a:d8:44:9b:
8b:fe:f9:5a:38:df:56:77:09:bc:01:d1:d2:8a:4d:
ba:2d:1e:03:9c:00:2b:2a:45:fa:de:8b:60:2b:fd:
6e:5f:b6:e3:f2:30:d1:2b:d2:fc:13:ed:3b:15:b5:
35:bc:3c:be:dc:21:bb:1a:0e:5a:8e:c5:b0:e9:28:
3d:7a:57:fc:67:df:47:02:1d:15:ac:ab:4e:db:f6:
e2:e5:52:30:50:10:99:a0:8f:66:79:f0:5b:ad:e4:
e6:6c:7d:ce:55:ee:1f:6d:60:9b:22:20:a1:fb:7b:
d5:d7:9e:4a:27:f9:99:11:ba:43:f5:66:7f:7f:b9:
3a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:87:B3:3A:6F:C8:4B:A1:5D:D5:08:6F:DE:9B:D6:C3:AE:47:45:12
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/MYezOm_IS6Fd1Qhv3pvWw65HRRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.212.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:bc:d9:4f:93:ec:65:91:c2:e4:b4:66:48:7f:2b:19:76:21:
eb:b6:b4:0a:17:2b:2c:1d:51:07:43:74:85:aa:a5:d4:5f:ac:
13:30:cd:52:71:4a:8f:d8:ec:34:4d:1a:df:10:51:bd:71:78:
7c:88:c6:f6:49:54:e9:a2:95:38:b5:14:d4:38:e6:1c:be:8c:
09:52:f4:cf:b9:2e:47:51:2c:31:0e:75:0b:93:11:f1:c1:70:
c7:ac:d3:30:a8:ee:d2:d8:eb:d5:cf:b0:8e:70:18:2b:98:78:
ab:9e:3c:54:1b:b4:4b:10:fe:3c:4c:5c:e5:af:a1:ed:4b:e9:
c1:c7:75:f7:69:b4:4f:40:dd:5b:08:8d:16:82:a7:49:13:00:
1b:38:a2:68:12:d7:43:83:72:0e:28:8f:39:c4:a6:84:ca:4d:
04:ec:9c:f4:97:6a:92:56:93:a5:50:4c:db:29:5d:d8:87:11:
ee:16:d2:48:48:d5:35:a4:fe:74:f7:fd:09:46:d4:bd:8e:79:
59:5c:c1:35:bf:e9:cd:d0:fe:db:9a:1a:1a:c4:db:d2:de:43:
0d:c1:7b:ff:a0:51:6d:5c:44:07:49:bb:cb:9c:af:39:2a:c1:
d7:f9:89:10:1b:00:a3:54:a2:dc:07:15:ca:af:2a:73:56:c4:
f0:e3:89:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:08 2024 by rpki-client on console-fra.rpki-client.org