Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/MqZKwB5K7HrBnraLwtAb3rmQP9s.roa
File: MqZKwB5K7HrBnraLwtAb3rmQP9s.roa (raw, json)
Hash identifier: SLl2BrDjfupQDz7L4V4JXG6YqOxTirAgfW+puXuJLro=
Subject key identifier: 32:A6:4A:C0:1E:4A:EC:7A:C1:9E:B6:8B:C2:D0:1B:DE:B9:90:3F:DB
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 0191DF784D665EE1F2343A87C0E6B5C167FF
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/MqZKwB5K7HrBnraLwtAb3rmQP9s.roa
Signing time: Wed 11 Sep 2024 05:04:48 +0000
ROA not before: Wed 11 Sep 2024 05:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214982
IP address blocks: 5.102.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Sep 2024 07:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:df:78:4d:66:5e:e1:f2:34:3a:87:c0:e6:b5:c1:67:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Sep 11 05:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32a64ac01e4aec7ac19eb68bc2d01bdeb9903fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1e:d5:7a:8a:33:f6:3a:ef:59:df:3e:9f:33:
d8:9c:7e:5f:d6:eb:0e:86:60:8b:c4:ae:58:47:a7:
32:b7:59:6d:ff:02:44:2d:67:a9:e5:86:48:2f:7f:
54:c2:3e:f3:ac:6f:82:ec:08:2b:1f:54:cb:74:99:
71:96:83:ba:1d:e1:45:33:69:57:e0:73:b4:0d:3c:
22:c0:40:b2:8a:f4:bc:40:44:09:b3:7c:65:df:9f:
46:b6:b2:1b:c5:59:51:8a:de:4e:8e:5d:31:94:76:
b4:16:8c:3e:4a:11:3b:4f:7b:af:25:88:af:75:57:
91:90:e2:20:a2:ec:d4:3f:73:35:5b:7b:20:f4:29:
b7:67:bc:df:a9:d4:c2:c3:8f:1b:66:3a:79:22:06:
df:7a:1c:d6:76:9d:1c:ca:d6:a6:30:1c:b0:24:a4:
28:0c:50:7f:40:d2:2f:e5:f9:4e:4d:ce:4e:24:11:
e3:f9:dc:71:92:bb:02:46:db:e9:16:2b:76:31:7e:
a8:93:2f:ae:82:0e:83:02:7a:dd:ad:24:28:94:fe:
22:4e:78:cb:08:65:6b:b4:cf:35:8f:d9:92:a5:91:
50:fa:b3:0d:13:dc:32:c9:f0:a3:1c:72:c6:af:ac:
f6:8b:7a:a0:c3:85:7b:32:ae:17:f4:d0:73:2c:6a:
2b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A6:4A:C0:1E:4A:EC:7A:C1:9E:B6:8B:C2:D0:1B:DE:B9:90:3F:DB
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/MqZKwB5K7HrBnraLwtAb3rmQP9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.177.0/24
Signature Algorithm: sha256WithRSAEncryption
61:dc:3b:85:cc:06:0b:dc:95:62:ad:51:4c:9e:42:13:92:3f:
96:82:96:e2:ee:d6:2d:9e:d9:ee:f5:93:0c:10:11:de:21:87:
55:b9:a2:9d:14:7c:bd:33:e3:d4:fe:94:ef:6f:e3:3c:59:95:
0c:d0:af:e3:60:81:20:02:03:34:56:18:f7:35:70:a4:36:8a:
57:e8:30:60:95:c7:65:1e:1f:b4:62:db:a9:ee:39:55:44:36:
25:b1:87:88:10:2e:d8:22:7f:53:59:97:f7:03:bb:99:99:e9:
89:2f:6f:9b:84:d3:36:f7:af:ec:c6:1b:6d:f4:b1:32:9c:83:
c9:a7:a4:08:06:7d:9e:8a:59:8d:2f:f3:ad:b3:12:7f:77:d0:
18:56:03:ab:3c:c6:e8:80:21:86:2c:72:b4:5b:63:59:0e:96:
f6:2b:d8:05:1e:84:1f:8f:ac:55:c3:f1:17:f5:b8:3f:f1:54:
6e:7a:cf:c0:3e:b9:52:1b:37:ee:fd:c1:b1:e8:70:ee:af:6e:
e2:8f:96:4b:07:78:17:49:98:d7:31:73:f9:48:df:73:ed:7c:
b0:d7:89:d9:88:7e:a7:7b:9a:bb:63:d6:95:66:a2:95:c3:f5:
21:43:32:8a:76:b0:ea:30:76:b9:66:ff:1b:45:4e:b9:d5:d1:
52:7d:1e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 08:56:54 2024 by rpki-client on console-ams.rpki-client.org