Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/mFzc2qjkRSuK6hv-0sJfYtgO4zA.roa
File: mFzc2qjkRSuK6hv-0sJfYtgO4zA.roa (raw, json)
Hash identifier: IOsYOEmmRF/Sac4v9oECbhWNw7g913sDwkLsjG4y87U=
Subject key identifier: 98:5C:DC:DA:A8:E4:45:2B:8A:EA:1B:FE:D2:C2:5F:62:D8:0E:E3:30
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018CC2DB305783FA6C4342EF84D2F21EF068
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/mFzc2qjkRSuK6hv-0sJfYtgO4zA.roa
Signing time: Mon 01 Jan 2024 02:29:53 +0000
ROA not before: Mon 01 Jan 2024 02:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.209.140.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:30:57:83:fa:6c:43:42:ef:84:d2:f2:1e:f0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=985cdcdaa8e4452b8aea1bfed2c25f62d80ee330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:c8:7c:d6:70:15:d2:41:21:69:7c:df:c3:
b4:96:7a:67:be:ac:ac:e8:1d:4b:3c:0e:d0:40:d7:
17:2b:49:02:fb:ce:5d:8e:ef:be:98:72:c4:70:02:
27:74:90:b9:7d:20:47:5a:d8:a4:9e:aa:ec:c7:b5:
92:d0:bd:71:ff:db:f2:b9:37:63:14:99:00:72:70:
36:c8:12:fa:2e:ee:0e:c1:f8:a6:d3:ae:4e:e8:d7:
2a:f6:da:f5:17:b6:36:16:6a:6d:b9:dc:66:af:1b:
c2:95:e8:1d:9c:0b:6a:bd:99:ec:ec:fe:5b:83:11:
5f:14:58:d8:78:a8:65:62:21:f4:8c:76:a1:e0:75:
49:11:14:66:2d:59:14:73:68:2f:e1:0d:bd:ee:e9:
34:b5:cd:6f:43:35:22:05:84:db:3f:a7:a2:cf:e9:
62:c3:a0:e8:6c:b8:73:34:1f:23:bb:8d:e5:c4:76:
c1:02:13:81:80:c8:ff:97:69:6e:2d:22:f6:85:fd:
9e:5e:0d:bd:93:f4:5f:f2:87:38:78:1c:85:78:7f:
e0:cd:4e:d9:57:92:7e:e8:01:7f:a4:d7:9e:e0:71:
a1:0e:74:a5:5c:cb:c5:34:89:8e:2e:a1:10:79:06:
0e:d2:c9:db:71:05:53:53:ab:8e:3d:97:07:70:de:
b7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5C:DC:DA:A8:E4:45:2B:8A:EA:1B:FE:D2:C2:5F:62:D8:0E:E3:30
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/mFzc2qjkRSuK6hv-0sJfYtgO4zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.140.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:bc:b7:05:cf:74:a1:4a:23:cd:d1:a5:98:a9:c2:1f:96:ca:
75:a0:65:07:67:94:11:4e:8e:e8:76:d4:fa:ff:5a:f2:73:03:
d7:c3:15:49:f9:45:86:4f:4a:b8:86:3e:cf:40:50:4f:ee:da:
81:58:f6:15:62:30:47:71:c2:e4:61:ee:af:2e:2b:2b:6b:e8:
6c:ff:15:21:fb:52:0a:9c:bc:da:36:e0:81:a4:e5:9e:87:a4:
67:46:92:6d:e2:f1:11:11:23:a9:7e:a4:6a:19:6b:b0:44:ea:
61:95:ca:0c:d1:4f:79:68:61:d2:de:8c:d2:1b:94:3f:00:8e:
5c:2d:c2:91:20:6b:85:7b:a5:0f:49:ab:64:0b:ee:b8:0d:58:
47:18:dc:fb:0c:3e:31:a9:9d:16:ff:0b:13:14:4d:19:ad:5d:
7c:2d:68:00:99:c7:41:38:b2:cf:5f:6b:df:88:71:cb:39:73:
29:cf:09:d1:58:89:6e:10:de:e7:91:52:9d:41:99:5f:e3:65:
75:17:6d:63:d6:a9:1a:4f:e4:5f:41:87:6f:e9:8d:9d:eb:51:
92:4c:5d:7c:1c:d3:86:b0:0a:8e:da:d4:83:f0:c1:f2:60:d4:
13:4a:1b:ca:e2:f9:f2:0e:12:fd:6d:06:2e:94:1c:e0:2f:0c:
fe:03:5b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:26:45 2024 by rpki-client on console-fra.rpki-client.org