Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/mveYwsla2Z_AU6du0ajZndydPFg.roa
File: mveYwsla2Z_AU6du0ajZndydPFg.roa (raw, json)
Hash identifier: NKtRHdH1uXpDuFye7hSWRPMJKLWjS0gHQpBa8rKjXmM=
Subject key identifier: 9A:F7:98:C2:C9:5A:D9:9F:C0:53:A7:6E:D1:A8:D9:9D:DC:9D:3C:58
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018A0F100F12F9A61EEB227C2DEB2ADEE93A
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/mveYwsla2Z_AU6du0ajZndydPFg.roa
Signing time: Sat 19 Aug 2023 18:30:25 +0000
ROA not before: Sat 19 Aug 2023 18:30:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.15.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0f:10:0f:12:f9:a6:1e:eb:22:7c:2d:eb:2a:de:e9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Aug 19 18:30:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9af798c2c95ad99fc053a76ed1a8d99ddc9d3c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e7:81:78:c2:7f:50:ac:18:25:c6:7a:c6:76:
5f:a4:7d:11:6c:9a:0f:aa:45:38:a1:4b:fe:a5:14:
83:6a:92:67:96:87:9d:ce:36:b2:09:6a:f4:32:4d:
f0:d9:0b:10:01:86:a2:b8:cf:40:34:9e:75:7c:63:
e1:d6:07:a7:9b:1b:f1:69:34:77:ca:50:4d:76:dd:
43:dd:36:e8:ba:e3:46:c0:f9:4b:1b:1c:94:6b:8c:
8b:63:81:8f:94:d9:f7:90:92:43:c7:d3:de:9f:a7:
45:2a:82:a6:25:ee:15:d4:df:14:fd:c5:67:cb:5a:
2b:ab:48:ee:2f:ad:32:65:21:f2:f2:18:b5:ab:d5:
22:9b:17:6b:f1:87:cb:49:2e:21:30:59:a4:4b:a0:
2a:83:07:b5:dd:34:b1:b4:87:29:4d:79:1f:32:8e:
94:c3:c9:bc:4f:09:ce:d1:09:83:25:1b:f0:df:49:
32:f0:f2:9a:f8:8f:00:e1:51:77:ca:4f:d1:14:dc:
32:36:fd:60:0e:45:f7:75:c4:2d:25:26:ae:f7:c4:
78:2a:d6:ac:65:e1:a9:05:32:5c:4e:f8:c5:0b:93:
01:07:59:f0:76:e9:42:b5:1a:8f:b7:40:b7:c0:ca:
cb:07:21:db:25:e0:d9:69:14:33:21:74:a1:b1:82:
ea:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F7:98:C2:C9:5A:D9:9F:C0:53:A7:6E:D1:A8:D9:9D:DC:9D:3C:58
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/mveYwsla2Z_AU6du0ajZndydPFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.97.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a0:e7:40:91:e7:76:92:14:90:c5:3f:69:d5:0f:b9:c3:72:
14:37:02:5f:1c:82:17:d4:e1:f0:83:0d:05:2a:3f:8d:e0:ff:
fc:aa:48:bb:55:d7:67:a7:1a:fb:3b:4c:a9:cb:c6:a7:b2:ef:
d2:02:d2:92:37:ed:51:40:01:a7:e4:24:30:02:45:83:79:73:
d9:12:f3:39:a0:29:d5:9b:92:9d:1e:84:01:65:42:91:b0:5b:
3d:2b:f6:07:a2:fc:aa:ae:e2:93:61:30:b5:92:97:c6:02:a7:
44:c5:e3:01:8a:d7:1a:a6:35:96:8f:00:e2:b0:55:83:88:c4:
5a:5d:df:47:63:a5:61:6f:13:16:21:45:28:e3:17:d6:57:c2:
c4:a4:c2:a1:29:8a:36:7e:fe:f7:57:11:8c:b7:2a:0b:35:f6:
53:db:d5:87:54:51:47:42:b4:d4:2e:b8:da:a1:73:e7:50:bc:
55:0c:96:41:ee:0d:25:17:c1:b1:89:07:52:65:5b:7e:0f:2e:
d3:c0:ae:ca:77:b8:06:10:b4:c6:cb:6b:37:a7:85:9f:95:e5:
86:75:e8:b8:12:56:0d:37:fa:b6:4c:37:f9:0f:31:fb:ff:f1:
b6:ec:ff:2a:6d:3e:5e:9a:67:09:f0:d8:76:74:6e:11:00:3c:
fd:b7:95:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:23 2024 by rpki-client on console-fra.rpki-client.org