Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/mwK5Vl_mzCyCT7Q8PdVJVIob6iQ.roa
File: mwK5Vl_mzCyCT7Q8PdVJVIob6iQ.roa (raw, json)
Hash identifier: NuuGDY+V2SlN6ToXovFx5xESKCGLFRDLepTgzUR3XcQ=
Subject key identifier: 9B:02:B9:56:5F:E6:CC:2C:82:4F:B4:3C:3D:D5:49:54:8A:1B:EA:24
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018B7394E8E5B424EB808B423737753EE4E7
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/mwK5Vl_mzCyCT7Q8PdVJVIob6iQ.roa
Signing time: Sat 28 Oct 2023 00:00:20 +0000
ROA not before: Sat 28 Oct 2023 00:00:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.15.98.0/24 maxlen: 24
188.209.140.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:73:94:e8:e5:b4:24:eb:80:8b:42:37:37:75:3e:e4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Oct 28 00:00:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b02b9565fe6cc2c824fb43c3dd549548a1bea24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:25:75:1e:1d:8b:4a:3d:bf:3c:a2:fa:2a:bf:
da:84:73:b5:18:ff:bd:9f:b6:75:7e:55:90:c1:0d:
9a:3e:72:5d:69:48:46:7c:71:bf:ce:ee:c5:8b:24:
4f:5b:1c:53:47:ba:2a:ad:e6:05:c5:05:a0:f5:55:
31:70:5c:bc:3b:cc:53:ed:8c:07:9a:80:60:4d:81:
69:a0:a6:76:07:8b:dd:c0:7a:1b:e5:87:97:de:e6:
43:25:fd:ad:6a:d4:60:33:14:f5:00:1a:ba:31:e0:
5c:fc:56:19:65:7f:62:0d:6b:c1:56:71:00:c8:0d:
f4:cc:d1:16:0c:6c:18:a5:15:94:20:f2:df:9c:79:
85:82:90:7f:b3:30:ac:81:2f:1b:6b:b2:03:3c:39:
95:09:4d:22:c8:13:b3:c9:89:6f:9d:de:e2:e7:56:
4c:02:36:31:44:50:9b:07:d9:c7:27:36:97:38:76:
77:cb:76:23:50:6d:43:07:34:5c:d0:78:a3:a1:ad:
a2:84:da:61:36:12:16:9d:60:ac:b7:4e:d7:80:7a:
d4:73:89:22:da:62:d6:ff:62:8c:a2:30:e7:c8:06:
75:e7:e4:e7:3c:71:46:24:d5:32:0a:f9:1e:cf:cb:
d7:36:76:ed:fb:e8:31:e0:6c:30:f1:02:0f:ca:20:
7c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:02:B9:56:5F:E6:CC:2C:82:4F:B4:3C:3D:D5:49:54:8A:1B:EA:24
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/mwK5Vl_mzCyCT7Q8PdVJVIob6iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.140.0/22
194.15.98.0/24
Signature Algorithm: sha256WithRSAEncryption
16:8f:82:19:29:fd:16:b0:b6:c4:ee:41:a0:ed:75:6c:90:79:
2b:d9:40:9f:12:be:fb:11:4f:99:62:9c:5d:a3:b8:cb:b0:28:
9a:5e:4b:c8:36:da:82:c7:60:99:9e:b9:05:7f:78:f8:9d:f2:
25:7c:c5:f3:76:eb:e7:76:a2:45:18:28:cc:f2:19:22:0d:aa:
c1:31:d9:c1:d5:06:f9:40:68:cd:72:b8:87:4b:84:eb:be:f3:
f1:12:61:8d:7b:27:03:82:c5:94:b0:ee:9a:20:7a:eb:33:a3:
af:83:82:44:71:8a:4f:b9:6a:68:e1:e8:e2:5c:c9:21:f0:c9:
5b:36:14:5b:ba:0f:c7:45:e3:64:7f:76:aa:32:b2:76:0c:d7:
4e:53:41:cd:f6:1c:b8:23:a6:c2:b5:3c:0e:e3:62:59:92:05:
1a:48:aa:23:8a:8a:3e:ba:ba:af:d7:2b:af:cc:08:bc:65:84:
bc:64:b8:b1:f3:56:72:1c:f7:83:ac:d8:b2:84:66:4d:cc:12:
c4:4d:fc:c6:0a:e1:f4:8f:75:cf:70:b0:0b:99:73:5d:05:58:
7b:63:72:9f:5c:cc:eb:77:15:82:96:db:10:21:d8:04:19:ca:
ef:0f:65:e7:36:c8:9b:fb:f5:be:5a:82:18:f3:c0:e4:0d:fe:
7f:32:e2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 15:53:01 2023 by rpki-client on console-ams.rpki-client.org