Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/mx0N_7CZWSYtxIqbwAbYHSlm2Ec.roa
File: mx0N_7CZWSYtxIqbwAbYHSlm2Ec.roa (raw, json)
Hash identifier: gu8rGmvn+erJ6wEGab5QlsO4MbQNG8pbhjDba4lUDPc=
Subject key identifier: 9B:1D:0D:FF:B0:99:59:26:2D:C4:8A:9B:C0:06:D8:1D:29:66:D8:47
Certificate issuer: /CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Certificate serial: 0192D3FB55F8475B168783F420BED7E7623A
Authority key identifier: C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/mx0N_7CZWSYtxIqbwAbYHSlm2Ec.roa
Signing time: Mon 28 Oct 2024 16:35:17 +0000
ROA not before: Mon 28 Oct 2024 16:35:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43668
IP address blocks: 188.190.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 17:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d3:fb:55:f8:47:5b:16:87:83:f4:20:be:d7:e7:62:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Validity
Not Before: Oct 28 16:35:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b1d0dffb09959262dc48a9bc006d81d2966d847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d3:da:d6:ea:1b:d5:f5:43:5e:e6:35:c8:ef:
08:be:23:f1:76:f6:85:57:26:bd:55:92:75:bb:23:
a7:da:64:21:bb:4c:88:fa:36:fd:da:8e:67:92:a7:
0f:22:05:5a:27:7e:1c:1f:0b:e8:28:c0:44:4f:34:
57:3e:44:f4:06:9f:e3:95:ee:4a:c8:a3:f6:cd:92:
3a:db:28:9d:e8:9f:8d:63:7c:8f:c8:cd:54:d5:d7:
c0:21:06:7f:53:29:0f:e4:59:df:61:cf:b3:60:93:
ae:cf:b2:9e:0d:43:e1:53:56:4f:17:f9:4d:78:d6:
ba:89:0c:4e:aa:6b:e5:e2:66:24:d3:ea:e9:9a:9e:
62:d1:f5:6e:b6:8c:23:6d:58:38:7d:7f:58:e4:5b:
b9:8c:f1:b1:2b:bf:07:86:82:42:ca:47:6b:be:87:
13:ef:2f:a3:60:a5:33:87:4e:b4:07:70:53:65:1d:
74:0c:79:b1:25:88:3b:d2:b4:17:a8:c4:94:1b:ba:
ee:b8:75:92:d3:2d:5d:54:2e:93:eb:9f:d0:9b:d2:
40:21:84:a3:7b:37:f9:e3:86:41:7c:21:ad:64:cf:
5e:e7:35:08:fc:6f:6d:3a:bf:bb:0a:b9:7d:38:6f:
f5:42:eb:52:0a:1d:7c:79:25:f4:54:35:b5:63:db:
3d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1D:0D:FF:B0:99:59:26:2D:C4:8A:9B:C0:06:D8:1D:29:66:D8:47
X509v3 Authority Key Identifier:
keyid:C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/mx0N_7CZWSYtxIqbwAbYHSlm2Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.10.0/24
Signature Algorithm: sha256WithRSAEncryption
19:7a:47:c0:a4:03:58:5d:37:fb:ad:e0:5c:08:3e:66:06:56:
4c:5d:78:75:96:6d:05:56:72:f7:6a:14:22:b2:a5:80:b3:aa:
ba:cf:88:de:fa:fb:50:af:93:92:23:b8:a2:cf:90:ba:0e:0c:
c8:ad:ac:54:09:46:ad:c2:d1:c4:83:1b:5c:4f:d5:3f:2b:4b:
56:ec:73:a5:45:e3:2f:24:d9:c4:a9:ce:5e:c2:59:7c:a1:a2:
a1:74:60:1d:66:ec:f7:6b:75:f4:25:d9:46:aa:91:ee:6f:97:
13:80:68:23:57:7e:75:90:e2:1c:10:30:aa:4f:58:24:65:b1:
4c:cc:cb:38:12:ca:0f:aa:f0:28:cf:44:39:b2:6c:2e:c5:8c:
61:5f:7e:f5:3a:a6:0c:6c:3a:84:91:e1:1f:82:a7:55:30:5e:
32:9a:5b:40:03:46:a8:b5:f6:3d:85:c7:46:d6:08:6e:d7:c8:
8a:f4:24:83:59:a4:5f:18:72:3c:88:b6:49:57:27:26:86:c4:
4c:2b:c3:bd:96:88:c3:03:44:98:99:0b:40:54:53:d2:b5:26:
99:1e:aa:e9:23:af:f3:83:d6:88:25:d1:f7:f5:ef:4f:6b:6f:
87:b2:64:56:b4:b3:6f:be:96:7a:87:37:61:10:19:a6:69:94:
52:de:6b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 19:37:37 2024 by rpki-client on console-fra.rpki-client.org