Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/mPxI3NddQJr9UKMiyvuX9Pc5POs.roa
File: mPxI3NddQJr9UKMiyvuX9Pc5POs.roa (raw, json)
Hash identifier: XCMdIErFqelE5t3gg4tS73WUumVK3e0gBPX4z24d6A8=
Subject key identifier: 98:FC:48:DC:D7:5D:40:9A:FD:50:A3:22:CA:FB:97:F4:F7:39:3C:EB
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018804B06631AD0B72E0BC60EE01525995C0
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/mPxI3NddQJr9UKMiyvuX9Pc5POs.roa
Signing time: Wed 10 May 2023 08:04:09 +0000
ROA not before: Wed 10 May 2023 08:04:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 194.146.93.0/24 maxlen: 24
79.98.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 May 2023 23:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:04:b0:66:31:ad:0b:72:e0:bc:60:ee:01:52:59:95:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: May 10 08:04:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98fc48dcd75d409afd50a322cafb97f4f7393ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:18:d4:43:50:a0:53:35:12:1c:8a:8d:80:95:
30:33:f4:9a:43:d3:cf:c4:3a:e7:c3:a4:d2:4f:8b:
d1:37:13:aa:5a:94:ca:1e:37:e4:bb:b0:26:56:7d:
85:4d:02:cc:99:da:24:8a:28:20:3e:f9:78:fa:3e:
df:0c:bb:f9:47:a3:eb:7d:c7:e7:10:73:ca:31:48:
c0:47:fc:2d:3f:b8:62:00:48:43:20:9a:22:95:68:
18:b2:a4:a2:92:48:de:40:6c:5f:63:2b:84:20:df:
a2:c1:0d:dc:b1:aa:ce:0a:b1:d0:f8:76:92:2e:23:
2c:5f:dc:8f:1f:e0:cb:be:2e:fd:8e:d1:9b:d3:00:
99:28:2b:49:44:eb:0a:56:60:1e:c4:62:16:f0:10:
7c:39:78:0a:3d:c8:b3:72:ff:72:dc:93:e2:8d:42:
40:83:60:5e:7f:85:6a:46:0d:ec:08:07:a5:c1:42:
74:95:83:05:c3:87:e0:87:97:63:97:d1:d9:a9:c2:
fa:a3:c5:ae:e9:7e:4e:6a:b9:1f:8b:2a:5b:39:ca:
20:01:42:7f:c1:14:60:2c:8b:3c:86:54:ca:5d:42:
6b:52:b8:be:b1:14:bb:9c:90:64:21:4d:61:d7:c2:
b9:d8:d4:0f:ae:d1:63:d7:ed:31:6e:8e:cc:e8:fc:
f6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FC:48:DC:D7:5D:40:9A:FD:50:A3:22:CA:FB:97:F4:F7:39:3C:EB
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/mPxI3NddQJr9UKMiyvuX9Pc5POs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.247.0/24
194.146.93.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:fc:13:7e:d8:a0:45:d4:9a:d0:09:d0:96:a1:40:e4:9c:07:
75:83:99:93:99:9e:c2:f9:91:88:12:b2:dc:e3:27:d3:04:d8:
02:9a:ac:ec:c8:eb:39:3f:83:12:8e:55:14:ba:7f:7f:f7:1e:
b8:ef:5a:98:a4:3c:44:d8:c6:9a:84:ac:a0:9e:bb:ff:19:d0:
c4:4f:98:f7:ce:7d:06:22:2f:e0:de:82:8b:3f:f5:c6:79:d8:
9a:6b:19:fc:df:d2:d4:66:ca:e0:ee:12:a6:61:03:ed:98:2c:
0f:60:60:12:81:9d:1c:5f:cc:3c:be:80:6b:c0:28:4b:61:48:
30:61:a7:18:60:05:ab:17:fd:ee:76:c2:ac:24:37:79:ce:0e:
b2:da:11:6a:aa:84:18:41:56:98:15:15:3c:7e:91:a7:36:55:
b7:ff:72:fd:b6:2a:6d:e0:cd:ed:ac:8b:3e:ea:d7:31:e3:c7:
c2:1c:67:73:5a:d2:b4:b2:00:3b:ec:20:83:59:79:26:67:55:
72:4b:50:5f:b5:e7:33:d0:a0:21:cf:40:9d:39:20:ba:d1:dc:
c2:85:d0:da:03:3a:bf:bd:fe:ad:4b:ca:68:bd:07:84:c4:11:
17:a5:5b:a2:f7:e1:39:9d:cc:4d:58:a9:05:f4:39:79:99:6d:
a7:63:e8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:14 2024 by rpki-client on console-fra.rpki-client.org