Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/mruVidM31GxNdfi0jzSMkSa8QwE.roa
File: mruVidM31GxNdfi0jzSMkSa8QwE.roa (raw, json)
Hash identifier: eQP6e1w+H6tz/mSHNvYJYrZogZqPItQFOyzmAwcOSjQ=
Subject key identifier: 9A:BB:95:89:D3:37:D4:6C:4D:75:F8:B4:8F:34:8C:91:26:BC:43:01
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 018A1D2E54F411F39D898C683E4D2170E9C4
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/mruVidM31GxNdfi0jzSMkSa8QwE.roa
Signing time: Tue 22 Aug 2023 12:18:10 +0000
ROA not before: Tue 22 Aug 2023 12:18:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212416
IP address blocks: 193.108.57.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:2e:54:f4:11:f3:9d:89:8c:68:3e:4d:21:70:e9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Aug 22 12:18:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9abb9589d337d46c4d75f8b48f348c9126bc4301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:83:a1:4b:db:db:7d:61:06:85:ef:ee:fa:
f0:33:1b:ee:44:79:32:9c:ca:50:64:0d:04:af:16:
96:46:dd:d9:25:e5:21:80:be:cc:cb:f1:17:b2:15:
16:d4:b9:09:96:8a:67:19:1b:b8:fc:7c:65:48:f8:
10:f0:68:da:eb:20:29:00:a5:23:ad:9e:7e:7e:13:
db:7a:96:de:1d:48:bd:62:53:86:d0:ff:6a:d1:48:
76:0a:b5:7d:f9:7c:e4:d4:06:5e:98:1a:f1:ae:5e:
5e:32:3f:93:7f:c0:e7:e0:98:05:e9:f6:28:7f:c8:
e4:98:4f:b0:c9:48:11:14:66:d3:cb:3a:59:59:94:
1d:81:2f:8e:b3:99:69:fc:a9:47:b0:1d:5f:fa:cb:
7e:46:5b:a5:c8:09:b9:66:b7:6c:a6:16:a9:53:f4:
30:c9:7e:90:d5:ee:81:4a:f8:5f:14:fd:ae:11:97:
0b:de:36:d7:3f:f6:68:6c:69:bd:7a:64:c4:46:79:
9d:72:45:06:c9:bf:12:f7:cb:9e:66:38:65:c0:04:
bf:f5:cf:68:c3:44:29:db:ce:54:09:69:86:25:62:
be:d5:ac:35:9e:c3:12:90:26:c4:a6:e3:2e:8b:80:
0d:72:4e:61:67:35:6b:b5:b8:ba:47:c1:18:f1:d1:
95:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BB:95:89:D3:37:D4:6C:4D:75:F8:B4:8F:34:8C:91:26:BC:43:01
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/mruVidM31GxNdfi0jzSMkSa8QwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.57.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:97:98:7d:f5:dd:e5:71:fe:fd:09:a3:39:e6:65:6e:42:93:
f9:4a:a2:51:23:8a:42:8e:84:8a:d3:2c:fc:a3:4b:44:73:39:
d1:81:10:d7:90:0f:d3:f0:ad:64:af:7a:49:ad:9d:a6:f5:0e:
26:e5:ab:12:57:0d:aa:f0:01:bd:c8:29:5e:e4:8e:88:62:de:
59:3a:f8:88:66:cd:2d:19:60:48:8d:e2:1e:40:ed:8a:9e:e6:
f2:1a:72:3f:30:b4:ed:9f:9a:12:6a:34:77:6e:a9:32:c3:b5:
63:62:0c:a7:ad:0c:ad:f1:1b:03:99:a4:0b:98:b8:a9:dd:7d:
6d:3a:64:b9:5c:90:01:50:a3:04:94:f8:4d:a7:8b:bb:78:44:
9b:dc:14:67:eb:8c:d0:8a:42:82:27:b3:fd:18:d5:b7:51:c1:
4e:3f:cc:aa:42:90:a4:a8:4b:44:d3:0b:18:f1:30:33:c6:87:
bc:d7:69:44:f9:eb:11:fc:ec:86:89:a9:a4:97:d4:3d:3a:af:
c7:a8:9d:87:d2:b4:41:17:6b:91:f2:d4:c2:05:5c:39:88:60:
b5:ac:62:6d:80:c1:87:7f:bd:97:e2:91:64:6d:e5:76:35:c7:
02:31:d9:21:05:84:91:86:60:e3:78:fa:e4:01:25:a9:bf:b2:
f8:03:84:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:44 2024 by rpki-client on console-fra.rpki-client.org