Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/MG28BCYsHqrTfX_UMsYUo-ePJTw.roa
File: MG28BCYsHqrTfX_UMsYUo-ePJTw.roa (raw, json)
Hash identifier: cXN3dM/FFs7iHRdSXrftayqRANDH2OxvIQ5wwkI5BAs=
Subject key identifier: 30:6D:BC:04:26:2C:1E:AA:D3:7D:7F:D4:32:C6:14:A3:E7:8F:25:3C
Certificate issuer: /CN=94846741139263388d984db1e97e031669c6486e
Certificate serial: 018DE9833C0B3BD271E1A5C58FD4F4E4B15B
Authority key identifier: 94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/MG28BCYsHqrTfX_UMsYUo-ePJTw.roa
Signing time: Tue 27 Feb 2024 07:41:48 +0000
ROA not before: Tue 27 Feb 2024 07:41:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141718
IP address blocks: 195.190.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 07:22:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e9:83:3c:0b:3b:d2:71:e1:a5:c5:8f:d4:f4:e4:b1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94846741139263388d984db1e97e031669c6486e
Validity
Not Before: Feb 27 07:41:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=306dbc04262c1eaad37d7fd432c614a3e78f253c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:85:0d:eb:91:c8:4e:86:a4:fa:b9:56:39:44:
78:26:a5:1a:51:71:bd:81:24:1c:74:bc:b8:1b:ce:
3b:25:b7:bd:30:b3:5a:ca:2f:1d:a8:df:8d:f7:21:
2a:01:f8:b1:02:81:d8:15:e4:6d:73:ee:1f:2b:0d:
c4:4b:e7:b3:18:84:30:d7:18:b0:51:cd:f7:94:af:
03:ee:04:0a:89:b9:37:02:b5:42:c6:02:63:d4:cb:
f7:6f:56:d5:9c:d4:9b:c8:cd:9b:51:ef:31:74:3e:
ba:a2:7d:66:50:47:4c:8e:74:76:4b:87:d2:ed:74:
fd:ab:8a:ed:97:18:ae:56:be:18:85:e4:94:d3:dc:
b7:5c:68:ef:9e:7c:05:fe:9c:0f:98:d3:2d:b9:e7:
0b:e7:96:c2:46:a1:a4:ec:7a:09:82:d6:e7:8d:5a:
a7:bf:0b:21:53:f9:d4:90:51:f5:b0:b1:ee:9f:23:
a9:f3:3b:58:d0:19:c0:d7:a8:73:fe:95:9f:ff:f0:
a5:98:9e:eb:5f:78:31:83:b3:81:17:5c:9b:ab:05:
2c:51:93:04:a2:e6:a7:59:77:81:43:4e:25:2d:61:
54:65:ad:de:eb:66:1a:26:de:b9:bf:09:8d:80:28:
a4:81:ae:53:17:e9:9d:4d:dd:70:f8:91:75:35:b8:
ed:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6D:BC:04:26:2C:1E:AA:D3:7D:7F:D4:32:C6:14:A3:E7:8F:25:3C
X509v3 Authority Key Identifier:
keyid:94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/MG28BCYsHqrTfX_UMsYUo-ePJTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.139.0/24
Signature Algorithm: sha256WithRSAEncryption
67:fd:2f:85:e7:37:e4:05:1f:04:f5:46:64:8c:f3:6e:ea:cf:
24:a8:2f:c4:c3:02:2e:c4:0c:d5:2d:e3:3a:7d:d0:8f:2b:6a:
d4:b8:f5:01:8a:98:7f:75:65:54:24:40:0e:0f:c5:91:aa:f8:
41:bb:39:f2:22:3d:80:b9:76:ed:c1:c1:e6:4b:ad:47:91:bb:
c0:23:ab:f6:f3:25:d0:c7:28:da:05:a1:b9:a5:f6:65:d7:cf:
db:51:c2:a4:2d:47:3a:2e:a2:34:19:cd:fb:f3:cf:5c:14:6e:
15:90:a7:df:e3:90:32:fe:f4:83:dd:bc:ee:4b:4d:8f:93:74:
a9:45:d4:e1:01:e6:71:61:0f:3e:af:42:b3:da:72:93:20:a2:
29:01:a2:6f:68:3e:0b:06:d1:d4:38:62:0f:88:a3:73:c8:9b:
80:31:0a:e2:a8:5b:c3:1c:5d:e0:7a:d8:fa:ee:a0:5d:d8:59:
30:e2:7b:d5:2c:20:53:10:48:23:fe:db:ec:82:cf:6b:27:de:
4d:dd:ed:e2:b5:c2:22:0c:6b:6f:99:01:b8:4c:2b:b6:c0:4b:
6e:bf:04:13:a0:a6:6d:93:76:4c:e6:c7:19:8b:1d:08:ea:4a:
40:bd:5b:82:30:1b:80:55:e5:04:f4:38:f8:12:d6:a6:12:d3:
a1:36:15:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 10:12:20 2024 by rpki-client on console-fra.rpki-client.org