Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/mcoxlvWQB_zr7xz3E7n27-26GNg.roa
File: mcoxlvWQB_zr7xz3E7n27-26GNg.roa (raw, json)
Hash identifier: f1pMHcvLDHz6jOx72pa/q4OD4bd9UWX8N0MOV7NUQhM=
Subject key identifier: 99:CA:31:96:F5:90:07:FC:EB:EF:1C:F7:13:B9:F6:EF:ED:BA:18:D8
Certificate issuer: /CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Certificate serial: 018CC86F19C742B4019F8572D5DB41728845
Authority key identifier: EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/mcoxlvWQB_zr7xz3E7n27-26GNg.roa
Signing time: Tue 02 Jan 2024 04:29:33 +0000
ROA not before: Tue 02 Jan 2024 04:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 185.192.36.0/23 maxlen: 23
185.192.36.0/22 maxlen: 22
185.192.38.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 08 Jan 2024 13:51:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:19:c7:42:b4:01:9f:85:72:d5:db:41:72:88:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Validity
Not Before: Jan 2 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99ca3196f59007fcebef1cf713b9f6efedba18d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:fb:14:68:05:42:a7:2b:2f:40:1e:63:f0:
ac:f2:a3:aa:a2:2d:87:e9:71:26:b3:74:fb:84:8e:
a6:3e:9b:8c:df:70:6b:cc:b9:42:a5:0f:7e:5c:e8:
ca:d5:a1:03:f6:ee:db:3a:76:25:df:eb:80:97:e9:
ef:5c:d1:07:a0:3d:72:50:4f:b8:8e:c9:5d:b6:d8:
22:ad:5b:52:66:d0:4b:cb:5c:e3:c0:c0:b4:e1:64:
0c:16:40:7d:69:58:69:7e:57:72:86:31:eb:e7:0e:
4b:0f:55:5f:86:19:f5:91:c5:f2:d6:82:8b:f9:aa:
a6:a4:5b:ac:96:64:5a:30:11:bc:63:f9:c8:3d:32:
2a:b4:13:50:24:96:64:74:78:0d:ab:d6:3f:05:40:
55:de:a4:95:57:35:0d:09:d1:72:e3:85:ed:70:95:
07:60:d8:84:38:47:37:c0:e1:a5:6a:e4:b3:14:ec:
8c:d5:32:3d:1d:4e:9e:ce:b0:56:fa:1c:c0:66:4d:
e9:ab:38:49:77:8c:2a:05:2d:d0:af:62:e2:9b:75:
23:32:37:9b:9a:df:ca:a3:0b:f8:11:34:c9:73:b0:
a5:dc:9c:bf:32:87:b5:82:2e:f2:ef:e6:8c:ed:5e:
f5:e5:ae:c2:35:dc:7e:9c:ca:b4:93:38:3b:62:50:
82:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CA:31:96:F5:90:07:FC:EB:EF:1C:F7:13:B9:F6:EF:ED:BA:18:D8
X509v3 Authority Key Identifier:
keyid:EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/mcoxlvWQB_zr7xz3E7n27-26GNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.36.0/22
Signature Algorithm: sha256WithRSAEncryption
31:8a:bf:4f:6d:b8:ad:35:44:1c:30:56:b3:09:d5:ae:87:d2:
84:fe:ad:14:29:39:bd:9b:24:d2:1d:71:84:de:e8:2e:fe:9a:
c6:0c:89:8a:02:cc:7c:b4:1f:0b:d4:02:c1:11:52:11:6d:d3:
b0:7e:7c:11:f0:37:21:d4:88:b8:40:1f:46:f4:c0:2c:c0:b7:
17:1c:ce:6a:48:79:ff:54:4d:70:c2:78:4b:83:42:78:3c:78:
ad:79:04:4a:9e:c5:87:3d:0c:42:ce:2e:54:63:bf:d6:8c:34:
bb:9e:61:0b:86:b3:16:24:58:a4:83:e0:33:55:fd:09:97:5e:
e9:d7:01:45:d4:e0:45:92:1a:8c:1a:7e:ff:43:4e:7e:bd:d6:
59:f1:4d:38:36:52:69:42:66:4f:05:d9:6a:ed:bc:35:c5:bb:
72:ae:05:ba:81:b0:63:c0:89:4d:ee:90:bd:d1:4f:ca:f1:61:
13:7d:4d:98:f8:5b:aa:18:ed:7f:f0:08:48:68:35:01:e7:e3:
e3:1a:6d:00:e2:be:30:c1:af:db:49:60:0d:99:3e:a5:0f:96:
51:71:ca:01:96:02:b5:9c:23:13:78:0d:86:66:14:8e:15:28:
21:56:9b:c2:fe:7a:00:0d:f2:46:b3:3d:40:5d:e9:a5:4a:50:
d4:4a:19:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 18:32:36 2024 by rpki-client on console-fra.rpki-client.org