Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/mFnI9GWPQFQaUZyR6DJh8QpVoAY.roa
File: mFnI9GWPQFQaUZyR6DJh8QpVoAY.roa (raw, json)
Hash identifier: 5E9GUfG0IjfcoC/4zwb5slOnQC8iFu4GaU8ignCsvlY=
Subject key identifier: 98:59:C8:F4:65:8F:40:54:1A:51:9C:91:E8:32:61:F1:0A:55:A0:06
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 018570675A60742F8537AF791F72C95B86F3
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/mFnI9GWPQFQaUZyR6DJh8QpVoAY.roa
Signing time: Mon 02 Jan 2023 02:54:59 +0000
ROA not before: Mon 02 Jan 2023 02:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 194.49.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Nov 2023 23:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:5a:60:74:2f:85:37:af:79:1f:72:c9:5b:86:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Jan 2 02:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9859c8f4658f40541a519c91e83261f10a55a006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:9e:ef:28:dd:c2:c3:8b:16:0b:e2:7c:b7:
fa:2b:9d:5f:dd:73:7d:21:97:2d:80:2e:4e:e2:62:
0e:1a:04:02:b8:8e:32:16:11:68:08:b7:1f:f5:cf:
97:e5:31:61:cd:b8:09:39:69:7a:ec:31:b9:2e:bb:
02:ba:52:84:c8:71:4b:e8:3b:13:48:15:ff:e1:32:
bc:e3:02:30:88:22:b4:04:7c:93:b9:d2:2f:62:91:
cb:ba:69:d7:02:42:f0:c9:c0:49:2b:7d:20:a3:d1:
98:92:2d:d5:67:a2:43:5e:06:3f:d3:87:ac:68:d1:
81:96:ac:2a:93:91:04:a4:18:29:0b:ef:6a:6c:44:
34:87:e4:b4:34:ac:54:3b:ba:2f:30:5b:f8:ec:1a:
46:ae:2d:90:b7:a4:79:61:4c:00:c3:90:55:45:1e:
14:5a:ee:2e:ca:c5:a5:d8:7f:53:dc:55:d5:6c:33:
da:59:01:9f:8e:71:b5:dc:46:72:07:27:d4:5b:db:
90:2f:99:9c:49:2d:2d:16:c0:56:d3:df:a1:16:f7:
e5:25:9b:1f:c4:8e:d4:56:24:cd:91:da:f7:2a:6f:
0c:d7:a0:65:20:27:42:20:bb:7c:67:01:c8:e3:ca:
b1:1c:8f:7e:c6:d0:b1:9e:74:8c:5f:1c:5b:f5:58:
19:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:59:C8:F4:65:8F:40:54:1A:51:9C:91:E8:32:61:F1:0A:55:A0:06
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/mFnI9GWPQFQaUZyR6DJh8QpVoAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.59.0/24
Signature Algorithm: sha256WithRSAEncryption
64:79:8b:cd:8a:68:b5:42:88:e5:e2:6d:f0:88:84:89:f9:d0:
b7:50:ef:ab:21:7f:fd:80:12:d6:38:2a:95:d3:c0:95:ef:6d:
a2:fa:3e:fc:79:f4:a0:3d:e0:ab:87:99:98:93:a8:6f:98:99:
52:24:b0:b1:ce:68:d7:7f:03:1f:5a:39:47:a8:27:45:39:4f:
60:08:5e:96:34:57:0d:86:32:cb:c9:9e:c0:60:67:44:28:91:
42:4e:f4:fc:20:91:3a:e4:4e:e4:dc:df:94:47:8b:cf:0b:2b:
30:28:e1:07:87:f5:41:6f:76:83:46:0e:18:ce:80:ba:b6:78:
4e:60:5f:4b:eb:45:51:c7:d6:08:b0:be:08:20:34:2d:f3:4d:
cd:fb:90:cd:a6:e4:a1:a4:e5:3d:4b:7e:7b:4a:f3:34:30:80:
a8:69:97:38:94:30:78:a0:51:63:ea:37:b9:0a:e4:40:bd:13:
1e:72:c0:a3:74:cd:c4:1a:d2:f1:f1:ab:94:01:26:62:39:14:
3f:66:60:5b:8f:aa:a8:e2:a3:9f:51:df:a8:16:33:1c:dd:cf:
f6:1c:08:fa:cf:bc:bb:8f:c4:97:da:1f:18:ef:8c:b5:f5:87:
65:ef:df:58:4f:38:9e:a6:e5:bd:15:54:9b:7b:4c:e9:98:ea:
9e:8b:0b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:32 2024 by rpki-client on console-ams.rpki-client.org