Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/mRarAuX6OqSiwjQ-SkrLrwVTSxY.roa
File: mRarAuX6OqSiwjQ-SkrLrwVTSxY.roa (raw, json)
Hash identifier: tFim+yEDqKALdPj+MqWYD5OI2CZvYETXI+vlCwdW8FE=
Subject key identifier: 99:16:AB:02:E5:FA:3A:A4:A2:C2:34:3E:4A:4A:CB:AF:05:53:4B:16
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 018852CAD67555BFAB35115742DE1A1EEE28
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/mRarAuX6OqSiwjQ-SkrLrwVTSxY.roa
Signing time: Thu 25 May 2023 12:03:24 +0000
ROA not before: Thu 25 May 2023 12:03:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 192.102.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:ca:d6:75:55:bf:ab:35:11:57:42:de:1a:1e:ee:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: May 25 12:03:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9916ab02e5fa3aa4a2c2343e4a4acbaf05534b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7e:6e:92:e3:8b:e6:d3:5c:90:98:32:a3:d4:
66:0f:3a:55:f4:4f:a7:e5:a5:e4:b3:38:17:ed:bf:
91:c0:51:9d:13:4d:f4:2c:4b:ce:7a:f0:ea:fd:ed:
af:1f:ec:80:a1:39:5f:a7:36:5e:27:57:46:8b:0b:
4b:69:89:3e:b0:6c:94:07:27:a5:ca:f2:05:37:08:
b8:d3:9d:0a:e4:2e:c1:05:7e:c2:d6:fe:4e:c8:c1:
67:59:d3:4b:c5:e2:0b:fc:1b:0d:ae:65:ab:6a:b9:
7c:09:16:11:f7:4e:4f:94:71:f3:8c:e8:cc:e5:cc:
13:ad:b5:91:22:9b:ff:8f:5a:82:16:7c:3b:cd:d6:
cb:99:4b:10:ac:9c:16:43:02:4d:fe:b1:75:55:96:
8e:2d:50:e3:09:9a:08:93:2b:56:10:78:5b:fe:67:
d5:90:b8:23:8b:b8:ec:99:bb:60:a9:97:2c:7e:6a:
2e:ba:1e:16:f4:77:94:8c:81:29:0e:55:58:d9:30:
fc:2f:6a:6d:c4:0d:70:c0:ea:3c:17:10:92:26:59:
4b:46:12:f7:31:20:b3:94:02:2f:06:7b:10:af:a7:
a8:6e:35:1a:74:17:25:21:ea:b4:34:8c:b9:e4:76:
f2:b8:f0:22:9b:72:d0:1b:0d:d0:0f:9c:48:10:99:
6a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:16:AB:02:E5:FA:3A:A4:A2:C2:34:3E:4A:4A:CB:AF:05:53:4B:16
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/mRarAuX6OqSiwjQ-SkrLrwVTSxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.102.165.0/24
Signature Algorithm: sha256WithRSAEncryption
24:0a:b2:ee:cc:3a:81:81:60:12:56:bd:67:83:41:66:e6:90:
20:e3:c9:6c:49:75:b0:53:2d:dc:b5:39:c1:db:69:db:af:99:
18:dd:40:9c:75:a4:a4:4d:59:35:c9:92:11:f5:6d:82:81:26:
a6:90:cc:1b:11:49:4b:60:3f:d9:71:c1:04:de:1e:ef:50:8a:
d4:e6:54:7d:c8:cf:cd:e8:dd:d1:6b:6e:80:e4:60:a7:93:d9:
30:34:0a:ee:c9:a1:7b:54:65:6a:da:9a:82:41:b6:45:d6:4f:
b9:4b:37:90:1a:e3:35:ec:65:5e:fb:cf:de:81:84:b7:0a:43:
07:e4:0c:db:24:14:6f:f0:13:ad:bc:b2:cf:98:76:9d:09:6f:
0d:ac:cd:27:69:25:40:3e:45:2d:c6:f1:85:61:3b:3b:bb:43:
82:a7:f0:c9:cf:0c:9a:30:2f:e3:27:48:e3:de:5d:13:34:09:
d9:cd:05:17:92:d0:53:ab:2a:c0:01:1a:98:f1:a2:73:30:db:
dc:e4:b4:e7:c9:9c:dc:8a:ed:70:1d:1a:fb:34:b0:ac:70:d8:
69:5d:af:dc:5a:34:d7:03:8f:7c:d7:c6:a0:bf:3b:ce:18:8b:
61:eb:95:4c:d6:20:59:75:b2:fe:24:a8:eb:a3:3e:39:ac:4d:
88:ce:7b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:35 2024 by rpki-client on console-fra.rpki-client.org