Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/MGqSrBD04p-OKamTnPYzrVZs6ss.roa
File: MGqSrBD04p-OKamTnPYzrVZs6ss.roa (raw, json)
Hash identifier: DwbPBKfz7V78y44FkFLPNjhNNU4LueZKi5T1forugJw=
Subject key identifier: 30:6A:92:AC:10:F4:E2:9F:8E:29:A9:93:9C:F6:33:AD:56:6C:EA:CB
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01865F317B9F9516B44432643DC2EF7CCF64
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/MGqSrBD04p-OKamTnPYzrVZs6ss.roa
Signing time: Fri 17 Feb 2023 11:45:23 +0000
ROA not before: Fri 17 Feb 2023 11:45:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 194.36.33.0/24 maxlen: 24
194.36.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Feb 2023 13:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5f:31:7b:9f:95:16:b4:44:32:64:3d:c2:ef:7c:cf:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Feb 17 11:45:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=306a92ac10f4e29f8e29a9939cf633ad566ceacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9e:1c:2d:3a:8e:9c:62:d9:a2:14:f9:45:6a:
e6:85:33:1d:60:44:04:97:41:2d:60:72:a8:0e:39:
22:25:2b:6f:46:44:c9:8d:c9:41:6c:80:d9:49:37:
08:5e:0c:f5:3a:19:fb:68:ca:26:bb:10:99:fa:b2:
16:2c:fe:ce:15:a5:60:39:ee:40:3c:e9:b6:61:84:
2d:f2:ae:c0:81:f6:8e:17:ae:2c:d6:ed:ab:c5:72:
4c:37:86:00:f3:b7:a9:d6:df:53:a4:0c:9b:43:1a:
f4:ef:28:89:be:7e:c6:c9:bd:93:80:c7:0e:5b:1b:
84:49:90:b5:e5:8e:e3:99:57:b8:84:79:16:5c:d3:
21:76:13:17:78:87:24:d0:3c:f8:26:9e:f4:16:09:
0d:f9:63:2f:23:b8:08:e1:ec:0c:fa:a6:26:32:b5:
19:c9:ce:49:58:87:27:92:5a:67:f2:ff:4c:e6:e8:
28:06:27:58:42:09:68:cd:ac:1f:4a:2a:37:42:4c:
05:5a:70:d7:c2:45:1c:5b:b0:6f:84:b3:a3:c9:04:
04:ba:79:4c:f3:7d:ee:27:68:5a:e6:ae:2f:5e:88:
49:96:99:8d:a3:01:14:e4:fb:de:6b:c5:cf:c3:c8:
8a:64:f7:f7:1c:50:ac:77:d6:1a:a0:20:18:99:58:
df:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6A:92:AC:10:F4:E2:9F:8E:29:A9:93:9C:F6:33:AD:56:6C:EA:CB
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/MGqSrBD04p-OKamTnPYzrVZs6ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.32.0/23
Signature Algorithm: sha256WithRSAEncryption
92:19:e4:4c:9d:be:83:a3:c5:aa:9e:8a:97:4e:04:3e:58:6d:
cc:c6:de:3b:c8:33:e7:1f:18:02:f6:9d:7f:5c:d0:c9:95:c2:
19:0c:9b:af:05:98:8e:e2:20:2c:9e:8c:c5:ed:f0:cb:b2:0a:
b0:c8:a1:13:a2:22:f9:8f:fa:97:2f:66:ee:78:c1:3b:60:19:
fb:66:f9:b4:89:22:b8:f4:ae:a7:bb:57:d9:b5:4a:2d:d3:78:
76:cd:cf:33:88:e2:fd:51:bf:8d:71:5b:e7:c5:22:49:56:a3:
f2:31:65:27:76:82:ad:30:ab:f3:39:e5:ac:96:25:b8:ab:cf:
de:45:08:7a:52:f7:3a:5a:4e:f2:bd:5b:23:06:58:9e:6b:67:
e1:4b:06:ee:db:d5:f8:d8:ac:86:f7:ca:fc:23:1a:cf:4a:18:
ef:50:47:3d:f0:04:0d:ee:18:e0:d4:a1:c9:bf:99:7a:9f:ab:
9b:cd:0d:92:7f:b0:80:a5:23:e2:1e:aa:4b:4c:57:1f:6b:cb:
5f:c5:dd:65:a8:33:18:e1:f7:20:e7:f8:1a:22:d1:23:ec:4c:
c0:77:56:d7:61:e5:e8:bd:e8:7f:49:50:6d:97:b5:ce:cb:38:
72:fa:e4:e1:24:82:e3:8e:41:fd:fa:f0:f9:8f:00:5c:8c:9e:
6a:c5:22:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:12 2024 by rpki-client on console-fra.rpki-client.org