Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/mAv9JTG8_GwQzFjPjGfpW-PQiYs.roa
File: mAv9JTG8_GwQzFjPjGfpW-PQiYs.roa (raw, json)
Hash identifier: fL9ZMPWAXRtuJ2UnpqgtGGJNL5StV8W+f8hTV7jIEeg=
Subject key identifier: 98:0B:FD:25:31:BC:FC:6C:10:CC:58:CF:8C:67:E9:5B:E3:D0:89:8B
Certificate issuer: /CN=cd0c032892f695af4c13fb0aca8043d17b1b97bf
Certificate serial: 01877A40D3C5F95D80EE9A3BB1376D08368E
Authority key identifier: CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/mAv9JTG8_GwQzFjPjGfpW-PQiYs.roa
Signing time: Thu 13 Apr 2023 10:54:41 +0000
ROA not before: Thu 13 Apr 2023 10:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206371
IP address blocks: 185.137.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 May 2023 08:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:40:d3:c5:f9:5d:80:ee:9a:3b:b1:37:6d:08:36:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0c032892f695af4c13fb0aca8043d17b1b97bf
Validity
Not Before: Apr 13 10:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=980bfd2531bcfc6c10cc58cf8c67e95be3d0898b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b3:b9:19:f5:00:0d:38:49:40:da:e7:a6:eb:
90:f4:56:2e:04:af:01:95:45:34:50:c8:58:97:77:
ad:0d:94:ec:20:39:9d:85:75:c8:28:e7:8f:af:97:
80:d3:8c:8e:47:b4:b4:ba:01:a0:5d:35:54:6d:9f:
8a:bb:48:cc:69:e2:76:f0:76:2b:87:df:3a:54:99:
d2:3c:3c:62:64:8b:ed:d5:74:1d:cd:ef:55:68:46:
3e:59:28:34:1f:68:68:a8:3f:ac:b0:c0:a5:30:76:
9a:e3:cc:14:3c:8a:08:ca:22:05:12:2d:79:ee:bf:
77:47:7e:13:e1:fc:bd:7e:e8:92:1c:bc:81:71:fe:
9e:a8:1c:05:5f:21:38:ac:32:6d:94:35:8d:ed:b6:
27:b1:d7:8d:c7:3a:2f:25:87:d4:b5:34:9d:3e:1d:
93:5d:96:30:aa:67:db:55:71:a9:04:39:fa:e2:e9:
33:05:63:04:d3:e2:38:3b:49:b0:4b:ce:54:9e:d8:
d6:7a:ee:0c:d0:6e:29:02:de:1b:4f:09:02:07:67:
54:4f:3d:af:f5:37:47:e4:fc:a9:f6:c9:bb:5a:e3:
5c:05:71:9c:36:11:69:a3:56:35:70:81:c9:b3:16:
ac:f6:7d:a3:b3:57:7b:2c:6f:0d:40:72:2b:65:6d:
87:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0B:FD:25:31:BC:FC:6C:10:CC:58:CF:8C:67:E9:5B:E3:D0:89:8B
X509v3 Authority Key Identifier:
keyid:CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/mAv9JTG8_GwQzFjPjGfpW-PQiYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.98.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:0e:c8:34:c1:70:68:78:f4:4b:ae:c1:76:ce:eb:e4:98:af:
e3:54:79:4e:19:26:6e:26:4c:26:3a:09:e0:71:2c:41:88:ce:
6a:68:40:18:90:26:31:7f:a8:84:3f:f4:87:9a:75:98:19:c3:
f9:ff:55:a2:53:be:f7:0a:1d:c9:3d:19:b3:7b:57:ed:77:cd:
8e:51:0b:a9:05:42:70:3a:e0:55:1b:3a:5a:80:09:6b:e3:34:
05:23:45:89:49:bd:cf:02:1e:bf:fb:0f:bf:a0:a1:75:a2:ab:
c5:02:90:55:50:39:53:ec:6e:e7:3b:c3:80:97:13:2b:c1:c0:
8f:ad:d2:e1:4f:a9:47:55:af:f4:d0:8c:7e:a4:dc:9f:4f:79:
43:3f:98:a8:22:bc:f9:48:eb:22:d5:29:e6:1d:94:e7:59:ed:
a7:6e:f1:ca:75:7a:c9:1a:61:1d:e7:ea:b8:cb:61:f6:7b:7c:
ef:8c:54:8c:28:ee:e0:2c:f8:ce:b8:07:b2:d6:2e:d3:59:be:
08:33:65:4d:ca:bb:a4:15:a8:54:06:c2:39:b9:77:10:52:fd:
ce:f4:bf:29:5c:78:06:ee:98:6d:d9:87:df:8f:33:30:2d:b8:
ca:e2:e0:a5:14:95:bd:76:25:31:bf:89:a5:6c:33:6b:7b:2f:
40:b5:07:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:13 2024 by rpki-client on console-fra.rpki-client.org