Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/MRiv8f46cjDwHOQAPxCdEXQkRgI.roa
File: MRiv8f46cjDwHOQAPxCdEXQkRgI.roa (raw, json)
Hash identifier: AzqpKlfu6P+IYbAymZLwtIKhewwrvuKZXQnyMnD3l4U=
Subject key identifier: 31:18:AF:F1:FE:3A:72:30:F0:1C:E4:00:3F:10:9D:11:74:24:46:02
Certificate issuer: /CN=e46a3f838688843758d28057007dc6cd2898ecca
Certificate serial: 01856CE5F45D2E020E0DCBC8CD64B2542136
Authority key identifier: E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/MRiv8f46cjDwHOQAPxCdEXQkRgI.roa
Signing time: Sun 01 Jan 2023 10:34:47 +0000
ROA not before: Sun 01 Jan 2023 10:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 193.243.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e5:f4:5d:2e:02:0e:0d:cb:c8:cd:64:b2:54:21:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46a3f838688843758d28057007dc6cd2898ecca
Validity
Not Before: Jan 1 10:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3118aff1fe3a7230f01ce4003f109d1174244602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:48:ab:df:9a:a6:40:18:74:ea:f7:7f:a0:50:
bf:02:e4:0a:43:5b:a5:35:69:35:33:09:ba:f5:2a:
d2:75:70:f9:96:95:fd:17:ac:9e:5e:5c:1a:23:3e:
b7:fc:e2:b2:58:61:3f:12:5f:28:e8:90:21:a0:73:
d8:8b:61:d4:5e:c2:7e:26:b9:9b:6b:14:ce:e7:0e:
07:77:ad:b4:cf:d5:5d:20:29:8c:83:1a:d6:83:21:
7f:97:18:60:6d:5b:b0:20:f9:06:be:2b:d1:86:21:
2e:84:72:72:41:e2:82:f3:78:3e:a6:6b:0b:fe:43:
59:2b:33:6c:74:41:7e:3d:9d:ff:d6:af:28:dd:96:
05:d3:4b:15:73:b6:74:78:4d:74:7f:33:51:6e:0a:
89:c9:d3:ef:d2:66:54:cf:69:29:03:8a:f4:a7:d4:
59:33:b9:d1:d9:f1:c3:b7:ae:36:a1:69:ef:b5:08:
3b:59:0c:57:b5:b6:7c:b1:f6:9c:fb:1b:86:2a:b5:
08:56:1c:a5:ae:3e:e8:5a:4a:48:eb:82:53:c2:6f:
5e:fe:0d:36:fc:3b:17:19:82:03:df:e6:1c:2a:31:
7f:c3:13:ab:f5:d2:08:90:e4:2a:a9:c3:29:46:2c:
41:8b:63:40:1d:65:0b:d9:8b:9a:cf:fc:12:5f:15:
10:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:18:AF:F1:FE:3A:72:30:F0:1C:E4:00:3F:10:9D:11:74:24:46:02
X509v3 Authority Key Identifier:
keyid:E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/MRiv8f46cjDwHOQAPxCdEXQkRgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.129.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ff:7b:e2:01:21:21:38:ec:02:67:3d:2b:ae:4b:9c:bc:e5:
7a:bb:df:07:8c:37:09:43:24:d6:70:ca:5a:a4:d7:4d:70:d3:
35:b5:6e:a2:66:7c:43:7b:77:05:64:4f:54:e4:ad:17:ef:b9:
59:8b:b3:89:f0:97:0d:27:cd:3b:d1:57:cc:a0:a1:08:eb:9f:
6e:58:78:ae:97:4b:9b:2f:1b:81:b6:3f:a7:8f:e0:06:3d:51:
b3:c8:d6:d0:33:5b:22:cd:0a:57:91:cc:48:45:62:a4:7e:2e:
67:32:e5:88:5d:d3:e5:4e:d2:cd:94:00:38:f6:62:f3:38:62:
37:26:b2:f8:00:3f:19:cf:d6:bb:44:a5:91:3a:57:b9:f9:e4:
22:dd:d0:af:8c:36:74:1a:b9:50:ee:2b:3d:92:74:a2:0f:82:
0b:9c:58:ac:ca:d0:96:4f:2c:39:94:28:d0:ac:59:ce:95:85:
96:55:34:65:6e:7b:6e:9c:83:86:4e:1f:f5:7a:4a:df:d8:a2:
db:8a:3d:b7:de:8d:f2:21:6e:e0:8e:12:16:f0:90:17:01:2d:
ef:34:e3:17:73:1e:c7:3a:6e:7e:ac:d9:df:8a:35:e1:19:90:
fb:9d:3e:11:38:77:0b:70:52:85:5c:28:a2:04:b6:21:15:5d:
90:4d:25:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:37 2024 by rpki-client on console-fra.rpki-client.org