Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/mJiy3CofGHwLdIIJTp3iyS-9aGg.roa
File: mJiy3CofGHwLdIIJTp3iyS-9aGg.roa (raw, json)
Hash identifier: 7n8C1D87DJoPe1o6eGhgYRIqHDm1NTsizMlD2FW8pn0=
Subject key identifier: 98:98:B2:DC:2A:1F:18:7C:0B:74:82:09:4E:9D:E2:C9:2F:BD:68:68
Certificate issuer: /CN=a7f62916197f7796cec578ea4352fae4ef89aec2
Certificate serial: 018AD730FFA8BB5E31659D5BADE9783BC55F
Authority key identifier: A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/mJiy3CofGHwLdIIJTp3iyS-9aGg.roa
Signing time: Wed 27 Sep 2023 15:10:27 +0000
ROA not before: Wed 27 Sep 2023 15:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47220
IP address blocks: 194.152.42.0/24 maxlen: 24
194.152.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d7:30:ff:a8:bb:5e:31:65:9d:5b:ad:e9:78:3b:c5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f62916197f7796cec578ea4352fae4ef89aec2
Validity
Not Before: Sep 27 15:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9898b2dc2a1f187c0b7482094e9de2c92fbd6868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0d:04:ad:09:0b:60:e5:53:90:f3:47:41:3d:
b4:32:ce:d8:b9:cd:91:4d:8f:3c:57:4a:3d:94:8c:
63:6f:92:5d:1f:59:85:d8:c4:b0:b7:2b:76:b5:43:
0d:1f:34:21:04:7f:ca:25:c8:c7:a6:9e:3c:42:aa:
ae:44:91:3e:31:fc:08:45:cb:3c:62:f3:39:e4:3f:
24:97:12:a7:a4:fc:92:77:8b:77:7a:18:10:77:de:
07:02:21:33:92:b1:12:23:97:96:38:79:83:93:2b:
d6:05:db:a7:3e:41:09:1c:03:01:e5:30:59:7e:2d:
83:62:7f:0e:75:a4:f6:d5:2f:4a:5a:b0:4a:aa:5c:
bc:64:e3:83:27:b2:b1:8e:9e:7a:c9:1d:c4:39:a2:
95:3a:02:5b:5d:45:c0:09:83:eb:39:74:cc:e4:1e:
00:22:c6:ce:ac:b6:ec:0c:6a:ee:40:89:16:6e:5f:
eb:b7:df:ef:a2:76:ef:3f:fc:a5:57:23:9c:89:0c:
05:11:94:7c:34:5f:c8:d2:69:d3:0b:33:90:84:ba:
f3:b7:42:ff:89:58:2d:8e:79:b6:4e:25:6b:88:5f:
6a:16:d2:04:ee:16:75:20:32:17:5b:3c:73:10:5f:
2d:04:76:c9:e6:90:0c:d4:62:9e:aa:66:a2:9c:8b:
1d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:98:B2:DC:2A:1F:18:7C:0B:74:82:09:4E:9D:E2:C9:2F:BD:68:68
X509v3 Authority Key Identifier:
keyid:A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/mJiy3CofGHwLdIIJTp3iyS-9aGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.152.42.0/23
Signature Algorithm: sha256WithRSAEncryption
78:f3:e2:be:e2:33:dd:31:91:67:79:a9:1b:00:d0:37:a6:d5:
a4:7d:85:d2:91:77:60:63:99:17:90:93:44:f8:85:57:a9:a1:
d6:ad:36:89:ae:d3:6f:fc:69:59:03:a4:05:12:6d:d0:8e:73:
e5:eb:8f:39:b5:2c:27:e0:05:bc:d3:8d:9e:65:8e:2c:82:3a:
97:e0:c6:d6:53:70:3b:4b:5b:62:7e:2b:d0:5e:00:7c:03:43:
f5:95:41:3f:0f:94:3a:64:ef:47:73:13:84:4a:f6:28:6b:ab:
1c:bb:3c:73:87:81:fc:84:33:4c:22:ce:d4:64:b6:4b:b0:b4:
d0:ac:ce:8f:e4:a7:d3:ab:ea:cb:ce:22:24:8f:f3:52:f4:38:
db:a8:40:fc:13:3d:11:07:0d:a3:10:6c:57:c2:50:fb:1f:87:
3a:bf:97:10:f2:59:0a:1d:3f:d6:66:e6:d7:14:1d:6b:47:7b:
98:f7:a6:49:90:af:bf:c1:42:cb:b3:16:2e:a2:7b:9f:3e:25:
5a:26:15:a5:91:1d:cc:e2:19:f5:0e:d8:7b:8d:8b:8b:e1:50:
5f:ad:31:e4:5e:89:6f:9a:8c:1a:1b:c9:96:c9:3c:34:a2:aa:
0b:53:07:aa:33:f0:10:fd:c9:b6:75:d6:be:90:5e:8c:38:a8:
85:b6:db:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:21 2024 by rpki-client on console-fra.rpki-client.org