Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/MCzpgTDES3xEvnbYhfZ-leW6BpI.roa
File: MCzpgTDES3xEvnbYhfZ-leW6BpI.roa (raw, json)
Hash identifier: KGjJyh902lG/qXHPl365CDmajyBruvLSOs2858Q5llY=
Subject key identifier: 30:2C:E9:81:30:C4:4B:7C:44:BE:76:D8:85:F6:7E:95:E5:BA:06:92
Certificate issuer: /CN=4383c38e193ecde277cac8f09da4187faebda616
Certificate serial: 018572F13150DF03DE171FEC02D75A5C8687
Authority key identifier: 43:83:C3:8E:19:3E:CD:E2:77:CA:C8:F0:9D:A4:18:7F:AE:BD:A6:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4PDjhk-zeJ3ysjwnaQYf669phY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/MCzpgTDES3xEvnbYhfZ-leW6BpI.roa
Signing time: Mon 02 Jan 2023 14:44:47 +0000
ROA not before: Mon 02 Jan 2023 14:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 188.93.138.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:f1:31:50:df:03:de:17:1f:ec:02:d7:5a:5c:86:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4383c38e193ecde277cac8f09da4187faebda616
Validity
Not Before: Jan 2 14:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=302ce98130c44b7c44be76d885f67e95e5ba0692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8e:38:e7:b9:4a:b3:ae:3d:e0:de:79:f6:96:
a1:39:b3:30:07:cd:77:99:27:53:dc:73:c2:a5:76:
dc:2a:ac:5d:df:ab:14:8f:4b:cd:dc:13:1d:0a:02:
54:e6:9e:c9:e6:2e:26:af:44:1e:3e:13:da:c0:db:
7e:c3:33:1e:85:5b:48:63:ee:00:d5:59:fa:af:9d:
a4:6b:a8:6e:bb:49:40:11:f2:d5:5a:13:99:90:73:
b2:1c:22:0c:27:87:0a:31:d1:5d:34:f8:e5:09:1f:
d0:84:06:54:db:50:13:3f:b9:65:2c:96:27:00:6c:
0b:50:4d:52:c1:01:8d:13:bf:16:8a:5f:c9:a5:5f:
35:9e:1d:0e:84:d7:7c:ef:55:3b:87:99:d4:89:ff:
64:b0:a5:5d:0a:03:79:bd:fe:96:00:04:d9:73:7e:
bc:6e:a7:ce:14:b9:ac:90:8c:46:bd:7c:74:c9:b0:
bd:32:63:93:61:9f:78:f0:94:31:6e:a2:f2:9c:51:
28:44:ab:f8:e3:83:8b:14:c9:17:59:5f:18:ad:68:
cf:06:5e:2b:f4:83:92:a9:93:0f:e4:1e:ac:1e:02:
7e:49:8a:3a:98:d7:73:a3:9a:bd:16:72:34:81:51:
6e:b0:32:8a:d7:51:8b:fc:f4:5c:9c:0d:a6:17:ed:
d2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2C:E9:81:30:C4:4B:7C:44:BE:76:D8:85:F6:7E:95:E5:BA:06:92
X509v3 Authority Key Identifier:
keyid:43:83:C3:8E:19:3E:CD:E2:77:CA:C8:F0:9D:A4:18:7F:AE:BD:A6:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4PDjhk-zeJ3ysjwnaQYf669phY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/MCzpgTDES3xEvnbYhfZ-leW6BpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/Q4PDjhk-zeJ3ysjwnaQYf669phY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.138.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:78:69:d5:ea:e6:b9:6a:04:ba:62:89:7e:4a:a5:95:f0:98:
38:9c:4a:4b:e4:48:ef:7a:06:82:4d:54:ef:27:cb:b4:71:57:
47:ca:b1:d3:54:8a:b0:ca:c7:4b:b9:73:b3:9f:cc:e2:3a:53:
8e:9a:7a:10:98:e4:c5:f1:34:41:4b:b2:02:fd:58:d4:73:ea:
a1:81:6e:09:86:8a:cf:ad:a1:a6:f8:78:42:ae:96:f6:d8:d1:
06:6f:d3:fd:4a:d6:01:92:fb:b9:45:46:5f:9a:68:65:fa:85:
41:77:d4:02:f8:27:dd:fa:11:de:ca:02:8b:9b:5a:c4:bf:2a:
f4:6f:36:99:00:6b:24:93:7f:25:69:48:14:93:22:19:84:1d:
90:1b:13:92:5c:99:67:1e:9c:9a:a6:dd:16:1e:9a:e4:83:be:
82:7e:ca:cc:c6:9b:cb:47:ce:eb:8f:97:34:60:f7:18:ee:3a:
c3:0d:f1:11:31:cd:92:26:eb:81:ae:7c:59:da:48:b9:a6:da:
3f:8f:c0:ad:3e:88:67:76:97:a5:38:f8:cb:ce:8c:91:34:d9:
c8:04:a3:10:40:8b:32:56:19:ed:18:ca:3c:da:ba:c8:c6:24:
d8:0a:26:c8:65:d1:f7:e0:49:2b:1d:1b:13:00:4a:60:f3:de:
2c:54:81:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 08:34:27 2023 by rpki-client on console-ams.rpki-client.org