Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/MT2nvfE1yxozLLT1ip1RRoyWo7A.roa
File: MT2nvfE1yxozLLT1ip1RRoyWo7A.roa (raw, json)
Hash identifier: Ssqww91M2gLMFn25F6dnah6QnWnYhKZVvjK77uOtiDE=
Subject key identifier: 31:3D:A7:BD:F1:35:CB:1A:33:2C:B4:F5:8A:9D:51:46:8C:96:A3:B0
Certificate issuer: /CN=b209721f4548c26cf362e944a81b1acee7b24b53
Certificate serial: 018BE76BC4B558F03B7A980C03857D15B4E2
Authority key identifier: B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/MT2nvfE1yxozLLT1ip1RRoyWo7A.roa
Signing time: Sun 19 Nov 2023 11:51:21 +0000
ROA not before: Sun 19 Nov 2023 11:51:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 192.115.208.0/24 maxlen: 24
192.115.210.0/23 maxlen: 23
192.115.0.0/22 maxlen: 24
192.115.4.0/24 maxlen: 24
192.115.7.0/24 maxlen: 24
2a01:4280:7::/48 maxlen: 64
2a01:4280:2::/48 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e7:6b:c4:b5:58:f0:3b:7a:98:0c:03:85:7d:15:b4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209721f4548c26cf362e944a81b1acee7b24b53
Validity
Not Before: Nov 19 11:51:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=313da7bdf135cb1a332cb4f58a9d51468c96a3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f0:89:74:2f:dd:26:b1:c5:3d:d9:4f:45:c0:
56:93:00:9e:7c:17:c5:a4:52:f9:e7:4f:f8:ba:91:
73:24:13:21:6f:0b:6f:04:0c:9b:cf:89:1c:49:12:
02:98:77:de:c4:b1:85:54:41:47:6f:c7:2c:2c:81:
ab:ad:36:d6:d6:63:48:8f:71:9f:f7:95:42:63:9f:
6e:6f:56:bf:47:5b:f1:1b:a3:65:94:71:af:7f:d7:
fa:f5:ca:1e:06:cb:fb:b8:bd:4b:48:0f:57:44:ce:
9a:50:1d:b7:cc:8c:fe:89:ff:ed:28:c3:b4:3c:94:
24:3f:8e:bd:50:5e:a0:fd:04:b8:4e:4f:83:a7:45:
ce:a2:ed:96:c3:8b:3d:ea:a2:39:dc:67:87:ce:fc:
08:c0:08:71:1a:80:83:23:c5:e3:5c:1d:a5:18:b8:
79:13:e5:1d:13:a4:c6:06:7f:36:8c:b8:5a:29:aa:
e7:36:61:e4:30:19:22:02:23:d5:c6:16:c4:46:eb:
6f:b6:5b:51:f8:19:cc:69:b8:19:fb:c2:56:1b:85:
83:93:f8:8b:52:df:67:3c:47:bc:fc:9d:df:7c:c4:
fb:01:c9:a8:9f:a7:fd:4f:e4:b4:f4:61:1e:15:8f:
0c:b7:f1:90:ac:57:b1:f5:cc:6b:e2:57:00:95:e5:
77:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3D:A7:BD:F1:35:CB:1A:33:2C:B4:F5:8A:9D:51:46:8C:96:A3:B0
X509v3 Authority Key Identifier:
keyid:B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/MT2nvfE1yxozLLT1ip1RRoyWo7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.115.0.0-192.115.4.255
192.115.7.0/24
192.115.208.0/24
192.115.210.0/23
IPv6:
2a01:4280:2::/48
2a01:4280:7::/48
Signature Algorithm: sha256WithRSAEncryption
ac:ed:d9:76:a2:d6:b3:58:fd:94:58:bf:2b:6a:2d:ec:60:68:
94:7f:5e:ba:ae:68:77:64:d2:7b:15:3d:79:1f:c9:10:38:89:
63:4c:2e:e0:87:00:d7:93:67:52:74:73:da:59:7b:be:ef:b8:
1a:bc:b2:6a:1f:f7:f0:22:9d:bd:e5:c9:a7:c6:ff:b2:c1:37:
a8:be:ba:3c:65:33:bd:13:a0:a6:91:7d:47:c8:2f:ac:4b:d7:
62:bd:d4:2a:3f:66:10:97:5b:f5:b0:78:cd:d7:34:dc:f1:06:
48:b6:41:ad:de:08:e1:45:f4:7b:1e:f8:fe:bf:19:56:1f:4e:
dc:7c:f6:fb:17:e1:8d:51:cd:92:e5:07:45:a3:e3:b5:97:5a:
4b:df:5d:69:78:be:d9:c5:30:29:3a:d2:bb:3c:8a:00:18:18:
0e:18:fa:1e:6f:6f:bb:92:1e:8d:25:33:b7:8a:5d:35:7b:e0:
9e:97:fc:e7:3f:ee:40:db:19:a1:7f:85:c6:ad:8e:c8:02:8e:
d7:db:e8:b2:99:38:84:04:c0:1a:1d:3f:a3:0f:c3:60:90:19:
e0:ff:cf:30:03:42:f0:7a:2a:0e:f5:06:43:22:38:ec:ee:a9:
2c:6c:c1:a5:f4:85:5e:27:f1:9a:e0:d9:20:ec:c5:fe:a0:f1:
1f:ef:c9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:08 2024 by rpki-client on console-ams.rpki-client.org