Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/mvxv3qgc9Yn7_kbcztQm18TIjV8.roa
File: mvxv3qgc9Yn7_kbcztQm18TIjV8.roa (raw, json)
Hash identifier: nOg9/E3lSvM+rThzL0zpLEPBLdQVkaVYoY4vIG1HC58=
Subject key identifier: 9A:FC:6F:DE:A8:1C:F5:89:FB:FE:46:DC:CE:D4:26:D7:C4:C8:8D:5F
Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial: 01856ED4C71369B886AB9813F0D7CFEDEC24
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/mvxv3qgc9Yn7_kbcztQm18TIjV8.roa
Signing time: Sun 01 Jan 2023 19:35:16 +0000
ROA not before: Sun 01 Jan 2023 19:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21232
IP address blocks: 185.193.224.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 21 Nov 2023 18:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:c7:13:69:b8:86:ab:98:13:f0:d7:cf:ed:ec:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Validity
Not Before: Jan 1 19:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9afc6fdea81cf589fbfe46dcced426d7c4c88d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:6a:96:d5:a2:22:f3:2f:4a:3a:fb:d7:e6:
a8:15:01:63:98:ff:34:43:ac:cf:17:72:19:6b:39:
4d:45:48:e5:bb:2a:26:14:da:cf:86:07:c8:f4:5c:
33:6e:ca:79:25:49:aa:03:45:e5:1f:f4:44:a3:e0:
b1:a2:c1:8c:44:2b:9c:38:28:02:94:24:6f:ad:1e:
24:b4:f8:2b:1b:10:79:ba:8b:85:2a:af:d4:80:c2:
be:40:e6:e7:32:9d:38:58:82:e9:8d:a0:d4:af:cf:
8a:d9:3f:52:61:af:96:f7:aa:f1:e3:2b:3f:ce:39:
3c:8f:a9:1d:c6:b1:3f:43:21:84:23:48:a0:f6:02:
43:ea:1d:a7:7e:ff:fc:3f:70:73:12:fd:2d:b2:5d:
12:f4:54:31:ac:e7:6d:37:1e:50:54:b6:72:17:1a:
ea:f8:0f:44:4c:05:d8:68:5b:16:07:07:a6:4c:36:
1a:5e:2b:c7:e3:e4:90:3c:65:d2:b2:dc:0f:b0:d8:
b7:45:3a:8b:c6:c0:4c:ba:e7:63:5c:20:5e:ed:c5:
26:a3:65:ee:85:dc:b4:23:71:87:ea:34:a5:da:a5:
ed:69:b5:2b:86:97:f3:d8:da:c6:0e:90:72:0f:f4:
d9:a1:8d:a8:7a:bf:c6:cd:fa:54:d3:e8:66:35:35:
30:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FC:6F:DE:A8:1C:F5:89:FB:FE:46:DC:CE:D4:26:D7:C4:C8:8D:5F
X509v3 Authority Key Identifier:
keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/mvxv3qgc9Yn7_kbcztQm18TIjV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.224.0/22
Signature Algorithm: sha256WithRSAEncryption
99:9d:39:86:96:e3:9d:73:d0:a0:3d:53:38:35:02:1e:19:36:
16:fc:e1:7d:70:53:30:78:dc:fa:fa:c1:3c:45:f3:98:15:a5:
13:18:97:49:24:47:7a:d7:04:d8:e6:ea:a0:9c:a1:da:2a:ef:
56:58:5d:8a:86:95:b2:ae:1b:e3:bb:18:fe:ef:cd:98:86:9f:
32:38:f4:99:b7:07:e9:0b:2d:27:41:e1:37:ed:7a:0e:81:af:
c3:f7:f8:66:49:62:04:64:e1:3e:58:b5:89:81:8f:ad:ff:34:
73:4a:8c:a1:6d:06:8c:3e:af:3c:68:23:a7:49:6c:4c:9a:c8:
02:3d:76:ea:de:2a:34:95:8f:66:5f:eb:fa:2f:52:98:83:e2:
d2:23:87:f9:d2:32:38:ca:62:9c:7e:61:b2:7d:19:72:30:b4:
30:e8:53:aa:c8:05:1c:8d:5f:ff:fd:02:69:74:4a:97:7b:a0:
aa:dd:f0:89:63:bb:04:84:eb:03:6e:1a:e3:4e:92:89:35:8c:
47:e1:af:ec:03:4a:90:4f:8a:45:06:2e:ae:25:cf:34:9a:2c:
23:7c:53:fa:c2:83:21:f1:07:fe:e4:5f:fa:0d:15:2e:b3:51:
11:24:c5:2e:32:e0:99:9c:b0:27:46:98:f9:8d:ee:1f:69:06:
99:9a:db:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:04 2024 by rpki-client on console-ams.rpki-client.org