Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/mUQjqe6HcBRliQKU8FYZJj9h9Sk.roa
File: mUQjqe6HcBRliQKU8FYZJj9h9Sk.roa (raw, json)
Hash identifier: FC9RV1k/z3BHmN+Op4W8PNWTmyTEmk1tYs4PWMh9ZcQ=
Subject key identifier: 99:44:23:A9:EE:87:70:14:65:89:02:94:F0:56:19:26:3F:61:F5:29
Certificate issuer: /CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Certificate serial: 0190B12D4CFD110C7D71FC100C7AA787CF44
Authority key identifier: 47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/mUQjqe6HcBRliQKU8FYZJj9h9Sk.roa
Signing time: Sun 14 Jul 2024 12:17:34 +0000
ROA not before: Sun 14 Jul 2024 12:17:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60014
IP address blocks: 193.106.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 04:52:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b1:2d:4c:fd:11:0c:7d:71:fc:10:0c:7a:a7:87:cf:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Validity
Not Before: Jul 14 12:17:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=994423a9ee87701465890294f05619263f61f529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:fe:a3:c7:8c:0c:34:6e:3c:5a:23:58:c5:
d3:cf:1f:82:cd:b1:f7:9c:0b:47:c8:ac:b6:0a:7c:
22:d7:11:6a:de:25:14:ac:83:6b:44:88:8f:81:ae:
93:2d:af:2a:e0:1f:9c:1a:c1:90:f3:08:6a:b3:f7:
7c:aa:49:a3:63:12:a0:6e:e0:7c:d7:91:4c:93:f7:
e5:b7:a5:be:45:1e:ab:3b:8d:91:eb:dd:49:13:14:
52:2c:90:cb:8b:a9:35:f9:23:df:4d:12:23:1e:e9:
4d:c2:c5:1a:9f:b7:4f:f4:db:23:7f:e8:98:fd:04:
98:df:79:cd:ce:a8:56:80:2e:a3:36:89:cf:ef:79:
bc:6a:30:55:53:e8:91:81:55:43:ec:ef:05:ab:a6:
c1:4d:2f:b6:53:c0:05:7b:f7:76:8c:a0:0e:ca:bc:
3c:4b:ea:9b:0e:ba:8c:7e:da:0c:f2:90:45:9b:72:
ba:eb:bd:5f:c2:bd:27:1b:a4:ea:e3:c8:cd:80:9b:
e2:6d:2f:40:be:ba:fa:7e:14:fa:9c:88:d2:3e:5a:
6d:51:4e:94:22:d2:8e:4c:30:ce:c7:8d:0a:9a:37:
e4:1e:04:6c:23:68:40:9c:a5:cd:5c:5f:2b:ad:b0:
e3:51:80:c5:42:9c:2d:b7:48:b4:89:f8:7c:ed:13:
53:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:44:23:A9:EE:87:70:14:65:89:02:94:F0:56:19:26:3F:61:F5:29
X509v3 Authority Key Identifier:
keyid:47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/mUQjqe6HcBRliQKU8FYZJj9h9Sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.190.0/24
Signature Algorithm: sha256WithRSAEncryption
43:b9:96:dc:95:ac:75:4d:6d:36:03:bb:0c:bd:bc:ab:b4:7b:
40:90:7a:d8:be:77:91:f3:1b:54:1f:a9:d1:76:9c:3d:0e:9d:
63:49:87:8e:44:0d:d1:29:51:39:15:c2:f8:96:c9:2e:65:74:
c4:c7:c4:eb:6b:18:23:b4:2a:f7:40:37:4b:36:7f:54:7f:7d:
65:a5:b0:50:d9:d3:d7:c7:76:26:95:89:24:2f:e1:02:93:c8:
7e:f7:24:58:53:a0:17:77:7c:cc:2e:ff:ca:89:d9:5c:96:f2:
49:b5:bd:b2:35:d2:e6:bb:d5:d6:4c:63:8e:cd:25:bc:71:74:
fc:27:58:84:73:69:af:0f:46:85:cc:3f:c2:7a:c4:0d:19:9d:
e9:a3:7c:74:11:85:48:d6:2c:35:d3:dd:b7:23:5c:3e:ee:dd:
23:93:40:22:14:b3:d0:83:4b:07:4f:ac:cf:97:2e:21:f1:ea:
85:3a:d8:11:8a:d8:ea:ff:e7:9f:28:6e:a0:ce:52:40:9b:8f:
11:44:4c:34:e8:09:47:e7:3d:ed:b6:3d:35:1c:a8:26:68:20:
65:08:3d:50:25:b0:93:bf:70:0d:f1:1f:e1:fe:5b:c6:0c:dd:
aa:c6:26:e8:e1:6b:c4:81:21:1a:d1:34:0a:23:91:aa:6c:7b:
e4:2f:d6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 07:10:28 2024 by rpki-client on console-ams.rpki-client.org