Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MqdgTSOSne2g8x2gBLuZac4f64w.roa
File: MqdgTSOSne2g8x2gBLuZac4f64w.roa (raw, json)
Hash identifier: yOW/2vIwBMbiUJn/FaLqqc8I3cHzmSmzUMoz1K1x9jc=
Subject key identifier: 32:A7:60:4D:23:92:9D:ED:A0:F3:1D:A0:04:BB:99:69:CE:1F:EB:8C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018BA36AEFB86ED7B4A09C17D01069159897
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MqdgTSOSne2g8x2gBLuZac4f64w.roa
Signing time: Mon 06 Nov 2023 06:56:16 +0000
ROA not before: Mon 06 Nov 2023 06:56:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202358
IP address blocks: 92.114.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a3:6a:ef:b8:6e:d7:b4:a0:9c:17:d0:10:69:15:98:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 6 06:56:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32a7604d23929deda0f31da004bb9969ce1feb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a7:e3:dd:1d:b7:dd:5a:5f:f6:fa:37:a3:35:
8d:9f:d8:ba:87:54:0a:93:73:e7:09:df:ad:2b:37:
8d:47:8a:1b:ef:18:f9:78:d5:98:36:68:ab:c4:41:
f6:7c:cb:94:20:06:a3:5b:42:a3:e3:e7:ee:40:42:
cf:ab:55:b7:2b:b5:b2:85:ca:7f:2f:72:28:60:63:
f7:3d:8d:c9:ad:2c:1c:4f:77:b2:69:31:5e:21:fd:
f3:71:5b:9d:de:cd:50:49:7d:15:e2:7a:02:14:44:
bb:a5:34:c0:24:b8:ec:6e:3d:22:31:cb:c3:81:f0:
3a:91:12:56:6b:92:05:c0:05:ee:8a:a9:0c:60:27:
50:ee:cf:52:9c:d1:74:50:d2:02:45:84:77:4e:d3:
e2:01:07:41:b2:fc:c1:5d:d2:87:8f:e0:c8:eb:fc:
a9:cb:94:37:30:d3:7f:c7:95:86:78:67:0a:0a:bb:
bd:f1:ef:3e:da:13:9b:49:9e:63:07:37:b0:b2:1a:
e5:07:32:4d:a3:4d:fc:94:cc:a9:e8:e3:37:a0:50:
2e:b3:7f:41:83:5c:6d:b8:40:5f:00:83:22:2b:92:
fc:58:40:81:6b:ee:25:4e:7e:b6:45:6b:53:24:d1:
89:f2:62:26:96:0c:50:62:4a:f8:86:3c:e1:9c:a2:
ca:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A7:60:4D:23:92:9D:ED:A0:F3:1D:A0:04:BB:99:69:CE:1F:EB:8C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MqdgTSOSne2g8x2gBLuZac4f64w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.32.0/24
Signature Algorithm: sha256WithRSAEncryption
73:37:c6:26:4c:c5:82:cc:b4:c3:06:c6:a3:ec:6b:0a:ba:d8:
21:5d:93:7a:23:88:c2:52:db:66:e2:70:ae:30:90:d9:9b:c8:
5a:77:5d:51:11:c3:6a:e6:38:b4:5e:52:2e:e7:43:23:11:61:
0e:12:59:2f:d4:11:8a:66:a9:48:7a:d7:1f:d4:a7:e8:4b:85:
9f:f6:8b:86:a6:d1:c9:33:06:a3:be:23:17:f1:18:3e:3c:8e:
aa:f4:46:77:da:d0:33:93:4b:c9:88:c2:ae:f8:46:55:86:40:
65:7c:62:b0:d3:40:2d:ac:d5:0f:a5:31:ba:63:01:be:54:7a:
f6:5e:99:64:05:2a:ca:35:d8:06:89:8d:62:b8:cc:17:a6:d2:
0b:f0:2b:02:3f:fc:a2:97:ba:79:7b:39:2a:42:71:12:b3:69:
b6:af:12:55:08:59:7f:75:3d:db:50:ed:8a:c9:ce:78:1e:1b:
d3:8c:8a:6c:10:f5:51:ad:ea:8e:e9:91:04:27:35:ee:e2:0c:
a6:16:bd:40:96:20:c4:dc:e5:73:a2:a0:bb:11:8b:28:e1:07:
1e:6c:8a:17:47:ca:83:d3:43:f5:2c:0b:3d:39:37:fb:f2:42:
35:34:f8:26:5b:56:1b:40:8e:75:63:a3:34:53:6f:b9:7e:7e:
09:61:4e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org