Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MvQ0v867hd7WDA8lttQHhqIfbVs.roa
File: MvQ0v867hd7WDA8lttQHhqIfbVs.roa (raw, json)
Hash identifier: bxTAuaM4sZOzLqZaMXA+sWX1eLuAde14Z7rVD78gc44=
Subject key identifier: 32:F4:34:BF:CE:BB:85:DE:D6:0C:0F:25:B6:D4:07:86:A2:1F:6D:5B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018AEF990EEEFAC47232F1077C6B10DCE0F6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MvQ0v867hd7WDA8lttQHhqIfbVs.roa
Signing time: Mon 02 Oct 2023 08:54:59 +0000
ROA not before: Mon 02 Oct 2023 08:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 94.198.171.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
93.90.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 09:15:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:99:0e:ee:fa:c4:72:32:f1:07:7c:6b:10:dc:e0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 2 08:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32f434bfcebb85ded60c0f25b6d40786a21f6d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:2b:90:67:72:e3:29:07:2d:84:9a:db:3d:
85:fb:22:04:8e:bb:de:f2:02:b4:20:f6:28:f2:a1:
f0:49:66:42:8d:06:7d:60:66:3e:17:34:19:03:10:
c3:63:5f:cd:21:77:07:0e:40:a8:99:72:7f:0b:9e:
3a:33:a7:ed:0f:8e:cf:52:63:34:6e:c3:3f:1a:9b:
11:c5:33:17:5e:7c:bc:47:a9:25:e2:60:21:8a:e7:
4c:bc:f8:4e:ac:79:56:cd:d4:0e:88:8c:80:40:ee:
e8:b4:6b:fa:bc:29:53:25:38:09:3d:0f:3f:cb:99:
a1:e6:36:f4:9f:b7:e8:6c:4b:66:ab:59:7b:7f:7e:
25:76:22:cf:dd:a3:65:50:b6:65:60:b5:49:16:ca:
4f:67:75:3d:a4:f0:09:c0:be:c9:a4:e3:43:aa:2d:
fe:30:e0:76:68:e4:72:09:21:bb:74:65:fa:7b:47:
80:f3:92:e9:c3:6d:23:ec:d8:0e:52:b7:99:fe:3c:
60:49:88:f0:a8:98:9b:c9:d0:1c:68:b1:ea:54:07:
8f:ee:b8:df:b3:21:3b:42:14:cf:f7:e5:da:ae:50:
72:e1:d9:bb:02:96:28:21:d4:61:ad:3b:c7:83:03:
b8:5f:5e:ee:8c:3f:a2:2f:12:d3:c8:b2:b7:66:ec:
1d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F4:34:BF:CE:BB:85:DE:D6:0C:0F:25:B6:D4:07:86:A2:1F:6D:5B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MvQ0v867hd7WDA8lttQHhqIfbVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.90.74.0/24
94.177.106.0/24
94.198.171.0/24
Signature Algorithm: sha256WithRSAEncryption
14:33:55:1f:5a:6e:6d:08:1a:4c:3f:12:8e:c5:c7:71:c8:24:
16:b5:11:76:9a:98:d8:cb:0b:ec:72:bc:31:b4:36:2a:b8:38:
6d:d5:0b:32:68:12:09:65:f2:95:4e:73:28:c6:b0:a5:c3:2b:
32:09:de:9a:2e:45:2c:c2:11:96:d4:00:e7:fb:d5:4b:f2:db:
99:26:4f:9f:08:0e:d4:be:fb:f5:4f:c1:7f:91:d8:55:a8:34:
48:c8:19:62:a8:ec:68:7f:ab:b5:78:e5:bf:66:71:99:e0:61:
f7:0d:ed:72:94:03:6a:bf:d3:b3:eb:c4:dd:fc:8e:a8:b1:c2:
da:ca:3b:78:fa:20:2c:9b:ba:56:bc:8a:a4:a0:c8:6f:41:ca:
97:7c:25:6a:04:b0:22:df:91:5a:19:1b:33:b8:5c:97:71:b0:
40:b5:66:a4:ec:c6:9a:93:31:5d:50:74:2e:ab:25:e1:28:01:
8d:cb:1d:9d:6a:09:9f:ab:6c:0b:98:f9:6c:89:74:5a:c2:12:
b6:56:3e:cc:65:4d:35:95:78:8b:9b:84:94:88:d4:0c:48:4e:
f9:05:5d:00:9c:3e:27:1d:84:b6:53:58:2e:ed:f4:c4:d2:53:
91:f3:4f:52:93:3f:78:2b:6a:3d:3c:fc:54:79:7d:9f:67:d6:
48:49:16:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org