Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/MAEgHPmMiHJMeOMyr6iLbGrMfuA.roa
File: MAEgHPmMiHJMeOMyr6iLbGrMfuA.roa (raw, json)
Hash identifier: BP32232QQCq8KwrCp5wW4p5X9CEc2KJ6ELszrDoPQDw=
Subject key identifier: 30:01:20:1C:F9:8C:88:72:4C:78:E3:32:AF:A8:8B:6C:6A:CC:7E:E0
Certificate issuer: /CN=0072c08f74d2a842a71f23ab61499b52694fc7a5
Certificate serial: 01856DDD683466F7213E9D4C1E59A7DFC5B1
Authority key identifier: 00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/MAEgHPmMiHJMeOMyr6iLbGrMfuA.roa
Signing time: Sun 01 Jan 2023 15:05:04 +0000
ROA not before: Sun 01 Jan 2023 15:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28717
IP address blocks: 194.50.57.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:68:34:66:f7:21:3e:9d:4c:1e:59:a7:df:c5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0072c08f74d2a842a71f23ab61499b52694fc7a5
Validity
Not Before: Jan 1 15:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3001201cf98c88724c78e332afa88b6c6acc7ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:86:0f:be:21:8c:87:c9:19:d9:6a:15:a2:
b5:e0:4a:50:e7:c0:60:06:3d:24:26:6d:f9:96:b3:
45:ed:4a:a7:cc:33:4b:45:10:72:06:df:6c:f6:ac:
18:ef:d7:86:f1:7c:2b:25:00:68:10:e7:29:d2:f6:
e6:c1:cb:03:a9:a4:1b:bd:89:43:5c:5a:d3:47:02:
8e:ab:73:16:81:3f:d7:5f:44:24:f5:a6:69:0b:7e:
c6:ae:6d:3a:f2:d8:b1:04:27:6a:61:48:36:c2:c8:
bc:ec:3d:2d:94:ca:28:5c:da:2e:79:a9:fd:40:e1:
a2:7e:7f:fc:71:96:26:6f:0b:92:ff:98:83:5a:d6:
00:ca:d5:31:88:f3:d4:e7:c0:2f:39:23:61:15:6b:
1b:65:c1:a8:f3:3d:3a:04:ff:ae:1b:a8:63:f8:fd:
4c:89:44:3e:ad:1d:85:52:91:13:83:d9:96:cb:99:
67:8f:62:78:10:fc:41:a9:86:0e:f6:87:56:1e:67:
cb:ce:24:80:f8:8d:ab:8c:f2:db:31:c6:9e:c5:73:
5f:87:60:61:98:84:23:22:6f:78:35:e3:c2:f9:1c:
bf:ed:50:21:1b:35:62:c6:4e:3a:67:7b:6c:68:6b:
74:0f:3e:36:18:16:78:a2:f3:99:cc:1b:78:01:ea:
b6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:01:20:1C:F9:8C:88:72:4C:78:E3:32:AF:A8:8B:6C:6A:CC:7E:E0
X509v3 Authority Key Identifier:
keyid:00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/MAEgHPmMiHJMeOMyr6iLbGrMfuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.57.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e3:9a:7a:d6:5b:3b:b6:a6:42:b1:21:00:6c:80:c2:19:cb:
3a:77:a2:73:c3:57:4d:6b:a0:33:4b:ce:7d:e2:32:5d:21:54:
3d:bb:4e:45:23:20:ee:e6:77:ef:a2:80:cd:f4:66:71:19:62:
34:59:da:b8:40:07:16:ca:74:b4:17:3c:3d:d6:2d:c2:b8:c4:
89:ac:a2:ec:26:c3:d4:dd:f6:1f:23:2d:64:ea:50:6b:fa:fc:
a5:93:86:df:0c:45:79:28:cd:96:0b:58:a8:45:03:c0:e3:e6:
1e:25:24:a3:12:71:94:03:17:75:f4:9a:ee:51:7c:2d:91:fc:
e6:f8:7e:77:14:bb:fe:f1:ab:3e:1f:51:f7:4d:83:14:53:37:
10:bd:bc:b3:81:dd:5c:98:be:f0:a7:b4:9e:58:da:25:78:94:
a4:a6:18:84:15:1f:f5:23:68:47:e4:74:80:1d:bc:0f:7b:f1:
b4:44:01:55:4c:97:cc:68:2b:23:da:28:9a:ef:b5:cd:32:ad:
99:52:3d:77:e7:7d:36:8e:4e:0a:05:74:63:a1:91:46:5d:b6:
d7:1d:eb:ce:77:04:54:0d:d8:29:8d:4d:46:7e:4d:3f:e9:3a:
17:d8:6c:06:57:e1:9a:3c:8d:bb:fa:99:29:a2:25:de:db:70:
50:08:59:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:41 2024 by rpki-client on console-fra.rpki-client.org