Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/M-ioZ-ERy76IOS4otTCWdI0t2-c.roa
File: M-ioZ-ERy76IOS4otTCWdI0t2-c.roa (raw, json)
Hash identifier: wfp9m/ET7434vp3+f3gALDlnnhm6DGGMK5mmnZzhnLs=
Subject key identifier: 33:E8:A8:67:E1:11:CB:BE:88:39:2E:28:B5:30:96:74:8D:2D:DB:E7
Certificate issuer: /CN=3f56231e7ef53181b630260f5739a939980bce0f
Certificate serial: 018C7EC851905669ABD550DFE28CD23D69FD
Authority key identifier: 3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/M-ioZ-ERy76IOS4otTCWdI0t2-c.roa
Signing time: Mon 18 Dec 2023 21:15:06 +0000
ROA not before: Mon 18 Dec 2023 21:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58030
IP address blocks: 193.106.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7e:c8:51:90:56:69:ab:d5:50:df:e2:8c:d2:3d:69:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f56231e7ef53181b630260f5739a939980bce0f
Validity
Not Before: Dec 18 21:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33e8a867e111cbbe88392e28b53096748d2ddbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:13:a0:b1:3c:49:2d:6d:0d:12:a1:42:f6:
91:b4:c9:7c:d0:e9:67:bc:6e:aa:e4:74:25:a1:ea:
4b:7a:85:54:8c:c4:4d:b0:fc:e5:da:96:9e:5a:9e:
bf:5e:55:48:69:44:71:34:a1:f6:eb:7a:d8:16:fe:
cc:2a:bb:a3:13:af:0d:43:f1:ad:d1:ec:0e:c0:b8:
33:22:98:3d:f9:d3:2c:8a:75:cd:54:c7:96:69:90:
37:85:23:b9:d9:9d:7b:e2:b9:76:84:46:31:fd:52:
79:f4:cb:a2:04:04:6e:4c:47:a3:d3:64:ea:ea:98:
45:fe:59:60:51:77:fc:43:0a:73:1e:8b:74:3a:53:
5c:b6:dc:23:8d:29:7c:f3:8b:99:39:fc:84:8c:27:
16:53:b2:34:d8:0d:01:e6:ce:32:27:4c:19:6e:90:
14:dd:3e:c5:45:3e:18:38:92:b7:48:f2:04:6f:9d:
5d:96:b9:42:70:b5:5b:9c:cc:ca:9c:82:06:78:dc:
d9:00:0c:e8:3e:76:dc:52:47:8e:f5:db:5f:1a:d5:
88:4a:a6:57:8c:23:65:8e:5e:53:6c:c3:7d:3a:a6:
7e:bb:0b:c6:c2:9b:58:7e:3f:51:bc:ff:a6:3b:4e:
d7:ab:b8:c8:b6:47:7b:46:3d:32:b7:b4:0f:1d:92:
71:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E8:A8:67:E1:11:CB:BE:88:39:2E:28:B5:30:96:74:8D:2D:DB:E7
X509v3 Authority Key Identifier:
keyid:3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/M-ioZ-ERy76IOS4otTCWdI0t2-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.191.0/24
Signature Algorithm: sha256WithRSAEncryption
84:1b:0c:65:ce:05:dd:e3:70:51:45:b5:5f:c6:f0:d1:82:b4:
55:6f:3f:cf:dd:4a:80:62:7a:89:e7:27:40:6a:69:ef:f4:f8:
d7:86:9c:b8:1e:a2:62:51:7a:26:b7:b3:b2:10:2f:ca:ec:c7:
17:a3:7b:0f:f7:d7:e3:ad:90:44:3a:93:11:2d:3c:9d:92:41:
16:c9:d6:e5:04:83:ef:19:61:32:4a:15:66:ac:12:2a:f7:e7:
b4:99:60:66:b7:47:ad:29:23:b8:52:dc:7f:dd:82:e8:ed:0e:
b3:45:01:ed:8f:c6:24:b0:72:c3:1f:a3:7f:c0:76:22:78:ce:
09:2c:cd:1b:29:00:ea:56:2c:c0:10:8e:23:a1:53:57:f6:ad:
86:17:e6:0f:4c:71:9f:dd:0b:bf:92:7f:ee:8a:86:c7:62:b1:
65:0b:6a:9c:98:d4:c7:e8:4a:c2:40:4b:ef:1a:8f:b5:ff:94:
7b:77:86:60:2c:26:dc:36:44:29:6f:13:e8:78:18:11:e1:5e:
ce:75:dc:86:7d:30:0f:18:74:53:e8:18:55:5a:13:ff:7e:c4:
11:35:eb:de:45:b5:d4:5b:61:0f:66:d8:b0:7b:52:c1:73:61:
28:4e:01:8f:de:7d:81:91:c6:f9:42:36:8d:74:cc:19:6e:cd:
c8:2a:d6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:48 2024 by rpki-client on console-fra.rpki-client.org