Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/MPlNNOxl9CulmKkUVIgKvbaUw5o.roa
File: MPlNNOxl9CulmKkUVIgKvbaUw5o.roa (raw, json)
Hash identifier: sbDF3+KFqVK4JSa8fxE0z6IJ6+INITfXcW8Mtao+Ji4=
Subject key identifier: 30:F9:4D:34:EC:65:F4:2B:A5:98:A9:14:54:88:0A:BD:B6:94:C3:9A
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018A40CCE59F97BD4D39B8937471F3C4BE03
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/MPlNNOxl9CulmKkUVIgKvbaUw5o.roa
Signing time: Tue 29 Aug 2023 10:18:04 +0000
ROA not before: Tue 29 Aug 2023 10:18:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 18464
IP address blocks: 178.173.224.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:cc:e5:9f:97:bd:4d:39:b8:93:74:71:f3:c4:be:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Aug 29 10:18:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30f94d34ec65f42ba598a91454880abdb694c39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:5d:59:ee:9f:55:db:49:ef:0e:c6:61:79:
df:2f:3f:d6:9e:8e:17:c6:1b:38:52:29:a2:17:cf:
18:c3:37:ff:00:e6:1f:f2:f8:3d:e5:2f:e3:7c:17:
43:8a:a1:2f:7b:c5:68:6c:1a:bb:37:81:17:93:a5:
b3:42:ad:d2:10:ed:9b:c3:5a:68:df:12:36:88:d8:
f4:28:4f:b3:d0:e3:51:af:f1:45:04:49:4d:35:d9:
95:94:19:70:26:ce:00:63:b8:8a:5d:ad:50:33:d1:
29:67:2e:eb:e2:36:3e:f6:54:3e:d1:0e:10:28:46:
24:5d:5f:ab:df:f3:80:af:4d:d4:dd:5c:dc:67:b3:
39:b2:dc:82:0e:4b:c5:d7:40:08:54:5a:2e:7c:b2:
0d:c9:91:54:b1:cf:ec:7b:91:0f:03:9c:d5:65:e1:
e9:03:b4:e5:ef:35:1d:6a:09:18:5e:1a:bb:5b:bc:
bf:e6:13:8d:d0:9f:50:49:d1:02:86:15:17:7d:00:
0a:1c:07:d9:b0:dc:4c:73:33:eb:1c:f0:82:bf:32:
37:2c:c7:dc:35:35:d6:ea:21:da:96:1c:d8:c9:c4:
b9:fc:36:4a:a2:53:c3:d4:a3:b4:f1:c6:ec:37:54:
42:d1:7a:bb:3e:56:a4:05:49:60:18:eb:7f:0e:ba:
8f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F9:4D:34:EC:65:F4:2B:A5:98:A9:14:54:88:0A:BD:B6:94:C3:9A
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/MPlNNOxl9CulmKkUVIgKvbaUw5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.173.224.0/19
Signature Algorithm: sha256WithRSAEncryption
a4:fc:3d:42:ec:7b:ad:6a:2b:d4:c4:1b:e4:10:05:25:f3:11:
de:eb:95:4f:a9:af:91:c0:01:2f:14:63:59:5e:46:cf:13:4c:
c5:1f:d5:c0:2a:63:62:cb:d9:74:d6:45:9f:34:c2:09:f4:fb:
ae:d6:1e:bd:f3:87:75:1b:6d:5d:34:2e:79:3f:ae:e0:b3:82:
b5:dc:44:2a:83:c4:f7:00:dd:4d:05:a4:94:91:f7:0b:97:99:
c4:fa:93:f7:c3:97:03:fe:c1:b5:81:34:7e:a4:51:6d:7a:0e:
3f:65:88:df:d3:2c:df:3d:45:1b:56:36:49:41:18:69:b6:43:
e6:88:60:4a:74:09:b4:01:26:dc:b6:e6:42:07:ef:78:70:b2:
1b:47:1c:fd:3c:b1:3a:3a:4c:f5:55:be:62:b8:8c:fe:94:a8:
c3:5f:43:40:df:af:53:e1:38:08:09:4b:ce:15:41:c4:de:d9:
02:30:83:71:d6:94:57:ac:03:83:83:b8:24:a6:8e:03:42:f5:
5a:86:b4:20:7e:ff:d9:a7:e7:59:89:37:74:17:67:69:01:4b:
dc:cb:ac:05:b1:bc:b0:96:df:cb:27:9a:93:da:3c:5c:fe:45:
0e:d6:10:e9:ed:21:60:6d:03:ad:ee:3d:30:ea:b9:17:76:49:
28:d4:51:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:23 2024 by rpki-client on console-ams.rpki-client.org