Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mUYYhmNQdo0hvYij-Eq8n8hxVXg.roa
File: mUYYhmNQdo0hvYij-Eq8n8hxVXg.roa (raw, json)
Hash identifier: tt5+fHRcN98c/9A9eB9u+k+U4/vtVI7rMy0JlP41228=
Subject key identifier: 99:46:18:86:63:50:76:8D:21:BD:88:A3:F8:4A:BC:9F:C8:71:55:78
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018A9988BDD9AA15474B32B6F3181EF52783
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mUYYhmNQdo0hvYij-Eq8n8hxVXg.roa
Signing time: Fri 15 Sep 2023 15:49:50 +0000
ROA not before: Fri 15 Sep 2023 15:49:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 159.255.32.0/21 maxlen: 24
188.253.8.0/22 maxlen: 24
188.253.12.0/22 maxlen: 22
103.25.84.0/22 maxlen: 24
188.214.236.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:99:88:bd:d9:aa:15:47:4b:32:b6:f3:18:1e:f5:27:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 15 15:49:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=994618866350768d21bd88a3f84abc9fc8715578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d6:e8:24:61:f7:79:86:f2:f4:29:5b:75:72:
05:77:2f:93:ec:75:76:0c:26:fa:89:d9:16:0c:44:
c3:38:f5:02:f9:d0:2b:4c:78:7a:d5:31:5b:87:e7:
70:c8:45:5a:e1:0b:c2:7d:3d:69:62:db:f4:85:c3:
e7:19:75:47:84:4e:60:05:c9:1d:4b:c2:60:5b:03:
fd:65:c7:27:39:27:d8:2f:36:a4:76:54:c0:4f:0d:
47:4a:2b:c9:9b:50:d1:1c:1f:91:2a:60:c7:93:b6:
fa:ae:08:c2:40:16:9c:a3:95:46:12:f6:c6:87:13:
ca:88:da:a5:30:94:bb:e0:83:5f:e0:77:26:4d:4d:
8d:f9:d8:3f:a8:cb:bb:ef:38:e8:86:a5:76:88:76:
c5:69:07:c7:76:58:37:5a:94:c1:35:f0:62:8d:a7:
4a:0d:47:07:ee:a4:56:b3:1c:d1:d8:9a:a7:46:8e:
e6:d6:70:5a:f5:71:31:30:58:10:93:4e:0a:8a:38:
f2:c7:8d:03:b0:b5:b4:88:85:bf:b9:78:24:fe:fc:
2d:ee:25:7b:6b:2a:8e:63:5e:28:78:38:95:81:46:
fe:28:99:fd:84:83:32:c5:92:8d:eb:5f:70:a0:f8:
8e:4c:07:a6:79:fc:b1:7e:4d:fd:1f:d2:08:9a:15:
b1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:46:18:86:63:50:76:8D:21:BD:88:A3:F8:4A:BC:9F:C8:71:55:78
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mUYYhmNQdo0hvYij-Eq8n8hxVXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.84.0/22
159.255.32.0/21
188.214.236.0/22
188.253.8.0/21
Signature Algorithm: sha256WithRSAEncryption
a1:58:5e:63:26:91:f6:83:a0:4b:2d:02:08:72:03:87:1a:43:
46:db:13:52:75:7f:0a:45:c7:af:b5:49:ee:f3:9c:d0:66:c4:
88:53:c1:c1:1d:24:28:3a:61:a8:91:2b:d9:d0:85:d6:31:19:
77:cd:b7:85:5c:2e:dd:59:34:c0:82:62:92:8e:c4:e3:53:76:
34:68:d9:3f:f7:f4:93:0a:e1:f5:5c:af:15:4a:2a:b5:47:6f:
4e:cf:44:22:e6:c6:22:9b:a9:1b:24:01:c9:10:07:37:32:c8:
4a:1e:10:a6:e3:6d:36:96:57:97:ab:32:05:be:6e:fb:54:62:
92:24:e5:0c:de:cb:fa:bf:9c:d4:36:d5:b5:b0:cf:f9:95:e5:
a7:d0:73:a5:03:f9:b5:77:f9:7e:b6:02:11:75:c7:51:4a:22:
b9:73:c8:4d:3e:02:68:41:90:98:92:2d:e1:29:3a:08:c9:88:
24:6c:bb:06:31:ef:ff:26:67:6b:ca:c2:f0:f1:31:8f:17:a9:
dc:3b:c7:de:b1:e0:35:bf:0c:db:3f:17:cd:58:de:e0:d9:f3:
82:34:fb:07:ab:a4:7d:29:88:f1:27:b3:32:11:a1:a8:92:60:
f0:ea:30:45:e6:bb:49:d9:cb:66:38:3a:7d:58:8a:15:fe:9c:
10:da:d1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 06:53:46 2023 by rpki-client on console-fra.rpki-client.org