Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/mx7CVy9ihbCYmVKcVqGIHK2eNb0.roa
File: mx7CVy9ihbCYmVKcVqGIHK2eNb0.roa (raw, json)
Hash identifier: yCfstxy/KIyYqnG1OII1KIfKt7Xt4TIUDGMZ+4YOOLM=
Subject key identifier: 9B:1E:C2:57:2F:62:85:B0:98:99:52:9C:56:A1:88:1C:AD:9E:35:BD
Certificate issuer: /CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Certificate serial: 018AF1E02001094DB4225E41AD79246461F4
Authority key identifier: F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/mx7CVy9ihbCYmVKcVqGIHK2eNb0.roa
Signing time: Mon 02 Oct 2023 19:31:51 +0000
ROA not before: Mon 02 Oct 2023 19:31:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208537
IP address blocks: 213.159.24.0/23 maxlen: 23
94.101.104.0/24 maxlen: 24
194.102.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f1:e0:20:01:09:4d:b4:22:5e:41:ad:79:24:64:61:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Validity
Not Before: Oct 2 19:31:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b1ec2572f6285b09899529c56a1881cad9e35bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c2:4f:92:7f:bc:44:d9:78:f3:8e:48:b4:21:
8c:fc:1f:e4:77:df:57:a2:43:f7:1a:39:90:1d:dc:
c3:d8:c9:b2:ff:72:89:40:69:e6:84:31:9d:74:63:
45:08:2d:ff:13:84:72:95:20:aa:71:58:d5:36:c7:
90:f0:ae:82:d8:0d:1d:5d:d3:4a:c5:91:9f:2c:db:
d2:36:5c:6f:32:28:b0:fb:33:67:b8:38:04:a1:cd:
62:2f:d3:b7:63:bc:98:da:62:e3:94:d4:1c:43:a9:
a3:a6:e4:e9:48:3d:7c:9c:cd:55:ba:98:e4:05:ec:
a5:fd:13:da:e6:7b:aa:5b:30:28:43:a3:df:06:62:
c8:1f:fc:11:b6:da:54:66:86:c8:a4:c3:45:38:41:
8d:a4:c3:28:ab:7e:3a:a0:2b:d9:a1:f7:cc:43:e6:
4b:ed:4e:55:1c:94:97:5f:d6:2f:4b:83:bb:a3:ac:
07:4f:15:aa:ef:54:c8:74:25:80:d4:25:71:0a:32:
f1:2a:5f:fb:cd:41:a0:c6:9a:17:52:83:1e:8c:2e:
af:0c:fb:62:59:67:4b:00:da:19:7a:df:13:e4:7f:
55:ae:90:a0:ed:db:a9:95:3c:99:b0:de:22:ba:74:
a6:eb:df:5b:f8:23:27:e7:72:91:8e:ab:a4:a1:9a:
e6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1E:C2:57:2F:62:85:B0:98:99:52:9C:56:A1:88:1C:AD:9E:35:BD
X509v3 Authority Key Identifier:
keyid:F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/mx7CVy9ihbCYmVKcVqGIHK2eNb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.104.0/24
194.102.239.0/24
213.159.24.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:97:74:0a:f7:d5:dd:86:5a:59:3d:4d:38:f3:98:3a:b0:c6:
e5:f7:2a:7e:ed:fa:78:18:9d:91:8f:05:4b:dc:aa:28:9d:42:
90:20:f7:49:16:78:06:10:c1:46:e1:c6:ce:0e:27:54:e9:7a:
17:29:0f:c7:bc:ee:82:b7:86:65:b3:08:bb:2d:5f:2f:e7:b8:
7c:bd:35:65:f7:ae:18:30:66:80:ad:9d:9c:c4:96:13:60:cd:
ca:0b:b0:cf:06:43:6d:d7:fa:57:d3:c1:20:84:e3:9b:af:ef:
fd:1b:bf:0a:a5:3c:7e:26:49:ff:7b:40:70:26:65:4b:dc:89:
1f:ce:df:48:4a:f6:ea:20:4a:4d:07:43:a8:6d:ed:31:53:38:
1a:1b:d2:79:b2:5d:b7:12:ff:f9:86:ac:64:b8:22:0e:48:8d:
b0:7d:90:50:7b:12:d1:f2:73:92:54:48:ec:e6:05:bc:2e:d8:
88:69:c3:08:43:b0:c7:f8:7e:89:a5:c7:51:e0:07:73:bc:15:
8d:b6:7d:b8:b3:00:e5:f9:44:d8:56:49:f3:4c:13:50:79:d9:
fa:63:70:10:a5:37:85:98:97:de:37:d4:90:36:ea:1d:16:12:
d5:dc:67:60:e1:54:26:48:b0:16:ff:4d:dd:b9:be:31:62:a6:
5c:e4:3c:64
-----BEGIN CERTIFICATE-----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 at Tue Oct 3 17:23:09 2023 by rpki-client on console-fra.rpki-client.org