Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/mQ6imCfs1pN6d-ztB_LC-Zgwqdo.roa
File: mQ6imCfs1pN6d-ztB_LC-Zgwqdo.roa (raw, json)
Hash identifier: toeXZx6mDoyYFi7Rz7TeMaIzqndo0xvjsZ3+jmArGdc=
Subject key identifier: 99:0E:A2:98:27:EC:D6:93:7A:77:EC:ED:07:F2:C2:F9:98:30:A9:DA
Certificate issuer: /CN=7bbf58975b81e8f9f9c15e4d8b899190cec00687
Certificate serial: 01856F3938A3FB6F19E8FA87A9B3ECE72E1F
Authority key identifier: 7B:BF:58:97:5B:81:E8:F9:F9:C1:5E:4D:8B:89:91:90:CE:C0:06:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/mQ6imCfs1pN6d-ztB_LC-Zgwqdo.roa
Signing time: Sun 01 Jan 2023 21:24:59 +0000
ROA not before: Sun 01 Jan 2023 21:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211219
IP address blocks: 194.31.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:38:a3:fb:6f:19:e8:fa:87:a9:b3:ec:e7:2e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bbf58975b81e8f9f9c15e4d8b899190cec00687
Validity
Not Before: Jan 1 21:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=990ea29827ecd6937a77eced07f2c2f99830a9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:1f:66:1f:50:df:1a:97:5a:2b:9c:f3:58:
43:ab:c6:fd:25:90:34:7d:90:ea:6f:23:1d:33:d8:
f5:31:28:cf:35:ff:be:10:95:b1:b6:a1:94:94:4e:
e6:4d:21:07:33:cd:d3:7b:17:b4:90:3e:17:9d:6b:
df:31:a6:28:8b:58:8c:96:ae:12:b5:29:15:09:ac:
b0:4b:70:6f:bd:ea:06:55:b8:fd:1d:4d:84:19:4a:
c7:9d:2e:9a:91:8b:50:99:a9:e4:8f:da:10:bf:1e:
ce:71:ec:06:d6:dd:70:43:4b:88:e7:23:ea:f4:0b:
73:c2:56:5e:95:92:56:c1:d3:db:f6:da:89:e0:ca:
c2:2d:9d:38:84:1c:22:ef:78:ee:a1:63:b1:e6:32:
fd:4f:74:df:69:fa:d7:0f:b5:d3:ec:9e:e1:60:4c:
bc:5f:25:3f:b3:6b:da:15:37:eb:18:30:5a:02:ac:
df:e1:ea:8a:f9:e2:e8:c4:c4:6f:a4:cc:f8:fd:ad:
fd:52:22:9c:a4:c7:d6:15:fd:fe:62:ab:a2:ec:99:
c6:4d:f8:58:b0:d3:82:b8:ce:54:5d:ca:9f:7a:70:
69:9f:24:09:31:c0:ba:16:46:44:41:65:b0:00:0b:
ef:db:b3:52:8e:65:7c:19:72:50:f5:c2:20:23:74:
b2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0E:A2:98:27:EC:D6:93:7A:77:EC:ED:07:F2:C2:F9:98:30:A9:DA
X509v3 Authority Key Identifier:
keyid:7B:BF:58:97:5B:81:E8:F9:F9:C1:5E:4D:8B:89:91:90:CE:C0:06:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/mQ6imCfs1pN6d-ztB_LC-Zgwqdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.253.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:58:f6:43:95:ce:42:19:fe:77:f5:f0:97:a1:bc:b9:48:38:
20:b0:11:1a:ed:7b:83:1a:32:b9:59:0b:5e:22:59:7d:fa:0a:
c6:59:05:c2:86:a5:a4:82:e0:a3:4c:3d:1c:ba:5a:cb:3e:e5:
3e:92:dd:3b:4e:5d:a0:c9:03:b8:ea:2e:8c:f7:81:68:1a:d0:
9e:8a:c9:89:db:49:02:91:7a:f3:f8:66:87:a1:6a:60:01:6c:
be:76:1b:31:50:8e:d0:a6:d8:87:e8:b5:33:6b:54:99:15:d6:
b3:bd:3d:8d:dd:46:e5:24:6e:8d:1e:d0:08:50:2f:45:4d:25:
ee:5a:fd:ad:ef:ca:fc:11:3f:dd:b9:db:f6:51:87:be:4e:2b:
30:7d:4c:f7:db:83:cf:a3:a2:84:6e:75:5f:73:20:2e:87:48:
13:9d:fe:f9:d0:29:b4:38:a6:75:42:c9:77:1f:43:05:12:62:
e4:cf:50:8a:98:56:6f:93:c4:3f:2e:61:2b:d6:06:6d:e0:27:
de:cb:13:44:05:f1:43:c0:5f:05:38:5d:cb:42:7d:b1:07:74:
fe:e1:38:25:c5:32:65:a0:4d:87:ef:5d:11:67:2d:05:96:4d:
1a:2e:e6:5c:de:93:20:53:4e:6a:28:ec:0a:c2:f1:72:5d:25:
22:d9:6b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:42 2024 by rpki-client on console-fra.rpki-client.org