Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/mwOQNAkS1TjiydqkM8_piiKjPy0.roa
File: mwOQNAkS1TjiydqkM8_piiKjPy0.roa (raw, json)
Hash identifier: N2yUtNHCBqYbQZn7jWxGW8EfDkXbjYO2J9KJPYgVt5w=
Subject key identifier: 9B:03:90:34:09:12:D5:38:E2:C9:DA:A4:33:CF:E9:8A:22:A3:3F:2D
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018B612D8979143631D79C141D1A5008E529
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/mwOQNAkS1TjiydqkM8_piiKjPy0.roa
Signing time: Tue 24 Oct 2023 10:14:16 +0000
ROA not before: Tue 24 Oct 2023 10:14:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.102.96.0/19 maxlen: 24
92.114.40.0/22 maxlen: 24
5.102.96.0/20 maxlen: 24
5.102.112.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Nov 2023 18:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:2d:89:79:14:36:31:d7:9c:14:1d:1a:50:08:e5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Oct 24 10:14:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b0390340912d538e2c9daa433cfe98a22a33f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:23:22:54:98:f5:25:4e:f5:3c:67:8f:1c:46:
9e:ba:9c:43:26:d0:d0:7c:38:75:6a:51:9b:b4:e5:
dd:e5:18:91:33:80:72:dd:20:7c:07:39:54:84:de:
a4:46:d7:1e:5b:8d:03:5b:5f:b4:c3:c3:f3:43:1d:
cd:32:87:6e:6a:31:e7:9e:9e:17:be:06:e9:23:0b:
a6:2a:eb:ee:7f:5d:df:ae:f1:fe:ce:d0:6c:37:63:
d1:08:92:0a:c0:2a:59:f1:ad:10:aa:d1:76:28:85:
9a:d9:65:b5:68:da:f3:54:da:ea:0d:96:67:79:b9:
cf:fd:49:12:d4:63:c1:d9:a5:32:8d:e4:af:8e:cf:
e6:4b:94:f0:8b:91:ab:f6:68:4e:0c:c5:03:c1:14:
55:ab:bf:bd:6f:87:e1:44:65:14:9a:70:2b:4a:5a:
c4:ba:1e:b6:1d:10:97:7e:c3:91:d7:ef:dc:f7:85:
34:ba:b1:c9:14:ef:4e:a9:2a:98:ce:c1:01:e8:a2:
5a:c3:46:29:6a:fb:1d:88:3a:9e:6f:fa:2f:27:8e:
86:7e:bf:fe:93:86:08:26:f0:2a:ce:33:d8:ca:69:
e6:00:48:43:0c:75:af:53:35:b9:0b:66:bb:63:af:
54:da:89:2d:6a:1e:f2:2c:25:1d:cb:a3:b1:a8:fc:
ac:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:03:90:34:09:12:D5:38:E2:C9:DA:A4:33:CF:E9:8A:22:A3:3F:2D
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/mwOQNAkS1TjiydqkM8_piiKjPy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.96.0/19
92.114.40.0/22
Signature Algorithm: sha256WithRSAEncryption
54:5d:14:b9:fd:eb:fe:0c:69:6b:66:af:dc:6d:b8:9d:5c:8e:
cb:10:aa:0d:0d:54:ea:7d:e8:c7:b2:a8:68:07:37:ae:2a:74:
00:ba:69:5c:a3:df:0b:f9:76:ce:ff:f9:7f:5a:08:93:da:d0:
52:c6:2a:84:54:c6:91:21:a7:d2:27:01:79:8c:df:cb:e5:8d:
cc:93:2f:b7:d0:7a:48:b1:89:58:7f:1a:25:54:8b:71:44:d8:
3c:b5:96:b2:50:40:2e:26:4e:b3:66:74:62:b3:a4:db:f1:b2:
a6:30:21:7b:b6:6a:07:af:71:e6:24:3b:53:e6:1c:28:65:df:
7e:8e:44:74:72:fb:d3:1b:21:ce:75:7d:7c:4c:bc:50:2c:ba:
82:29:49:e4:17:d0:d0:f0:fc:b8:ef:55:28:d8:d3:38:31:70:
eb:f5:85:18:82:a8:d5:22:0f:06:3a:d7:ca:5f:d0:dd:f4:67:
46:42:bd:83:1f:19:61:3f:b6:e1:ff:17:1f:e4:a1:82:6d:ca:
f9:d5:3b:92:7d:2a:48:7c:a8:47:4b:91:45:22:c7:0a:7a:f3:
2c:e2:22:98:90:8b:6e:19:6c:c4:72:61:88:a7:a3:c4:ad:98:
f7:ae:99:68:32:11:74:9b:7e:b1:fe:b4:7c:f2:8a:cd:be:d1:
77:01:23:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org