Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/MaPxqJ1MBOO719Cymy6FziIGl2E.roa
File: MaPxqJ1MBOO719Cymy6FziIGl2E.roa (raw, json)
Hash identifier: iCagtVWTG44wUJwJyIKepzeUncv3cVLm9pUQrmhNS8A=
Subject key identifier: 31:A3:F1:A8:9D:4C:04:E3:BB:D7:D0:B2:9B:2E:85:CE:22:06:97:61
Certificate issuer: /CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Certificate serial: 01884DC743F5A5ED1B86CFF937CFD0A581CB
Authority key identifier: 72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/MaPxqJ1MBOO719Cymy6FziIGl2E.roa
Signing time: Wed 24 May 2023 12:41:24 +0000
ROA not before: Wed 24 May 2023 12:41:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47692
IP address blocks: 193.84.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:c7:43:f5:a5:ed:1b:86:cf:f9:37:cf:d0:a5:81:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Validity
Not Before: May 24 12:41:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31a3f1a89d4c04e3bbd7d0b29b2e85ce22069761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:22:06:9a:55:03:ef:5b:b5:58:eb:73:1f:2f:
9a:3e:b7:36:b7:6c:0c:a1:8a:4b:68:0c:95:b7:96:
35:fe:cd:bb:67:8e:9f:34:a0:b2:91:4d:6a:cc:c1:
a9:32:14:aa:53:50:c9:6a:fa:e6:41:71:51:c9:af:
ca:fa:c8:fe:2e:de:aa:16:bb:a2:d7:20:f4:78:7f:
20:17:0a:e2:f3:75:56:40:4f:e6:51:78:ba:c0:dd:
d1:e1:5f:cb:f3:25:cd:50:3d:25:d3:f8:5d:86:a4:
ed:2e:9d:fd:ac:47:ed:38:af:42:c0:68:49:2a:09:
98:a2:7a:a2:f9:49:85:ea:ad:23:31:92:dd:00:3c:
ad:f4:6a:ca:83:58:e7:dc:b4:6a:f9:77:9a:72:d0:
86:d9:8b:3c:1f:21:f6:1f:4e:1a:dd:f0:a6:14:9f:
94:7a:04:f4:4b:1b:15:c0:3c:ad:e8:fb:94:58:9e:
e1:76:8c:cc:d0:a9:29:4a:68:ae:6b:2d:78:61:f8:
c8:08:f9:83:73:fe:d8:88:50:20:94:3b:50:1a:79:
f9:7a:64:f6:80:54:ad:32:d3:3f:4b:26:cc:fb:d3:
13:9b:1c:f3:7c:45:7a:7d:2b:84:c4:56:94:a2:67:
e7:f1:32:58:e7:50:6a:ba:6b:84:4e:0f:38:ca:29:
80:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A3:F1:A8:9D:4C:04:E3:BB:D7:D0:B2:9B:2E:85:CE:22:06:97:61
X509v3 Authority Key Identifier:
keyid:72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/MaPxqJ1MBOO719Cymy6FziIGl2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.52.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:80:cd:c7:b5:9f:dd:7b:3b:92:b7:d5:18:6d:a7:0a:53:28:
9f:21:64:61:05:dd:ab:5f:70:a0:84:0f:1f:d2:fb:29:ca:be:
bc:43:43:b6:2f:f4:1a:72:c1:ce:06:02:9a:42:8c:e6:af:b6:
15:b8:2f:40:c8:5f:72:bb:0a:67:bd:9d:33:27:3e:8a:a3:d4:
42:ed:4d:d4:11:73:cc:f9:c7:6a:50:fa:88:69:f7:0a:56:b1:
81:5d:3c:71:74:01:59:43:88:fc:6a:26:16:60:b7:0e:9d:bd:
6a:a8:8b:e8:f3:82:e9:33:7e:7f:15:9f:15:4a:ed:75:4c:df:
cc:ff:39:f6:b3:e6:e3:50:bb:e9:9c:e9:cd:ed:97:1a:1e:02:
81:5b:2b:f2:17:b9:a8:b4:65:38:37:8f:90:0c:4c:6c:cd:40:
a4:62:38:97:2f:f2:da:a0:14:b0:e5:4a:a1:6a:b8:1d:14:7e:
5c:30:1e:c7:8e:ef:1d:ee:64:f2:c2:a2:b5:16:b2:51:1f:c7:
0e:12:ac:7f:cc:38:f8:ba:03:8b:89:df:d5:86:9e:21:56:1e:
44:cb:1b:24:b0:cb:06:d2:ec:d1:c4:e2:54:4b:26:39:d4:76:
08:49:ee:1c:68:ee:8f:f4:65:34:29:aa:77:a1:f3:1f:19:8c:
67:80:40:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org