Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/MpftU7UgDloVWUcy9ONLyrH3m8k.roa
File: MpftU7UgDloVWUcy9ONLyrH3m8k.roa (raw, json)
Hash identifier: 4+MbhOb+efQyK98W6cXlpc9pv2JP46vL8VZh1L8k1IM=
Subject key identifier: 32:97:ED:53:B5:20:0E:5A:15:59:47:32:F4:E3:4B:CA:B1:F7:9B:C9
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 018CC7272C2D043B1EF1CEE2A10666F3487E
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/MpftU7UgDloVWUcy9ONLyrH3m8k.roa
Signing time: Mon 01 Jan 2024 22:31:22 +0000
ROA not before: Mon 01 Jan 2024 22:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206854
IP address blocks: 93.126.30.0/24 maxlen: 24
193.178.201.0/24 maxlen: 24
193.178.202.0/24 maxlen: 24
93.126.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Mar 2024 14:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:2c:2d:04:3b:1e:f1:ce:e2:a1:06:66:f3:48:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Jan 1 22:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3297ed53b5200e5a15594732f4e34bcab1f79bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:47:ae:75:b4:e6:df:28:53:ac:07:b9:80:
51:d3:a8:56:98:56:38:31:33:91:5f:98:8a:02:08:
ff:d1:6c:7e:ac:fa:83:64:60:b4:c1:47:3f:79:8b:
21:6c:07:4c:dd:70:e9:56:5c:5a:34:e2:be:5f:e4:
75:d0:b3:29:04:9a:a6:df:1a:da:eb:4a:25:f3:01:
80:8d:48:08:a2:f5:39:5b:fa:e9:ed:fe:58:fe:ce:
01:89:31:d2:04:1b:2e:24:bf:d4:c2:22:f9:b0:6f:
27:d2:14:22:83:9b:81:90:a5:01:08:45:34:12:0b:
86:7b:2c:81:8d:61:e4:1c:5c:9a:96:cb:24:4f:1b:
f6:0f:65:88:aa:59:f7:72:cf:76:75:08:00:07:6b:
9d:aa:af:73:97:d4:25:32:3c:f3:44:b1:a3:86:b1:
52:f3:ec:30:a8:32:b3:8e:61:f2:bf:74:90:a6:0d:
db:b7:5f:1a:32:e6:4b:19:9b:c3:ba:41:3e:89:a0:
30:8c:38:42:62:c7:cf:3e:e9:e6:97:42:17:51:85:
9c:c9:6d:07:57:c5:5d:3c:9b:8e:f2:d2:62:5f:24:
6f:14:81:2c:3a:e4:51:8a:8c:47:67:7f:7c:b2:e3:
22:a0:e8:35:49:83:c4:d9:df:b5:55:21:3a:19:4b:
9d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:97:ED:53:B5:20:0E:5A:15:59:47:32:F4:E3:4B:CA:B1:F7:9B:C9
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/MpftU7UgDloVWUcy9ONLyrH3m8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.30.0/24
93.126.55.0/24
193.178.201.0-193.178.202.255
Signature Algorithm: sha256WithRSAEncryption
86:81:14:f5:2d:7e:dc:2f:4f:f5:4d:95:20:d8:d1:d3:1b:50:
a2:6e:48:15:d8:e2:aa:af:a9:cc:e8:ed:ab:f5:87:01:c3:d6:
67:ca:ba:53:f6:51:69:26:5e:99:97:f6:b6:4b:12:74:8a:b1:
fd:c4:49:5a:95:70:5d:54:71:ec:d7:86:ef:6b:a2:e9:2b:5b:
17:99:24:0b:5f:a0:f7:e8:5f:f5:66:a2:0d:21:c4:74:6d:30:
6c:0e:4b:32:ac:2d:88:f8:54:cb:81:e9:5a:ff:08:36:23:05:
e3:00:e0:a7:aa:33:3e:62:83:48:b2:23:4f:4d:1c:7c:08:47:
1a:76:a6:55:8e:cf:1b:7c:6f:ea:87:30:fa:19:a2:b7:44:6c:
d4:f9:86:11:3b:46:09:df:bc:4c:57:21:dd:2a:fa:88:18:8a:
a0:e9:d9:58:ff:d2:f5:88:c4:f0:54:e2:47:ee:2c:53:fc:10:
e8:9b:7e:29:d2:d9:9d:b8:5d:46:30:dc:28:2d:d0:8d:33:c7:
8d:df:fe:64:e3:65:43:d8:81:b7:4d:c2:72:64:f7:bc:79:e8:
52:2e:de:ff:dd:87:df:8f:93:43:24:4e:bc:a6:55:ea:0d:0b:
16:f0:f8:35:f1:f1:b8:fe:75:43:ec:be:f9:b8:e6:4f:97:6d:
a5:dc:99:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:00 2024 by rpki-client on console-ams.rpki-client.org