Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/SUIQ9caGUkavZ3RJ0ZB6Er_mb-c.roa
File: SUIQ9caGUkavZ3RJ0ZB6Er_mb-c.roa (raw, json)
Hash identifier: zsvpFpeU4AVOHwTFSvPDUorR+uDDH83hE+cfWypnFnM=
Subject key identifier: 49:42:10:F5:C6:86:52:46:AF:67:74:49:D1:90:7A:12:BF:E6:6F:E7
Certificate issuer: /CN=5243ded745b05f4038e983fb9d78edf56f251346
Certificate serial: 0185708CD2627CD9BC2B7353E2CE54097BF5
Authority key identifier: 52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/SUIQ9caGUkavZ3RJ0ZB6Er_mb-c.roa
Signing time: Mon 02 Jan 2023 03:35:55 +0000
ROA not before: Mon 02 Jan 2023 03:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200602
IP address blocks: 193.143.18.0/24 maxlen: 24
193.143.75.0/24 maxlen: 24
193.143.72.0/24 maxlen: 24
193.143.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:d2:62:7c:d9:bc:2b:73:53:e2:ce:54:09:7b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5243ded745b05f4038e983fb9d78edf56f251346
Validity
Not Before: Jan 2 03:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=494210f5c6865246af677449d1907a12bfe66fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:e3:79:6f:d6:ef:dd:3c:93:b6:e3:9f:34:
7e:e5:a5:91:57:b0:0a:17:b2:d6:b5:e9:19:f2:4a:
c4:16:e4:41:15:b1:4e:ea:b0:98:cf:50:1c:f9:99:
9e:89:08:18:06:ae:98:cd:14:0d:16:bd:7a:45:a1:
8a:ba:be:e1:6b:32:0c:3d:0e:57:3a:e7:28:6b:f0:
9d:4e:39:03:66:bd:d7:e6:40:8b:c6:b2:e7:46:32:
9b:0a:b7:1d:1b:ff:48:18:04:e5:f8:20:2b:b7:80:
f0:0c:d2:f2:05:f4:fa:f5:54:2a:5f:77:c5:eb:19:
a1:bd:ba:0a:cf:a8:e1:27:e1:24:b8:a6:87:fa:2c:
a8:75:d2:d1:8a:9e:51:b8:7a:a3:b1:71:51:0a:8c:
d1:6a:17:56:85:13:7b:6f:bf:0a:b2:f0:fd:51:f6:
af:36:c2:ff:a3:fa:a3:8d:f0:63:a9:cc:78:37:a6:
75:bf:74:62:9b:04:dd:5d:9a:aa:df:9a:20:bc:ed:
87:1d:b5:65:ea:f9:95:7e:e9:6c:b6:20:93:19:c4:
48:5f:97:21:8c:20:1e:df:ae:b3:0e:a2:2f:7f:16:
58:ef:f7:11:aa:44:b3:62:b9:46:57:9c:d7:5e:d5:
4c:20:0b:50:8e:87:03:fe:d2:6c:78:f8:ca:8a:cc:
a8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:42:10:F5:C6:86:52:46:AF:67:74:49:D1:90:7A:12:BF:E6:6F:E7
X509v3 Authority Key Identifier:
keyid:52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/SUIQ9caGUkavZ3RJ0ZB6Er_mb-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.18.0/24
193.143.72.0/24
193.143.75.0-193.143.76.255
Signature Algorithm: sha256WithRSAEncryption
6c:21:b6:b5:74:56:67:90:a6:37:d3:4f:a9:95:5c:63:3b:70:
81:8b:91:d9:0c:4b:84:26:25:80:4f:9f:12:dc:60:6b:95:6b:
63:f9:59:47:b7:1c:c6:77:b6:42:15:46:ba:7f:7c:66:db:41:
3c:ab:ae:78:47:f8:dc:2f:30:e0:6c:e5:6e:95:06:1d:7a:0e:
53:01:5b:5f:4f:2b:76:eb:ad:de:98:69:c8:f8:96:f1:8b:b2:
51:d5:96:f5:44:48:9f:03:5d:9c:4c:50:f3:a8:e2:7f:77:4d:
d3:55:2a:c3:78:9c:7b:c0:1c:ea:0c:17:ab:a6:f9:1f:fa:01:
ff:5c:d2:74:38:78:46:cf:24:c7:6e:54:fc:7f:f3:ab:9f:2c:
f8:15:c1:80:5f:bf:3d:a5:40:39:51:d6:8c:83:7a:a3:3a:69:
99:e4:90:57:e1:a7:f2:9a:ea:8f:2a:53:23:27:fd:85:b9:e6:
13:fd:d4:54:c5:25:4a:5c:79:ff:44:91:a6:3c:d9:86:6e:54:
b1:77:42:37:33:6e:0f:10:8f:bc:d9:7d:43:a9:2e:12:36:4c:
19:7e:08:ba:c7:48:6b:11:af:db:1b:81:0b:1c:fc:6d:3c:8f:
14:61:e9:b7:fb:f1:e1:13:02:88:21:e8:57:30:ee:15:4e:a1:
c8:83:b7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:44 2024 by rpki-client on console-ams.rpki-client.org