Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/mYN9zoK_qdC8mKiwhzhfFkBDA8M.roa
File: mYN9zoK_qdC8mKiwhzhfFkBDA8M.roa (raw, json)
Hash identifier: DJ2357HyOr2MtN3/QJkRtJTdDXtDYv3ZH3PmLKdk4Gw=
Subject key identifier: 99:83:7D:CE:82:BF:A9:D0:BC:98:A8:B0:87:38:5F:16:40:43:03:C3
Certificate issuer: /CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Certificate serial: 01856DA66E6C501D9268321ACF10A9CAB091
Authority key identifier: 5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/mYN9zoK_qdC8mKiwhzhfFkBDA8M.roa
Signing time: Sun 01 Jan 2023 14:05:01 +0000
ROA not before: Sun 01 Jan 2023 14:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202796
IP address blocks: 185.194.250.0/24 maxlen: 24
185.194.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:32:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:a6:6e:6c:50:1d:92:68:32:1a:cf:10:a9:ca:b0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Validity
Not Before: Jan 1 14:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99837dce82bfa9d0bc98a8b087385f16404303c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:80:10:75:c1:44:37:8b:0e:35:e9:a0:be:2e:
7c:50:6f:88:55:1e:62:95:9c:d9:b1:b3:8a:b1:38:
b9:f1:7b:c7:94:af:ec:38:6a:ef:5c:17:dc:97:66:
29:e7:11:89:5c:72:74:65:ca:73:13:51:38:be:3e:
27:3e:15:23:94:33:f4:28:0c:1e:0a:e4:e5:9c:02:
a5:3a:f1:72:38:94:91:45:48:32:45:41:e8:eb:bc:
06:41:9a:cb:0d:f4:06:c7:76:3b:e1:73:39:33:0e:
2f:21:00:05:2c:52:7e:7d:69:9f:b8:85:ab:c7:dd:
af:86:41:e7:97:89:c4:09:56:96:24:53:b2:dd:35:
0d:98:11:ff:78:8d:84:ad:9d:a5:d8:19:70:6b:48:
6e:d0:27:3e:13:03:ff:24:23:96:ad:cf:47:ec:2b:
3b:e6:96:1a:ca:91:1c:ed:d5:d1:44:05:fc:cf:a8:
64:e5:de:5f:f6:33:3f:21:fe:45:43:1b:60:46:90:
70:46:63:a2:6e:1a:54:c5:20:92:1d:6d:10:c2:f4:
b6:3b:df:76:40:0b:26:e3:43:61:1c:3f:b6:b2:62:
86:fa:2a:09:58:54:c1:60:fc:c9:af:34:cc:4a:99:
c6:20:6c:6c:f5:8b:b3:6d:8b:ad:f0:7b:48:4e:66:
f5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:83:7D:CE:82:BF:A9:D0:BC:98:A8:B0:87:38:5F:16:40:43:03:C3
X509v3 Authority Key Identifier:
keyid:5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/mYN9zoK_qdC8mKiwhzhfFkBDA8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.250.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:b6:31:b7:7d:5f:3d:e6:45:8b:f7:51:db:53:41:d3:de:95:
e9:31:42:f7:6d:4d:bd:e2:79:c5:42:bf:75:88:45:72:17:c2:
3e:7f:27:ed:14:1d:80:f7:8d:0d:be:01:15:d2:a3:fd:15:cf:
65:d8:e4:b9:46:cf:aa:f7:04:87:55:06:7f:d1:f3:aa:ef:e7:
bf:2d:10:df:ab:97:99:44:7e:79:75:01:0f:1c:df:b2:10:f7:
5d:46:b3:53:15:04:78:18:ab:26:f6:ed:3b:4c:67:17:8f:85:
ac:6a:82:ea:c5:65:f2:e8:81:e8:f8:eb:09:ab:49:3c:69:89:
41:a9:c6:4c:3d:24:18:3c:de:b7:8a:c7:29:f8:f5:6d:86:95:
a1:39:c1:73:df:f2:83:2e:3d:72:ed:7b:be:d7:7e:49:53:27:
4a:6c:0c:29:13:5c:b9:dc:80:9e:c2:1c:cb:2f:59:b2:52:46:
e7:1c:f8:db:f7:6c:b5:48:89:9c:73:f6:27:72:ab:58:1f:b4:
97:64:49:cf:58:59:2a:0d:ec:b8:62:9a:c6:ea:b3:1e:1a:87:
df:8a:ee:21:74:97:7d:f8:3c:ec:b5:78:fa:e2:36:b1:f0:a4:
e2:ec:56:cd:a0:f2:42:e3:15:07:aa:c2:17:64:65:0d:8c:72:
15:a8:ba:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:04 2024 by rpki-client on console-fra.rpki-client.org