Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/maPTI2cnrdBwmpcw7MznwA_jC_U.roa
File: maPTI2cnrdBwmpcw7MznwA_jC_U.roa (raw, json)
Hash identifier: IbK6OOLUOUzPpf53shD5p37DB6SfJEIxQBn3ir50Rlo=
Subject key identifier: 99:A3:D3:23:67:27:AD:D0:70:9A:97:30:EC:CC:E7:C0:0F:E3:0B:F5
Certificate issuer: /CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Certificate serial: 018570E761E02781822326EAF25D58891D5E
Authority key identifier: A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/maPTI2cnrdBwmpcw7MznwA_jC_U.roa
Signing time: Mon 02 Jan 2023 05:14:49 +0000
ROA not before: Mon 02 Jan 2023 05:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8708
IP address blocks: 194.102.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:61:e0:27:81:82:23:26:ea:f2:5d:58:89:1d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Validity
Not Before: Jan 2 05:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99a3d3236727add0709a9730eccce7c00fe30bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:d2:b2:f0:34:fb:3b:9b:be:cc:fb:48:d2:
0b:ff:2f:d8:c6:25:5c:4b:67:83:7e:d4:16:9a:a2:
32:17:4a:9d:f0:e4:02:88:8d:6d:f8:73:9c:73:47:
0a:4b:a9:57:ce:09:24:93:65:d0:4d:c1:15:e7:fb:
5d:ec:b3:ad:a2:d9:f5:ab:b8:b4:2f:ea:d6:62:72:
11:7a:a2:69:79:12:8e:2f:5f:09:3e:f0:6f:20:95:
1a:27:52:d3:19:a5:2d:8f:b6:19:dc:97:f4:da:28:
35:44:cd:7b:e0:aa:43:45:6b:63:18:8a:89:dc:66:
f5:6a:0a:a1:60:85:c1:99:f5:0b:36:06:85:ea:14:
14:a1:7e:b3:d4:52:53:d0:5f:77:ae:b1:42:05:31:
b5:72:98:ce:6b:40:42:90:25:9b:49:6a:d3:08:2f:
46:ef:71:ea:e4:3d:31:26:1f:1d:13:77:79:ff:c0:
29:ee:37:97:ef:fc:d9:7f:c2:8a:ad:67:cb:8e:13:
70:a6:8c:88:16:29:dd:ea:8a:67:e2:be:3e:da:a1:
be:57:1e:2e:1a:cd:a7:c0:b0:dd:3d:e8:99:a2:c7:
46:17:5e:3d:a4:75:98:08:c5:ea:e4:1a:91:f4:bb:
52:6a:9b:d8:d9:25:b8:d2:f0:75:0c:f7:5e:b4:a6:
12:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A3:D3:23:67:27:AD:D0:70:9A:97:30:EC:CC:E7:C0:0F:E3:0B:F5
X509v3 Authority Key Identifier:
keyid:A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/maPTI2cnrdBwmpcw7MznwA_jC_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.102.0/24
Signature Algorithm: sha256WithRSAEncryption
85:33:2b:44:31:74:1b:ee:2a:7b:c7:00:6d:8e:2c:17:39:d1:
8c:05:c7:df:fe:40:3c:14:9d:f0:e8:37:a6:55:3e:0f:c0:06:
f4:ae:ce:35:0d:f9:53:8d:1e:a2:f9:36:cd:2e:29:29:29:1a:
a0:66:8b:19:77:87:a2:0d:74:6f:27:a7:47:11:39:c7:f8:d4:
b1:e9:78:9b:ba:a6:b0:70:51:13:45:84:8c:0d:95:03:65:e5:
1d:cf:da:87:9a:36:07:88:a5:a3:73:93:20:89:72:ba:8e:fb:
8e:9f:14:e6:2f:f8:95:52:2b:96:36:de:a6:ad:96:22:73:8f:
d5:89:b3:47:03:25:4a:6d:07:d2:2a:f4:83:e9:ef:08:b1:26:
82:39:8e:75:34:43:6e:04:a7:e0:45:28:25:8a:ec:b5:fe:a7:
ff:07:0f:71:10:20:d2:06:90:07:8c:07:1d:7d:fa:f9:a5:5e:
58:aa:5c:72:64:0e:c8:d5:f3:e9:61:6e:47:5a:cc:14:a1:d9:
e7:a3:54:3b:77:69:3c:c2:3a:94:a9:ab:23:55:2f:05:11:9c:
84:63:8d:9e:ef:69:ec:ee:0f:d1:0b:c6:e9:3c:42:81:1e:f9:
83:cc:08:3c:98:99:a3:4e:2c:41:5a:0d:5d:e7:ee:a1:d6:62:
81:a5:d1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:20 2024 by rpki-client on console-ams.rpki-client.org