Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/mcYhI03eNFSsji94qSpsBtOvKIQ.roa
File: mcYhI03eNFSsji94qSpsBtOvKIQ.roa (raw, json)
Hash identifier: Mokia+WYcaNyA8MSljMj1uR+hl1S3ZTVk/P0Q0j9UeU=
Subject key identifier: 99:C6:21:23:4D:DE:34:54:AC:8E:2F:78:A9:2A:6C:06:D3:AF:28:84
Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Certificate serial: 0185718326FCE28358CD0A50EC4E79A7BACD
Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/mcYhI03eNFSsji94qSpsBtOvKIQ.roa
Signing time: Mon 02 Jan 2023 08:04:58 +0000
ROA not before: Mon 02 Jan 2023 08:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205833
IP address blocks: 188.0.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:26:fc:e2:83:58:cd:0a:50:ec:4e:79:a7:ba:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Validity
Not Before: Jan 2 08:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99c621234dde3454ac8e2f78a92a6c06d3af2884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:df:42:c6:1a:a5:0f:e9:55:b2:9f:10:82:
70:76:54:50:6e:91:b5:2e:6d:53:dc:98:62:b9:3f:
36:c2:0e:3e:a8:1a:d0:0e:e5:b1:b3:d4:31:f8:67:
db:24:6c:dd:16:52:92:34:9e:b6:0e:dd:a1:e2:44:
ce:1e:29:5a:4f:65:36:b4:b3:13:a4:f3:26:3b:1a:
b0:46:d3:33:9c:32:07:80:e1:4e:ff:8e:47:68:ee:
62:e7:2e:23:86:9c:17:8a:1b:63:e0:cc:fb:f4:b8:
8c:f7:d9:ae:18:b4:ca:0a:ee:f3:4a:3b:6f:fa:ac:
ac:96:8a:de:cb:d0:27:57:4a:81:54:f0:c8:75:4b:
0a:e0:70:b0:85:cb:3e:00:23:1b:ef:2b:35:53:c5:
15:e0:0f:67:a5:27:2b:1b:6a:2d:c9:27:54:ab:8a:
78:db:fa:57:67:2f:a7:22:eb:b5:38:29:48:cf:a5:
69:28:07:40:6c:5d:a6:d0:da:79:0e:32:8a:8a:cf:
71:3e:3c:2e:20:9f:b8:7e:77:c6:f4:27:fc:65:6f:
d0:27:b7:fd:71:95:a8:63:6a:a6:4f:ab:f9:82:35:
a9:c9:e8:51:fb:8e:b5:f9:53:f2:7a:40:fe:1e:23:
01:62:c7:5f:76:da:6c:87:7f:f8:11:5c:17:dc:e2:
36:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C6:21:23:4D:DE:34:54:AC:8E:2F:78:A9:2A:6C:06:D3:AF:28:84
X509v3 Authority Key Identifier:
keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/mcYhI03eNFSsji94qSpsBtOvKIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.0.245.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:c7:39:de:44:3b:dd:6d:1b:7f:1e:f3:d5:57:6c:84:bc:df:
04:3a:a3:b3:da:77:15:76:46:ac:83:e9:16:59:3f:8c:49:7a:
cc:84:73:01:c8:bf:28:6e:07:ec:6d:6f:16:ab:3b:62:f8:f9:
a5:a6:72:76:7b:1d:c3:6e:22:21:89:5a:05:c9:4b:35:13:33:
18:e4:f4:b1:13:14:51:7a:d3:72:5e:35:90:82:22:6d:2e:c4:
dc:88:f5:fe:ce:41:79:c8:dc:e0:32:d3:e2:80:74:1a:dd:bb:
6f:a4:77:e5:a7:5f:58:be:11:3c:a7:bb:8c:0a:97:93:ab:08:
eb:c2:13:e0:2d:41:9d:ff:fc:02:73:29:9c:5d:9c:46:46:d6:
b3:77:33:72:66:d2:39:2f:d3:cb:95:d2:06:e0:ba:10:c1:e9:
6a:81:d7:7e:72:7f:3c:f5:5d:2a:98:b3:50:ac:10:5b:6c:0c:
a6:ce:72:2e:ee:a1:c3:7e:61:fa:d5:6a:f3:50:85:b0:94:5b:
d6:e1:3f:be:69:1d:33:fb:24:07:cb:ed:92:6e:90:50:7c:d8:
c9:c1:43:9a:71:11:ac:25:88:ca:da:a7:ca:c8:68:5d:7b:42:
f2:db:1b:52:56:00:26:74:5f:f7:aa:1f:71:1c:0c:ff:ea:c8:
be:eb:ac:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:43 2024 by rpki-client on console-fra.rpki-client.org