Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/MUp2RrR5M7n-RRZgzd7cU65oYdA.roa
File: MUp2RrR5M7n-RRZgzd7cU65oYdA.roa (raw, json)
Hash identifier: UYUGpr4HX5jRTilhMGLnGzw4ZP8C36p3FCsIVTflbjA=
Subject key identifier: 31:4A:76:46:B4:79:33:B9:FE:45:16:60:CD:DE:DC:53:AE:68:61:D0
Certificate issuer: /CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4
Certificate serial: 018C122DF489A425BC2A40DE8C49D6F73B0B
Authority key identifier: 20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/MUp2RrR5M7n-RRZgzd7cU65oYdA.roa
Signing time: Mon 27 Nov 2023 19:07:30 +0000
ROA not before: Mon 27 Nov 2023 19:07:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200780
IP address blocks: 185.204.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:12:2d:f4:89:a4:25:bc:2a:40:de:8c:49:d6:f7:3b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4
Validity
Not Before: Nov 27 19:07:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=314a7646b47933b9fe451660cddedc53ae6861d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e3:52:04:b1:1c:41:05:d5:8d:f1:31:11:50:
af:03:46:23:f6:53:40:6c:0b:3b:87:a2:08:4b:31:
d2:a4:0d:76:6c:39:c8:e3:2f:f6:fc:63:84:c7:a7:
e7:0f:e2:c1:b7:a1:4f:8a:4b:e1:71:62:8a:26:55:
66:5f:89:26:e8:62:87:48:59:1a:5b:f3:7b:9a:cb:
71:ff:7a:21:fe:4b:42:66:3d:53:6f:16:52:f5:8a:
56:99:ea:b4:f6:77:aa:d5:5b:04:e6:30:96:f0:53:
55:da:c4:80:9a:02:d2:8c:f6:bb:45:6c:7c:de:d9:
91:a6:07:62:85:3a:20:10:06:ef:72:31:1d:0f:36:
f3:4e:fb:26:8e:d3:75:7c:bd:99:25:85:81:54:3f:
f7:0e:fb:74:ed:18:25:e6:3e:c6:eb:f5:d5:d9:90:
7b:1c:85:b5:d1:c0:b2:88:5c:b3:5c:c4:97:be:c5:
14:18:2b:c0:15:07:59:2c:8d:bc:c0:a2:3d:2c:b9:
43:d7:17:ba:74:cc:44:e9:af:c3:5b:e1:0e:50:65:
04:52:ff:f4:d5:eb:c4:ae:48:fd:5d:1a:b6:01:c3:
29:b9:44:79:1c:d6:4b:5d:70:e5:bf:05:da:92:b2:
d1:58:66:c4:f5:63:6c:c9:f0:a3:fd:00:cb:ec:d0:
b5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4A:76:46:B4:79:33:B9:FE:45:16:60:CD:DE:DC:53:AE:68:61:D0
X509v3 Authority Key Identifier:
keyid:20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/MUp2RrR5M7n-RRZgzd7cU65oYdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.190.0/24
Signature Algorithm: sha256WithRSAEncryption
83:db:47:bf:37:f0:2b:08:cc:1c:04:77:e4:fb:7a:0b:fc:89:
b0:20:6a:ed:40:86:43:fe:bf:0c:af:2d:77:2b:a0:35:dc:ed:
dc:b8:81:fb:8e:a8:c3:a9:57:3b:29:e3:d2:c8:d0:41:ed:39:
3e:7f:2e:46:f0:89:64:35:ad:5d:a3:0b:8b:9e:e9:d0:44:dd:
b6:78:6d:2c:c9:02:03:b4:a9:94:0d:3f:84:10:0b:56:5f:43:
24:64:34:15:7c:7b:15:76:89:67:92:db:e7:fb:67:c1:9b:87:
4c:3c:f0:7d:97:db:70:51:39:b5:17:2e:de:94:f4:12:d5:50:
a8:a8:2d:29:e9:ab:bc:c1:79:c8:8c:aa:ec:26:b1:77:0f:f6:
49:56:25:8d:22:f7:d1:1b:e6:fd:6f:af:57:72:d5:fb:12:b0:
a9:3a:5c:ba:6d:85:5b:94:9e:99:91:48:5c:0e:b2:56:0c:c7:
4a:03:a7:03:b6:5f:dd:63:dd:c6:86:ff:96:be:2b:f7:9b:85:
aa:d0:d9:58:dc:73:0c:d6:33:ac:ed:a7:5f:e8:c7:7a:20:0a:
33:f2:41:3a:82:b2:a8:3b:1e:fc:fa:2a:2e:7f:dd:a4:8b:fc:
d7:7d:e5:06:ed:26:0c:48:8d:f3:4c:76:4d:38:8a:a1:a2:29:
f9:00:49:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:25 2024 by rpki-client on console-fra.rpki-client.org