Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/Md3CGI79ZOkm17DwIqCQnUudDr0.roa
File: Md3CGI79ZOkm17DwIqCQnUudDr0.roa (raw, json)
Hash identifier: xpfU3mYiX67vS6IjhhToaswF7qKvRr8/QyLLTWHdJ3M=
Subject key identifier: 31:DD:C2:18:8E:FD:64:E9:26:D7:B0:F0:22:A0:90:9D:4B:9D:0E:BD
Certificate issuer: /CN=984b690d6dd3b0faece03bf208f0030e338c2216
Certificate serial: 01856C6F12B85DC3D356BE53732698EB0BAE
Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/Md3CGI79ZOkm17DwIqCQnUudDr0.roa
Signing time: Sun 01 Jan 2023 08:24:56 +0000
ROA not before: Sun 01 Jan 2023 08:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 193.58.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:12:b8:5d:c3:d3:56:be:53:73:26:98:eb:0b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216
Validity
Not Before: Jan 1 08:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31ddc2188efd64e926d7b0f022a0909d4b9d0ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c6:b5:f7:6d:b7:3e:18:20:56:07:ca:54:99:
ac:aa:a8:fb:67:05:43:06:6e:4a:7d:f6:f8:d3:7b:
4d:27:66:30:b8:e3:61:7f:69:ea:2f:39:28:2f:40:
3a:f0:7e:b2:73:af:2e:f4:6c:e4:e1:11:81:ec:95:
b1:9a:19:c5:96:c2:3c:13:b8:8c:ef:3a:76:82:55:
bc:85:56:86:dd:28:91:3c:08:bf:db:de:93:de:c1:
ce:93:e4:b2:d3:66:aa:47:a1:89:66:f3:0d:80:67:
d3:91:c0:ef:7e:3c:50:ce:1d:4f:cd:31:35:24:b8:
fc:ab:ad:3f:6d:41:a1:ef:84:86:53:ec:14:eb:4a:
93:30:6c:39:4c:98:f5:af:21:0a:8c:83:a1:8b:91:
b3:38:44:b1:22:9a:58:54:0c:30:d1:ff:b7:74:58:
00:7e:2b:37:c6:34:1e:42:9f:9b:c2:41:e0:7b:54:
36:b1:a5:52:e4:85:37:d5:a4:fe:58:d1:fd:bd:04:
99:45:d3:d3:d0:b9:ce:82:b4:3b:98:8b:d5:e8:5e:
a9:0c:e6:0a:9a:d9:9d:3f:44:d8:b9:b2:e4:ad:43:
d2:e5:c5:8b:17:d5:b1:90:12:6d:fc:e5:a8:99:6f:
7b:3d:25:46:62:71:7c:e1:31:2b:88:6d:81:87:e5:
28:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DD:C2:18:8E:FD:64:E9:26:D7:B0:F0:22:A0:90:9D:4B:9D:0E:BD
X509v3 Authority Key Identifier:
keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/Md3CGI79ZOkm17DwIqCQnUudDr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.242.0/24
Signature Algorithm: sha256WithRSAEncryption
66:39:54:5b:b7:73:0f:03:42:c1:11:df:a5:46:95:c5:b0:84:
ba:7d:70:9a:cc:b0:f7:e5:79:24:74:64:4a:32:5d:ce:98:7a:
a2:f5:15:7c:cd:7e:56:23:60:cb:65:4d:cc:63:85:f4:a7:fa:
ab:7f:b3:df:23:f9:05:92:a2:0c:65:d9:f6:08:18:68:eb:c9:
32:06:57:4e:3b:a3:58:c7:dc:aa:24:23:97:e7:3b:83:2c:75:
39:b4:a3:a6:f1:29:07:a9:84:2c:05:2f:ca:b2:f2:ee:4c:d3:
06:f0:97:6b:11:86:4f:97:2d:46:42:2a:28:c4:bb:01:78:5c:
c4:ae:31:82:5f:a0:da:d5:42:af:bd:02:cd:ef:40:88:ff:fc:
b0:d1:69:bb:9f:99:13:ee:2f:d0:26:75:e8:14:28:0c:44:f4:
4d:75:b0:52:13:11:d6:0e:21:57:fb:d3:75:f9:f6:5a:8d:c3:
be:a7:27:26:0b:a5:b1:0d:74:f8:cd:ed:2e:ff:17:a5:0d:5a:
7d:55:04:78:51:d2:79:bd:d7:2b:fb:08:2f:7f:79:fa:d0:e2:
2b:57:82:aa:8e:0d:87:0d:ea:01:4b:d8:f7:73:77:9a:5f:d0:
10:94:5a:52:b5:ae:b4:2a:72:84:a3:da:53:8c:56:51:12:a1:
54:86:b5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:03 2024 by rpki-client on console-ams.rpki-client.org