Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/MfYgxOGuNgIP18BJn4kuMfRey20.roa
File: MfYgxOGuNgIP18BJn4kuMfRey20.roa (raw, json)
Hash identifier: qCrE0kj6HitapauAWbBY1DJpxeEm6JoTR7wD2NuKmdw=
Subject key identifier: 31:F6:20:C4:E1:AE:36:02:0F:D7:C0:49:9F:89:2E:31:F4:5E:CB:6D
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 01856C781069C93E453A3C095AE72B449EBF
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/MfYgxOGuNgIP18BJn4kuMfRey20.roa
Signing time: Sun 01 Jan 2023 08:34:45 +0000
ROA not before: Sun 01 Jan 2023 08:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202425
IP address blocks: 92.63.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:10:69:c9:3e:45:3a:3c:09:5a:e7:2b:44:9e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jan 1 08:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31f620c4e1ae36020fd7c0499f892e31f45ecb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bc:c8:ca:9e:4b:f3:10:ac:64:c8:ac:9a:c9:
ea:9f:34:6a:93:e9:8a:9f:a2:77:68:81:3a:6d:62:
50:22:aa:63:43:23:7f:53:c8:37:e2:4c:24:69:83:
02:8e:58:3b:65:4c:4e:05:4e:01:88:64:e1:16:e2:
97:94:93:9a:ff:59:94:e7:02:9c:ff:bc:13:9e:fb:
1a:e9:d6:fa:a7:0a:de:23:13:6d:6c:bb:c7:ba:12:
e3:fb:e3:62:a6:91:d8:37:d7:81:f6:c2:c6:1a:95:
98:7c:75:f0:6b:ef:76:6b:4b:33:c4:dc:89:b2:e1:
2f:16:8d:7c:49:5b:08:60:d1:85:07:8f:ea:9a:7d:
cb:19:98:20:e9:6a:a1:8a:ef:90:84:74:c7:94:59:
3a:4f:46:38:aa:a2:8a:97:fe:82:ea:8f:86:00:a5:
09:f8:8b:e6:5a:d3:9c:74:9c:3c:38:96:3b:ba:1f:
32:9c:33:e0:98:34:ae:d9:ab:d2:e1:cc:58:01:7e:
d8:72:89:28:ec:86:bb:64:1e:f3:5e:69:ed:c3:ef:
1c:3f:e3:34:45:b3:97:df:45:cc:09:82:3b:2c:a0:
7b:d8:e0:86:57:c3:c3:6b:aa:16:e0:a6:31:7c:b2:
61:f1:e4:8d:5e:3a:b4:2b:e1:a1:b2:6e:35:01:2b:
0d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F6:20:C4:E1:AE:36:02:0F:D7:C0:49:9F:89:2E:31:F4:5E:CB:6D
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/MfYgxOGuNgIP18BJn4kuMfRey20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.196.0/24
Signature Algorithm: sha256WithRSAEncryption
67:bf:5a:d9:1d:b9:1d:39:2e:1d:c0:e3:7f:3c:58:dd:cf:27:
f7:19:c1:84:f7:85:08:5b:64:9c:43:4e:72:86:6b:85:b7:fb:
5e:5f:53:e0:7e:6e:d3:04:36:d0:48:5c:28:ae:24:d9:da:d0:
d7:62:46:d8:dc:cc:c2:5f:6e:a6:71:3f:69:aa:f5:5a:26:90:
91:ff:ee:36:cc:e6:ae:67:40:0e:ff:e0:78:f0:c0:b5:75:a5:
7f:fc:c6:dc:13:7d:b9:df:5f:29:e1:24:1c:7f:7d:f7:a3:b3:
a2:d9:f8:c5:5b:86:67:27:c0:d1:6e:8c:52:b2:3e:6a:c9:4e:
97:3e:2a:60:9a:f9:ad:d3:39:3b:30:b3:66:a7:a1:9b:e3:28:
c7:da:25:f1:36:f3:d9:48:6b:33:e5:03:8d:47:ad:55:7f:7c:
e9:3b:e0:52:2b:b0:d1:56:46:0d:1c:0a:06:38:36:7d:36:c5:
11:b3:81:d8:36:ae:5f:01:d0:33:b8:fa:97:5c:62:b5:5e:30:
98:8b:3f:aa:5d:fd:c1:3f:f9:76:2c:d6:ad:b4:05:20:91:6d:
a0:ed:3c:91:75:73:58:bc:3a:33:49:e4:53:22:48:bd:26:5d:
2e:bb:7f:7c:5b:3e:46:cd:33:43:65:f3:33:cd:55:63:f1:23:
7a:29:c1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:58 2024 by rpki-client on console-fra.rpki-client.org