Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/Mfp4XI2d1XzAYqQ4wJXTuQ3Lak0.roa
File: Mfp4XI2d1XzAYqQ4wJXTuQ3Lak0.roa (raw, json)
Hash identifier: 2wrLIFOFeOxlrsELX5SoXRo0I17y244oDpQ3YcS2kO0=
Subject key identifier: 31:FA:78:5C:8D:9D:D5:7C:C0:62:A4:38:C0:95:D3:B9:0D:CB:6A:4D
Certificate issuer: /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial: 01901CA3C9754FB3B97FD8C26CE7661737BB
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/Mfp4XI2d1XzAYqQ4wJXTuQ3Lak0.roa
Signing time: Sat 15 Jun 2024 16:03:34 +0000
ROA not before: Sat 15 Jun 2024 16:03:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47536
IP address blocks: 193.105.29.0/24 maxlen: 24
2001:678:a00::/48 maxlen: 48
2a12:79c0:100::/48 maxlen: 48
2a12:79c2::/32 maxlen: 32
2a12:79c3::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 13 Jul 2024 23:52:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:a3:c9:75:4f:b3:b9:7f:d8:c2:6c:e7:66:17:37:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
Validity
Not Before: Jun 15 16:03:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31fa785c8d9dd57cc062a438c095d3b90dcb6a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:87:74:57:e8:7c:a2:be:a0:e1:da:2b:6d:73:
e8:4b:ac:cc:6b:90:eb:7b:bd:0d:8b:48:6c:20:66:
20:ce:e7:7f:d4:79:ec:91:58:ef:81:05:72:40:c2:
af:4c:f1:ca:a8:bc:63:93:ca:ed:57:b7:ac:34:b2:
3e:a5:4c:70:2b:dc:d8:c8:bc:d8:4f:d0:43:80:63:
00:d1:6f:03:97:99:71:78:43:1f:5f:49:b3:cb:dd:
a5:3f:0a:54:9f:73:40:4e:71:7d:97:11:21:59:16:
e3:54:7f:36:d0:a2:d1:d0:7b:ce:4b:1d:4d:a9:86:
e7:5a:e9:03:e3:50:12:04:0f:a9:e8:72:c6:49:dc:
c6:88:64:a3:ab:d1:22:c6:13:bb:2d:7a:2f:8e:4f:
da:9e:85:00:00:92:ce:2f:d5:79:ac:e2:1f:a9:e5:
05:1f:9f:95:7c:08:59:b3:71:bf:fc:90:ee:20:4e:
ea:5b:9c:df:eb:66:8d:0e:88:c1:4f:98:82:1d:fe:
56:b1:57:eb:d5:09:b5:46:f6:c0:2b:4d:bb:03:d5:
f2:58:63:b6:65:76:61:bf:a4:18:c6:72:48:6b:c3:
8c:02:b9:4f:c7:87:b7:7a:20:c7:28:b6:e3:fd:95:
19:9e:05:a6:a6:f4:6e:93:6d:11:81:23:ba:3e:5f:
b1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FA:78:5C:8D:9D:D5:7C:C0:62:A4:38:C0:95:D3:B9:0D:CB:6A:4D
X509v3 Authority Key Identifier:
keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/Mfp4XI2d1XzAYqQ4wJXTuQ3Lak0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.29.0/24
IPv6:
2001:678:a00::/48
2a12:79c0:100::/48
2a12:79c2::/31
Signature Algorithm: sha256WithRSAEncryption
7a:bb:8a:9c:73:46:52:af:e3:83:1f:eb:e3:62:8c:ce:8b:32:
8d:e0:f2:cc:e9:31:cc:a2:ed:fb:57:14:64:71:3b:0b:2c:c0:
15:8f:f7:95:7a:1e:38:da:62:9e:9d:d4:5d:98:14:82:bf:ab:
55:db:c1:e8:19:60:09:e7:8f:82:40:c2:a3:4b:59:ff:33:37:
be:26:76:ec:0e:17:80:df:79:2e:30:18:e3:c5:20:a7:ef:6e:
00:da:c3:f9:61:39:a2:2f:a0:1d:0b:13:f4:b9:cb:f6:40:a4:
1d:6e:a2:51:2b:61:89:60:65:db:56:7c:21:35:49:cd:71:4f:
34:48:7e:eb:e8:6e:02:7a:61:d5:f3:82:d0:36:3a:5d:44:93:
c4:3e:29:88:20:4f:f4:61:19:dc:e7:6a:1e:28:0f:22:29:66:
75:64:e1:ac:26:fa:5a:dc:20:a8:e4:d3:3d:32:9f:b4:f3:96:
4a:70:78:6e:75:e1:cd:f5:32:70:7e:37:12:c8:30:a4:77:13:
4d:0d:bf:7c:3a:cc:b9:2e:5d:af:54:ba:23:35:22:92:d9:99:
85:2b:98:2f:72:c8:70:38:c2:44:e5:6b:77:5e:64:20:af:92:
99:90:60:29:d9:32:40:42:ce:b4:f9:5f:e6:eb:40:fd:2c:62:
c0:6c:c3:b3
-----BEGIN CERTIFICATE-----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Generated at Sun Jul 14 00:35:11 2024 by rpki-client on console-fra.rpki-client.org