Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/mFWsx4e_txr7M11KPfuV0MStrWo.roa
File: mFWsx4e_txr7M11KPfuV0MStrWo.roa (raw, json)
Hash identifier: j36BHlaX7H8XeZi7TuZ0TpG9dHNjIGR+sPctM9Vt8CI=
Subject key identifier: 98:55:AC:C7:87:BF:B7:1A:FB:33:5D:4A:3D:FB:95:D0:C4:AD:AD:6A
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019121844FFA107CAE849CE16F56018E3908
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/mFWsx4e_txr7M11KPfuV0MStrWo.roa
Signing time: Mon 05 Aug 2024 07:50:04 +0000
ROA not before: Mon 05 Aug 2024 07:50:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215826
IP address blocks: 194.36.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Aug 2024 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:21:84:4f:fa:10:7c:ae:84:9c:e1:6f:56:01:8e:39:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Aug 5 07:50:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9855acc787bfb71afb335d4a3dfb95d0c4adad6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:52:1d:d9:65:6c:39:e5:10:f1:a3:83:bd:
df:9c:cb:6c:3a:77:15:ac:c7:84:24:01:b9:3d:d8:
5c:71:94:4e:27:04:bb:16:0a:1b:6b:32:80:7e:12:
0a:8a:91:8a:83:b6:ed:ca:25:e6:da:49:15:ee:a3:
ac:17:e9:ca:2a:03:ff:3d:e3:87:9a:30:9a:36:7b:
cd:6a:72:18:1c:b4:72:cc:db:ba:27:e3:cc:db:49:
df:30:6d:a9:1f:57:21:af:e4:61:53:0f:d4:cd:10:
75:58:d1:67:3a:91:4d:f9:4e:eb:e9:4a:42:8f:5a:
a6:84:7b:b5:c3:30:06:99:cf:ee:11:9e:11:bb:18:
2d:4d:7c:9b:2c:9c:fe:6e:a9:2e:77:ca:c2:7a:b5:
5d:2a:86:b2:cc:a4:2b:72:11:71:8b:57:50:ec:5b:
ee:bd:b1:77:7e:95:9c:03:42:67:06:02:6e:eb:6c:
cf:d4:99:4d:71:ac:8d:3e:13:4d:bf:c1:78:1b:1c:
dc:cb:a5:f1:1a:53:75:52:9e:bf:a1:80:ee:cf:c2:
68:80:e1:7a:38:80:20:a3:f6:3d:ee:b5:51:e6:d1:
6e:68:cb:59:7a:b4:4b:75:b7:2a:d9:c6:4a:9c:ca:
b3:b3:7b:c3:82:37:1e:7f:f5:0a:95:6c:df:76:5d:
d4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:55:AC:C7:87:BF:B7:1A:FB:33:5D:4A:3D:FB:95:D0:C4:AD:AD:6A
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/mFWsx4e_txr7M11KPfuV0MStrWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.177.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:13:15:c4:69:b5:13:0a:47:30:b8:85:b0:e3:2f:26:36:ad:
45:b1:19:df:54:bc:5f:6f:d9:82:1d:96:26:df:b8:11:e0:ba:
4b:8a:62:2b:c4:4e:12:27:ea:9a:9e:85:11:11:e3:79:13:dd:
aa:c0:92:6f:5f:a2:bf:45:70:e3:cd:a7:f6:b6:ab:ee:96:d8:
69:1a:e9:44:ff:26:79:9a:45:37:50:f6:28:1c:16:76:96:a0:
15:ba:4f:bc:36:5f:b7:a7:b4:e3:f0:23:b6:9c:5b:ef:2f:8a:
05:7e:a3:a1:f0:86:48:76:9d:8a:c4:19:72:cb:40:a3:34:ff:
93:6c:3c:92:32:b8:ee:5f:bc:81:95:e3:62:d7:da:a2:07:ac:
c4:a2:66:d8:57:9b:29:d9:00:f0:f5:6a:1c:b3:75:b8:ea:0e:
16:76:1c:ba:a2:18:2c:d6:ff:c6:e7:fa:74:f4:b5:6a:fd:54:
4c:88:88:75:df:03:e8:8b:60:d0:21:98:2b:32:3d:85:73:c0:
b6:37:cc:c6:3c:a6:2a:f5:85:e4:75:f6:5a:32:1c:26:cc:b1:
95:8c:84:96:95:1b:28:29:5e:b3:0c:9f:b3:c0:0b:96:fc:0e:
eb:a3:c4:87:bb:aa:a9:ac:0e:27:28:fa:81:15:3f:fd:89:43:
6a:dc:be:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 18:29:35 2024 by rpki-client on console-ams.rpki-client.org