Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/Mfb3zHyKt4d7tgXQep3AjKOCJZc.roa
File: Mfb3zHyKt4d7tgXQep3AjKOCJZc.roa (raw, json)
Hash identifier: VK5ScVfxX/6nvyWG4PvWu+nP5bn85/g4WYwY8vDZRUo=
Subject key identifier: 31:F6:F7:CC:7C:8A:B7:87:7B:B6:05:D0:7A:9D:C0:8C:A3:82:25:97
Certificate issuer: /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial: 0185707978576138BBE48DADFD5BED1281CB
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/Mfb3zHyKt4d7tgXQep3AjKOCJZc.roa
Signing time: Mon 02 Jan 2023 03:14:46 +0000
ROA not before: Mon 02 Jan 2023 03:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197107
IP address blocks: 88.151.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:78:57:61:38:bb:e4:8d:ad:fd:5b:ed:12:81:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
Validity
Not Before: Jan 2 03:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31f6f7cc7c8ab7877bb605d07a9dc08ca3822597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:ad:42:23:9d:87:21:b4:7e:e5:c3:9b:fe:
4c:53:eb:d8:62:12:94:11:eb:cd:77:83:88:d9:d3:
af:92:1e:a2:0a:35:65:8d:62:31:2f:b5:25:dd:b2:
9e:38:87:0a:77:8d:08:19:9d:81:cf:f5:1b:a0:fc:
a4:b6:0c:a6:c4:15:96:08:41:c7:aa:42:79:ac:46:
c2:a7:a0:a4:cd:24:be:71:37:ed:be:9c:ab:bc:b5:
3a:4d:1c:ea:e2:d6:88:8d:59:92:58:82:10:0e:22:
b2:8e:dd:4f:f9:aa:59:06:00:d9:9e:26:22:83:c0:
0f:a4:12:95:81:e8:cb:59:60:bf:a6:a3:09:a6:5e:
31:26:a4:28:76:ac:39:92:9e:95:11:3f:e2:c9:2a:
60:93:2f:39:49:7e:b9:87:c5:e8:56:3f:6f:47:38:
03:80:40:ea:3c:91:9a:15:0c:6e:42:b3:e6:ef:65:
7b:38:6f:0e:ee:af:d5:34:76:d5:e3:43:6c:52:17:
d4:86:a1:f6:e6:b4:ba:79:1c:b0:75:9e:d3:e7:6a:
fd:47:77:4a:c7:b6:60:79:83:6e:21:87:f7:17:c9:
f4:a4:30:6f:08:25:b5:1b:f1:17:65:4d:24:3b:59:
cc:d8:05:f4:6a:9e:63:30:92:75:68:c3:5a:1d:64:
4f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F6:F7:CC:7C:8A:B7:87:7B:B6:05:D0:7A:9D:C0:8C:A3:82:25:97
X509v3 Authority Key Identifier:
keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/Mfb3zHyKt4d7tgXQep3AjKOCJZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.218.0/24
Signature Algorithm: sha256WithRSAEncryption
10:8a:b1:3c:f0:8c:34:92:d8:25:6a:a0:16:3f:3c:d8:fe:af:
96:38:53:25:8e:fe:0b:60:22:6f:f0:c2:b3:d8:6d:9e:27:89:
2a:8e:ad:82:2c:3c:3a:57:46:9e:bc:9b:2c:8f:9c:e0:4e:d9:
ec:90:c0:cf:d1:9b:3e:f0:a8:e9:43:ef:bc:47:de:99:99:14:
55:b0:5e:8d:61:22:fc:91:77:a6:7f:c5:4a:f4:da:87:92:ab:
51:c6:95:39:c9:04:80:8c:f7:69:fe:fd:1c:65:5a:fb:68:a8:
d1:8d:b5:32:3c:a9:ad:f7:e2:27:ed:e7:26:a8:b4:00:3a:64:
ef:d6:51:c6:44:f3:45:89:ba:f9:21:1c:00:b2:d6:31:1c:ad:
88:66:c3:ee:c4:91:ab:4d:e3:e5:02:ce:b7:73:fe:94:dd:a4:
30:88:12:0b:4f:4e:94:0c:d6:da:ab:1c:80:48:61:b9:d5:af:
49:e1:8e:eb:a2:68:06:c8:7b:04:8a:07:c7:a1:a9:b9:e2:ef:
71:9c:71:e5:25:e0:ed:9c:ab:24:40:37:52:be:c9:40:d9:1e:
1c:f0:9d:f3:bd:78:d8:7f:3d:f6:d9:2c:81:22:03:e6:02:9a:
72:de:80:3b:f5:e3:c9:ad:72:e7:18:f2:c1:14:3b:5a:ea:d7:
13:f4:e6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:56 2024 by rpki-client on console-fra.rpki-client.org