Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/mM4jPoXzLWW1JO8Aw-auFM92D-I.roa
File: mM4jPoXzLWW1JO8Aw-auFM92D-I.roa (raw, json)
Hash identifier: 2GsmzObWroVflFqUFN+e1MS5GQnFnX5YtuW4v4hIIqo=
Subject key identifier: 98:CE:23:3E:85:F3:2D:65:B5:24:EF:00:C3:E6:AE:14:CF:76:0F:E2
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 018EBE80242F720566B68034F7C1674425F0
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/mM4jPoXzLWW1JO8Aw-auFM92D-I.roa
Signing time: Mon 08 Apr 2024 16:17:32 +0000
ROA not before: Mon 08 Apr 2024 16:17:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39877
IP address blocks: 193.169.142.0/23 maxlen: 23
195.78.124.0/23 maxlen: 24
195.88.38.0/23 maxlen: 24
195.245.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 09:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:be:80:24:2f:72:05:66:b6:80:34:f7:c1:67:44:25:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Apr 8 16:17:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98ce233e85f32d65b524ef00c3e6ae14cf760fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:36:24:fd:d0:3a:a9:6e:b7:c0:69:0c:55:
d4:91:31:18:ae:2e:0c:ad:0b:8e:d6:d1:2f:ed:9a:
28:b9:01:b6:27:bb:b2:85:5a:71:c2:b3:7f:a0:9b:
70:ff:01:88:4e:9a:88:b9:97:1d:47:fe:c1:4c:31:
59:e4:e4:3a:6f:3c:23:0d:e4:cf:04:45:cd:2b:42:
b6:4f:c6:a6:bc:89:fc:3d:5e:a5:72:aa:7a:d6:15:
ad:79:9d:0c:14:b7:ac:d1:78:33:b2:fa:e4:c8:bd:
ba:e9:d4:4b:af:60:53:68:00:35:df:86:86:22:02:
63:fb:d5:1d:a2:e2:aa:54:d7:89:57:01:56:86:d2:
0c:4e:e3:81:39:9a:f5:f5:46:5b:90:86:9a:ee:2d:
41:2e:0e:e7:ab:46:84:f0:67:39:d6:1b:6f:fc:c8:
7d:93:ab:30:b6:ca:5e:5c:86:34:28:60:c9:a2:10:
23:8d:be:4e:0a:42:e3:e6:0e:19:3d:a3:e8:6d:1d:
fd:d3:f8:23:6c:87:46:b2:70:a7:fc:6a:05:d1:aa:
b1:10:82:74:f2:c0:65:a9:83:45:21:91:e9:79:15:
c9:d4:47:ac:99:6d:c1:d8:f6:05:e4:9c:3d:d5:e6:
62:f8:04:83:e8:b8:08:81:25:80:1a:b5:a5:04:9e:
d4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CE:23:3E:85:F3:2D:65:B5:24:EF:00:C3:E6:AE:14:CF:76:0F:E2
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/mM4jPoXzLWW1JO8Aw-auFM92D-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.142.0/23
195.78.124.0/23
195.88.38.0/23
195.245.83.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:dc:b2:b4:ac:2e:bd:a0:d0:0b:4e:55:b5:7c:65:db:00:1c:
f3:af:76:37:58:da:7a:28:dd:a6:f3:b9:96:b4:b3:60:56:ab:
50:a0:47:cc:fa:b9:ae:ea:10:10:9e:00:26:63:c6:9c:b3:9a:
6c:77:c1:23:4a:9c:5c:de:fd:80:e1:00:40:ca:c9:ab:51:dd:
a2:72:be:dd:89:1d:f8:21:2a:1b:0d:d9:67:1a:e2:83:4d:78:
66:58:af:9f:3e:86:34:c7:f6:2c:c0:14:ce:bb:e4:99:c2:d7:
6e:99:e8:07:1a:6d:ea:ff:c4:aa:ae:25:a2:fe:1f:76:c9:8f:
92:6e:d1:49:21:cc:2f:27:0a:1b:f3:a7:dd:80:ba:a5:56:71:
6e:10:e8:5d:fc:83:93:21:cd:70:e1:a8:92:e2:86:e3:85:43:
f7:cf:1e:61:e7:81:c1:73:f3:7f:5a:af:da:04:58:82:31:11:
a4:cd:9c:4a:f3:a8:33:7e:e9:e6:99:86:51:fb:f1:de:ca:88:
b2:cf:3c:97:34:52:b3:50:d9:04:61:9e:e5:b8:19:81:2f:39:
1e:3c:8e:fb:95:f1:20:6d:c2:06:38:b3:58:c8:62:ee:09:3b:
24:83:f7:b0:2f:a7:c4:07:70:b0:b4:6b:2e:9d:0c:ff:e3:8b:
9f:91:54:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:46 2024 by rpki-client on console-fra.rpki-client.org