Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Mn5D8a_RJc-AHSmuqCOWSzDBw4o.roa
File: Mn5D8a_RJc-AHSmuqCOWSzDBw4o.roa (raw, json)
Hash identifier: 4f0uvJ70aGRSMeWPWS0T/7yWSyAe174paU+3CMU4ISg=
Subject key identifier: 32:7E:43:F1:AF:D1:25:CF:80:1D:29:AE:A8:23:96:4B:30:C1:C3:8A
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCB0722CB52995C37347AFBCDB7B1D5
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Mn5D8a_RJc-AHSmuqCOWSzDBw4o.roa
Signing time: Sun 01 Jan 2023 10:05:22 +0000
ROA not before: Sun 01 Jan 2023 10:05:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204334
IP address blocks: 193.180.188.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:07:22:cb:52:99:5c:37:34:7a:fb:cd:b7:b1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=327e43f1afd125cf801d29aea823964b30c1c38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:c3:0e:29:42:1a:f6:92:48:1c:2f:91:00:
51:5f:bf:35:ec:6b:2d:46:6f:b2:51:ae:d6:d5:78:
5c:8f:4c:38:19:0f:50:3b:99:02:9f:65:02:44:ae:
b4:35:d9:18:75:68:98:07:6f:1d:01:6b:3a:9e:1f:
4b:8c:2c:a8:3e:2d:0f:06:b8:da:d9:d8:29:7d:ee:
17:12:ef:b3:f2:4d:a1:cf:31:29:ba:be:7f:86:e1:
59:82:4f:7c:06:4c:f9:cf:4c:50:11:03:47:67:45:
00:71:53:7b:2f:f0:80:f5:f8:8f:89:7e:9a:c5:b5:
da:66:e7:db:e4:04:95:a8:e9:f5:2b:e1:40:0a:34:
0e:94:01:b9:bf:a5:e4:49:90:c7:52:d1:fb:b6:81:
fb:5e:80:f3:10:7f:63:39:8e:c7:4a:33:0f:7e:8e:
7e:a3:d3:d6:87:e9:2e:ed:be:cb:77:ed:e7:95:f8:
98:01:ec:7e:db:9c:fd:6c:ec:b6:76:2f:6b:35:e6:
97:8b:ec:aa:31:72:a4:f1:f7:bc:0d:fb:d8:6f:b6:
f2:3b:2e:71:98:42:ec:59:9f:49:23:e7:05:ab:1c:
1b:2b:dc:5e:f7:c2:5c:50:3a:a2:73:3a:53:01:27:
e6:54:9d:e7:06:b7:34:3b:60:3d:f2:70:d8:b9:05:
fa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7E:43:F1:AF:D1:25:CF:80:1D:29:AE:A8:23:96:4B:30:C1:C3:8A
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Mn5D8a_RJc-AHSmuqCOWSzDBw4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.188.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:08:f5:64:ed:22:be:2c:52:2f:f6:9b:a6:e5:5a:64:cb:ea:
6e:e0:18:e4:12:ae:09:7a:35:8f:00:98:28:71:3b:0f:ca:f1:
a5:72:90:ec:19:72:29:f9:25:f3:d1:8d:7e:90:88:7f:05:32:
89:88:a0:d2:3d:89:51:39:e5:33:b8:c0:75:56:7a:a5:02:f7:
ae:3d:7a:3b:ad:29:f0:43:ad:89:f1:8b:d8:ad:ca:66:00:85:
c5:c2:33:96:9e:88:ab:14:ae:88:bd:9a:25:fa:6e:31:cd:aa:
44:c3:ed:9e:af:86:9f:58:0f:98:83:28:38:ee:02:db:c3:12:
cc:95:19:05:ed:f3:46:47:0d:40:84:88:9c:2a:65:f8:db:b7:
a3:56:35:e1:f8:5d:74:2a:31:ed:b1:05:71:1e:b3:4d:42:fe:
ca:69:ee:90:e3:7b:dc:a3:ac:7c:5b:15:27:f1:23:eb:3b:d3:
ee:a9:1f:f5:87:17:0a:48:2d:c8:44:40:e9:5e:38:68:ab:61:
d5:e4:e0:46:c0:7b:09:4a:12:24:68:b8:48:cc:a2:dc:34:f9:
18:d8:08:ee:d6:a3:06:2f:8e:86:2e:f7:fe:98:fc:8d:2a:db:
a2:79:ef:42:93:8d:99:71:dd:a5:a5:35:b9:86:ac:80:46:d8:
a2:e7:20:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:53 2024 by rpki-client on console-fra.rpki-client.org