Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mvph7TgzTmoGd0oLc6gFIu37_68.roa
File: mvph7TgzTmoGd0oLc6gFIu37_68.roa (raw, json)
Hash identifier: qCSM9Z9lMYQDitZRvFbZRHW5ALQdPn1FVIWBEcYw6ec=
Subject key identifier: 9A:FA:61:ED:38:33:4E:6A:06:77:4A:0B:73:A8:05:22:ED:FB:FF:AF
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAF761FA6F1C91A3D4DE7C53434D8B
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mvph7TgzTmoGd0oLc6gFIu37_68.roa
Signing time: Sun 01 Jan 2023 10:05:18 +0000
ROA not before: Sun 01 Jan 2023 10:05:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56946
IP address blocks: 193.181.52.0/24 maxlen: 24
193.181.54.0/24 maxlen: 24
193.181.53.0/24 maxlen: 24
193.181.55.0/24 maxlen: 24
193.181.52.0/22 maxlen: 22
194.103.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:f7:61:fa:6f:1c:91:a3:d4:de:7c:53:43:4d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9afa61ed38334e6a06774a0b73a80522edfbffaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:69:21:c0:03:f3:09:87:38:c0:5c:0a:38:67:
f2:ef:6a:ee:2f:25:00:37:2c:02:f2:71:b2:dd:15:
94:58:87:a9:d2:9e:1c:a5:89:3c:f5:99:be:62:03:
73:c7:7c:02:7d:76:f7:8d:c1:7b:f0:db:d2:fc:9b:
fe:9b:8f:8d:91:9d:67:3f:5f:33:06:70:e1:29:b4:
2c:41:54:6d:52:43:7d:f9:f3:2e:03:8a:01:fc:0c:
e3:ca:61:c2:ca:29:f6:d3:5d:f9:5b:a1:20:2b:26:
01:35:53:9a:1b:c1:42:53:7c:c3:23:be:83:79:40:
36:ff:eb:d1:57:23:6b:10:72:4d:96:d1:a3:6e:ae:
b8:12:d2:d7:0e:78:7d:1f:01:27:bc:36:08:65:96:
c0:d3:aa:fa:6e:80:03:30:51:37:84:8b:b3:4c:4c:
89:43:02:58:ba:31:27:18:43:d3:7b:63:e9:ea:1f:
09:dc:f1:d2:6f:c0:4f:b7:1d:11:b0:97:50:0c:32:
24:7a:22:0b:2f:ed:f9:37:4a:a5:ce:76:6c:7f:53:
4c:f9:fc:8f:e1:b1:cf:5a:8c:66:96:5b:1b:22:d2:
21:0e:6d:57:3b:6a:ab:ad:63:f3:b4:b2:0b:91:b6:
09:77:4b:35:82:aa:a9:0e:43:7e:a3:f7:69:42:a3:
d3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FA:61:ED:38:33:4E:6A:06:77:4A:0B:73:A8:05:22:ED:FB:FF:AF
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mvph7TgzTmoGd0oLc6gFIu37_68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.52.0/22
194.103.88.0/24
Signature Algorithm: sha256WithRSAEncryption
88:4f:58:d2:6c:13:e7:c2:ce:cb:6a:8e:59:6e:46:aa:ba:f0:
05:bd:19:f7:62:a7:4c:b7:a9:44:dc:e0:68:8a:24:08:be:19:
e7:16:c0:db:1b:de:03:1b:41:7d:25:5c:38:85:ce:cc:d9:4c:
d9:0b:82:aa:f5:2d:12:64:72:4d:3c:d1:b5:f5:64:c1:53:a8:
f6:c0:fc:5f:94:c4:b4:f6:b1:db:15:30:20:9c:4e:21:9e:e3:
4b:65:c5:2f:a9:67:94:92:57:09:7d:d5:8d:91:b0:42:d5:61:
2a:87:8f:4c:55:6c:63:42:dc:83:16:c8:d4:17:5b:0a:f3:48:
9e:54:13:ff:b9:34:21:49:0b:00:0f:3a:88:42:62:7e:92:c0:
67:c7:46:83:84:47:a0:f9:94:8a:7d:93:39:f1:95:9b:26:f7:
ae:66:6c:1c:ec:28:48:9d:fb:48:66:a9:9f:b5:d7:16:44:80:
36:ec:62:aa:cd:64:2a:9d:63:6b:ec:0d:3a:11:38:c4:ae:81:
28:83:f6:6a:0a:ca:2e:61:80:bb:d0:cc:02:16:df:e3:fe:5b:
fe:e8:df:c5:a5:a3:24:ed:16:b7:e7:7a:6c:bc:a4:a1:26:b2:
b1:a2:e0:0b:b7:b9:fb:86:a2:f8:1b:d5:2d:d0:15:b0:fc:ce:
ff:55:79:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:20 2024 by rpki-client on console-ams.rpki-client.org