Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/MmgwQ576AhOESV_KfV6rP4zNVOU.roa
File: MmgwQ576AhOESV_KfV6rP4zNVOU.roa (raw, json)
Hash identifier: daL9cw6l/1ov79mcxszyOhJY7VMi2zeLOfbTgnkWHAI=
Subject key identifier: 32:68:30:43:9E:FA:02:13:84:49:5F:CA:7D:5E:AB:3F:8C:CD:54:E5
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0186BCBD7F5B41CA956DF6F2BA8389B1E5BD
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/MmgwQ576AhOESV_KfV6rP4zNVOU.roa
Signing time: Tue 07 Mar 2023 15:43:00 +0000
ROA not before: Tue 07 Mar 2023 15:43:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 88.209.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bc:bd:7f:5b:41:ca:95:6d:f6:f2:ba:83:89:b1:e5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 7 15:43:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=326830439efa021384495fca7d5eab3f8ccd54e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:25:90:1e:79:33:67:bc:62:f1:04:ec:db:24:
6f:cf:24:74:5d:18:0e:9b:aa:b2:d1:51:1f:68:5e:
6b:6a:48:33:0c:85:3e:37:e2:8a:a6:f1:fb:78:03:
83:79:ef:c2:91:9e:03:ae:fa:8c:ae:46:a7:dc:c1:
a4:a9:b6:70:f1:42:03:c0:02:df:3d:52:19:34:f9:
a7:d6:de:c4:6f:a9:0d:b6:25:38:3d:87:d8:3a:2d:
16:37:44:f3:39:f0:f0:c5:03:75:ab:04:e7:66:1b:
11:a0:de:03:ba:09:c7:4e:ce:06:a7:e2:67:b1:5f:
2c:36:52:a5:8a:c4:e1:dd:b7:f4:90:8a:8f:81:11:
d5:14:d0:97:4f:43:44:56:54:8f:e8:f3:75:92:e5:
87:2f:d9:61:1a:51:ac:99:1b:5c:1f:8f:f7:f5:fe:
24:cc:8c:c3:37:31:2c:9a:39:6f:88:40:bb:0d:fe:
4a:4a:86:1d:76:ea:db:92:00:99:b7:e2:dc:a8:a6:
35:3b:bb:28:f5:d3:78:45:84:c4:9e:c7:b5:0b:c8:
16:ee:50:52:c9:6a:1a:ec:d5:16:5c:df:9d:7d:8e:
d8:c0:87:61:77:30:28:99:dc:3f:4c:1f:06:ac:96:
72:24:41:b5:ca:95:95:4e:6e:bf:5b:43:dd:72:c0:
9d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:68:30:43:9E:FA:02:13:84:49:5F:CA:7D:5E:AB:3F:8C:CD:54:E5
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/MmgwQ576AhOESV_KfV6rP4zNVOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.225.0/24
Signature Algorithm: sha256WithRSAEncryption
31:a4:73:19:b7:84:1d:49:b3:f8:79:67:66:2f:10:a7:48:7b:
79:24:31:3f:6e:b9:19:bf:2e:08:7d:8f:12:59:e5:4f:6a:cd:
56:27:75:8b:1a:af:d7:d6:c5:a0:a3:77:86:88:dd:cb:c1:ea:
99:ac:6d:a5:35:3c:a3:5f:f8:07:8e:1f:8f:bd:12:09:74:09:
c1:3d:7d:fd:11:c9:14:60:61:64:7d:3e:22:89:1b:9b:75:0c:
1b:36:e7:53:35:c4:04:74:cb:e1:a3:34:b5:7a:ee:b4:c2:d6:
45:b6:5e:e2:75:f4:7c:fe:62:e1:ff:87:69:94:44:5d:57:45:
99:b8:d7:98:18:4e:4c:b8:c0:c1:44:84:3e:12:08:f5:05:c7:
3e:3c:96:45:87:f1:62:9d:85:3f:90:96:bd:e8:6b:94:be:9d:
13:56:4a:5b:10:5b:a4:2c:02:1c:51:3c:9a:29:76:50:71:29:
a4:a8:66:7a:e2:91:70:69:e6:af:fa:ba:66:50:ad:ed:17:b7:
28:ab:ca:ef:00:4d:e5:b0:59:21:28:6c:c2:00:c2:72:7a:4f:
58:6e:dc:d3:07:d0:5c:5f:53:db:42:b0:41:fb:82:82:ae:d4:
83:66:6e:b3:1c:14:31:5b:01:ee:34:df:69:19:2e:1a:19:c1:
ba:20:da:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org