Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/MrBw9XQe886rGbGhLmD91ZhPXwA.roa
File: MrBw9XQe886rGbGhLmD91ZhPXwA.roa (raw, json)
Hash identifier: 4rXT9LxxT1suIDdF+pP4NOG1siG5aHzR1SLWzw4soQA=
Subject key identifier: 32:B0:70:F5:74:1E:F3:CE:AB:19:B1:A1:2E:60:FD:D5:98:4F:5F:00
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 018CCA2BDDAB31B9EEC871BCB5E897B7C566
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/MrBw9XQe886rGbGhLmD91ZhPXwA.roa
Signing time: Tue 02 Jan 2024 12:35:21 +0000
ROA not before: Tue 02 Jan 2024 12:35:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58274
IP address blocks: 193.26.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 03:19:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:dd:ab:31:b9:ee:c8:71:bc:b5:e8:97:b7:c5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jan 2 12:35:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32b070f5741ef3ceab19b1a12e60fdd5984f5f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e5:95:d0:25:f4:35:ea:e1:28:d3:f7:e7:de:
ca:4b:f1:06:57:9b:65:01:93:c9:cf:7c:19:2a:78:
1e:3e:d0:ca:f8:c2:ac:ba:17:fb:04:b3:29:d7:85:
00:ce:96:c3:58:35:6b:4c:ca:57:8e:d5:98:e6:3b:
53:6b:64:5e:5f:cd:c1:64:4d:82:cc:d6:9c:c7:2d:
cf:ce:60:c1:de:61:12:f5:5c:1d:00:42:dc:c7:f0:
85:c5:a2:94:5b:07:b4:dd:b9:1a:c6:ce:90:3c:b8:
14:79:31:d1:bc:1b:ca:d5:7c:c6:70:23:b6:b7:61:
b1:a7:e6:40:60:af:4f:13:38:3d:7a:5f:a9:b7:a4:
9a:07:5c:59:ad:43:44:1b:7d:8b:39:8d:17:72:7f:
d8:5d:65:90:44:7e:57:37:13:4e:c8:98:6a:ab:5e:
ee:9a:48:88:73:1b:0c:98:ba:05:2f:4b:6b:89:c5:
84:36:86:2e:fc:29:9f:23:f1:27:00:f0:08:39:8e:
ef:32:9a:20:39:e0:31:94:a3:64:76:58:1b:65:4f:
dc:39:7f:2d:00:52:10:05:73:23:a3:fc:78:37:91:
13:40:f7:24:2e:4d:29:6d:6b:15:96:d4:95:59:5e:
21:e3:00:a0:df:d9:40:0a:73:af:c1:e7:7a:c1:f3:
be:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B0:70:F5:74:1E:F3:CE:AB:19:B1:A1:2E:60:FD:D5:98:4F:5F:00
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/MrBw9XQe886rGbGhLmD91ZhPXwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.3.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:3a:62:b7:c5:3b:b7:d2:c1:01:ea:d5:9b:df:91:1a:17:37:
8f:9b:75:38:33:82:9a:5a:96:31:38:97:c3:dc:4f:70:bf:34:
ff:a7:d9:90:12:d5:05:ec:6d:12:7f:d3:bb:4c:2d:58:d0:53:
4d:82:bc:8b:27:77:94:a0:4c:86:23:c1:13:0f:1f:ac:3c:02:
1c:6e:6a:57:93:2e:a0:77:c4:1f:78:68:7a:25:0a:45:c4:60:
58:f8:53:48:8d:f1:b4:5e:88:da:33:a1:fd:a6:04:ff:e9:38:
2a:db:6e:3c:85:df:b8:1a:20:9b:3b:f7:55:8a:40:30:82:78:
c3:d2:cd:65:69:de:a9:13:7a:ec:15:ac:97:95:2d:d1:df:27:
50:a2:19:44:5c:3e:32:48:32:e4:db:b3:c3:c4:49:e5:e4:ec:
7b:b3:cb:86:bc:e6:50:2a:eb:67:9c:01:42:60:54:38:c9:92:
b0:23:64:9e:e6:41:64:d2:b1:ca:c1:aa:3f:3b:a4:75:40:eb:
35:77:23:f4:7a:18:ce:9d:8d:8d:3e:05:c0:b1:34:c5:66:48:
4a:7e:96:af:5e:e5:c1:cf:04:81:f4:d3:b8:2e:f3:a9:ff:57:
1a:67:d1:52:fc:d3:fb:63:9f:78:be:26:6a:d5:3e:1f:23:7b:
34:21:62:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:59 2024 by rpki-client on console-ams.rpki-client.org