Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/mKnC-YV6naah9vSNOM8bo2ODxbA.roa
File: mKnC-YV6naah9vSNOM8bo2ODxbA.roa (raw, json)
Hash identifier: GVA35wuek1XaIvRNNhyH8R0lX6jVuQENximlYnOQ2ME=
Subject key identifier: 98:A9:C2:F9:85:7A:9D:A6:A1:F6:F4:8D:38:CF:1B:A3:63:83:C5:B0
Certificate issuer: /CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Certificate serial: 018A5FAAD09CC9A15715DB268C6FC1F8DC49
Authority key identifier: 48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/mKnC-YV6naah9vSNOM8bo2ODxbA.roa
Signing time: Mon 04 Sep 2023 10:09:04 +0000
ROA not before: Mon 04 Sep 2023 10:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201619
IP address blocks: 78.31.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:aa:d0:9c:c9:a1:57:15:db:26:8c:6f:c1:f8:dc:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Validity
Not Before: Sep 4 10:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98a9c2f9857a9da6a1f6f48d38cf1ba36383c5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4d:4a:2a:72:a6:4e:af:2d:81:81:59:c9:11:
9e:38:15:f6:8c:f6:55:ad:e5:ea:1f:9c:aa:ac:ef:
44:8c:a1:53:06:cf:c9:5c:bf:b8:7a:18:52:2a:e9:
5e:85:9e:c0:cf:ad:c0:f7:a7:7f:6a:66:c8:f9:23:
33:b0:67:a7:9c:79:d8:d6:77:86:e8:d3:2f:74:41:
59:ee:c9:e4:9b:c7:ae:e4:8c:ff:e5:3e:1b:76:63:
93:a2:f7:a2:a8:17:35:43:f9:87:34:b7:e2:e4:20:
56:e0:28:32:47:3e:d7:e8:e5:32:67:25:10:a6:cc:
59:0c:19:ad:1d:a0:22:44:11:2e:97:f1:6c:92:5b:
96:7f:f1:ac:18:52:a8:40:ab:c2:00:3a:aa:97:74:
87:c8:ae:17:51:ad:be:d3:d5:4f:48:6c:26:10:62:
c8:c6:12:ee:bc:b5:b0:ae:cb:3f:78:29:87:1f:24:
ef:8b:fe:85:2c:25:96:35:b0:12:3d:76:25:38:24:
25:5d:20:df:8b:2c:2a:03:af:81:da:5b:c7:05:91:
21:89:d0:df:b7:2b:e2:0a:d6:32:5e:d8:56:9d:39:
de:33:50:86:44:cb:c5:ce:d4:31:21:61:91:4a:bb:
16:8a:e5:be:69:9b:3b:2b:af:5c:ed:63:83:3a:6c:
04:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A9:C2:F9:85:7A:9D:A6:A1:F6:F4:8D:38:CF:1B:A3:63:83:C5:B0
X509v3 Authority Key Identifier:
keyid:48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/mKnC-YV6naah9vSNOM8bo2ODxbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.165.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:17:dc:10:11:65:e0:36:44:c7:06:de:41:27:64:3c:c8:70:
80:62:97:0c:db:c4:3f:db:0c:98:6a:21:9b:0f:8b:81:0a:b5:
9b:f9:13:39:fa:6c:8c:1b:b9:96:46:0c:cb:2b:8a:9b:d4:04:
b8:97:5d:94:8f:cf:f6:03:ee:90:6f:36:35:ea:94:15:da:78:
22:68:1f:6d:03:7e:71:c3:d7:1d:59:5b:82:4a:19:24:71:bc:
f4:63:c0:a7:0b:ea:17:4b:75:ba:96:7c:6e:45:10:19:a2:71:
88:f4:ca:ab:2e:25:36:78:f1:a4:24:c7:94:c0:9d:c7:03:fe:
d4:19:a0:00:f0:b3:21:ec:42:c9:48:2d:91:9a:ff:42:c8:04:
b7:53:0b:1e:d9:1c:d2:7c:76:80:df:d4:35:67:58:1d:e4:64:
79:aa:cb:a8:0f:53:73:45:82:ec:1e:44:9a:2d:f6:5b:06:fc:
fd:53:67:ae:46:b2:80:51:5d:43:9b:e3:89:56:0b:07:de:db:
f8:41:72:4a:3f:93:ce:a0:1e:6e:32:b0:d7:44:b3:45:32:14:
36:42:a5:5c:73:ae:5d:00:e8:ce:1d:70:43:06:89:94:14:2e:
18:9b:70:9c:85:21:cf:82:cd:95:c8:d5:6c:4f:4d:5e:ab:37:
fc:fb:3d:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpfqtCcyaFXFdsmjG/B+NxJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NjgwYmRlNTZiZDNiZjU2MTU3OGEwZmUxMDhjYmMxYzZh
NzU5ZGIwHhcNMjMwOTA0MTAwOTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGE5YzJmOTg1N2E5ZGE2YTFmNmY0OGQzOGNmMWJhMzYzODNjNWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp01KKnKmTq8tgYFZyRGeOBX2jPZV
reXqH5yqrO9EjKFTBs/JXL+4ehhSKulehZ7Az63A96d/ambI+SMzsGennHnY1neG
6NMvdEFZ7snkm8eu5Iz/5T4bdmOToveiqBc1Q/mHNLfi5CBW4CgyRz7X6OUyZyUQ
psxZDBmtHaAiRBEul/FskluWf/GsGFKoQKvCADqql3SHyK4XUa2+09VPSGwmEGLI
xhLuvLWwrss/eCmHHyTvi/6FLCWWNbASPXYlOCQlXSDfiywqA6+B2lvHBZEhidDf
tyviCtYyXthWnTneM1CGRMvFztQxIWGRSrsWiuW+aZs7K69c7WODOmwEqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJipwvmFep2mofb0jTjPG6Njg8WwMB8GA1UdIwQY
MBaAFEhoC95WvTv1YVeKD+EIy8HGp1nbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0dnTDNsYTlPX1ZoVjRvUDRRakx3Y2FuV2RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8yYTJiODgtZmMxMS00ODI0LTk1ZGQt
OWE2YjZlYWFlZDM4LzEvbUtuQy1ZVjZuYWFoOXZTTk9NOGJvMk9EeGJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8yYTJiODgtZmMxMS00ODI0LTk1ZGQtOWE2YjZlYWFlZDM4
LzEvU0dnTDNsYTlPX1ZoVjRvUDRRakx3Y2FuV2RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATh+lMA0G
CSqGSIb3DQEBCwUAA4IBAQBfF9wQEWXgNkTHBt5BJ2Q8yHCAYpcM28Q/2wyYaiGb
D4uBCrWb+RM5+myMG7mWRgzLK4qb1AS4l12Uj8/2A+6QbzY16pQV2ngiaB9tA35x
w9cdWVuCShkkcbz0Y8CnC+oXS3W6lnxuRRAZonGI9MqrLiU2ePGkJMeUwJ3HA/7U
GaAA8LMh7ELJSC2Rmv9CyAS3Uwse2RzSfHaA39Q1Z1gd5GR5qsuoD1NzRYLsHkSa
LfZbBvz9U2euRrKAUV1Dm+OJVgsH3tv4QXJKP5POoB5uMrDXRLNFMhQ2QqVcc65d
AOjOHXBDBomUFC4Ym3CchSHPgs2VyNVsT01eqzf8+z30
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:47 2024 by rpki-client on console-ams.rpki-client.org