Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/MmTmX9XwrdJlMdmV3dIquCAX8XM.roa
File: MmTmX9XwrdJlMdmV3dIquCAX8XM.roa (raw, json)
Hash identifier: vCQ9ROmuUmuwoUk2/2A1gQofNle+QaM4++KHp1q27uo=
Subject key identifier: 32:64:E6:5F:D5:F0:AD:D2:65:31:D9:95:DD:D2:2A:B8:20:17:F1:73
Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial: 01898DE1673526868CBA7A94D97D837B9167
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/MmTmX9XwrdJlMdmV3dIquCAX8XM.roa
Signing time: Tue 25 Jul 2023 16:28:26 +0000
ROA not before: Tue 25 Jul 2023 16:28:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61371
IP address blocks: 94.131.198.0/23 maxlen: 23
94.131.196.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8d:e1:67:35:26:86:8c:ba:7a:94:d9:7d:83:7b:91:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Validity
Not Before: Jul 25 16:28:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3264e65fd5f0add26531d995ddd22ab82017f173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f3:72:cf:5c:01:63:60:2b:26:a1:4e:21:22:
04:05:61:96:4a:21:4a:a2:8e:25:56:9c:c0:e6:2c:
9e:73:69:25:fd:24:7c:5e:4e:15:24:ba:28:69:6e:
fd:c8:8d:4c:53:bb:1c:7f:8e:12:ae:0e:cf:4d:fa:
82:5e:90:8d:95:34:3f:58:7e:27:4e:62:42:50:35:
89:4b:0d:b8:d5:d1:cd:6a:94:f0:ec:bd:f1:22:ac:
fc:ce:b7:73:21:6d:18:aa:6a:d1:6e:b1:a3:e1:27:
e7:0a:27:34:1f:95:d5:36:1f:18:b7:82:40:34:84:
b8:2d:f1:f1:9a:d2:19:c4:53:28:f3:21:7a:ab:48:
10:cd:64:df:d2:4a:b8:1c:28:ef:13:1a:79:8a:a8:
a9:2d:13:75:a0:50:14:49:a7:3b:06:8d:d8:9e:40:
44:e9:ba:45:9b:b0:f7:8d:70:15:8d:d1:16:dd:cf:
5a:46:bc:fe:e6:7a:89:15:d9:9b:9e:73:36:a7:9d:
ae:6d:cb:3d:21:5d:07:d6:fb:28:ba:9d:75:98:71:
aa:f5:90:c7:e1:88:88:f8:50:24:95:2d:33:ac:c4:
93:9a:cf:70:ac:94:eb:3d:af:6b:bc:ac:81:9d:58:
8e:55:fc:96:41:3c:6e:7b:a5:20:00:b3:20:e2:ad:
e2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:64:E6:5F:D5:F0:AD:D2:65:31:D9:95:DD:D2:2A:B8:20:17:F1:73
X509v3 Authority Key Identifier:
keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/MmTmX9XwrdJlMdmV3dIquCAX8XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.196.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:5e:71:2a:d2:3e:e5:f7:0f:9a:33:af:ea:aa:ad:eb:c5:42:
4e:7a:1c:4c:5b:1e:1d:be:79:e2:43:a3:31:0b:ca:37:1d:52:
d1:86:87:2b:f9:34:b3:3f:5d:69:79:79:2f:9b:33:b1:31:e7:
cb:27:aa:62:51:9f:5e:ff:20:da:fd:73:b8:3a:49:c9:fc:27:
67:1b:90:1f:59:c4:95:43:89:34:ce:1c:07:5e:f1:fb:22:38:
bd:e2:94:78:e9:da:20:86:8c:ca:d4:90:d4:b7:00:b3:c8:42:
78:2d:fe:4b:76:5f:ef:60:8f:c4:5c:31:b5:59:b5:f6:05:8a:
fd:e1:5d:8c:1a:d7:65:89:65:a4:8c:65:1e:fa:29:9a:4d:f5:
78:40:62:5e:dd:8d:2b:33:d6:8e:8c:ee:ed:47:e5:af:2b:4d:
a9:13:a1:84:8f:a9:20:54:a5:84:4b:e4:68:c2:93:6c:0c:71:
d7:1f:fa:1b:97:76:c6:69:b1:77:3b:bb:6e:05:63:1a:ed:6d:
5e:f3:dd:9f:6b:89:67:cf:63:9e:27:36:31:15:05:37:91:2a:
58:8b:1c:e6:68:69:15:d0:a2:03:6b:7f:6f:53:19:a6:39:f7:
5f:88:59:06:86:48:92:c2:60:3e:28:ba:77:61:b2:5f:1e:ad:
16:fe:8b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:53:01 2024 by rpki-client on console-fra.rpki-client.org