Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/MuYO8_PDu-hh8Fs43gKprXBfc6s.roa
File: MuYO8_PDu-hh8Fs43gKprXBfc6s.roa (raw, json)
Hash identifier: NW+w416Pi+T1FReHT2JchjLPUyEC4LR5n2M3vj5fG3E=
Subject key identifier: 32:E6:0E:F3:F3:C3:BB:E8:61:F0:5B:38:DE:02:A9:AD:70:5F:73:AB
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 018E2E4F2FC8A5F1755EA838C28A4936758A
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/MuYO8_PDu-hh8Fs43gKprXBfc6s.roa
Signing time: Mon 11 Mar 2024 16:18:45 +0000
ROA not before: Mon 11 Mar 2024 16:18:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 195.114.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 06:42:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2e:4f:2f:c8:a5:f1:75:5e:a8:38:c2:8a:49:36:75:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Mar 11 16:18:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32e60ef3f3c3bbe861f05b38de02a9ad705f73ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:33:d1:1c:29:61:2a:99:38:62:40:41:ca:
f3:54:61:ed:14:7a:cc:d6:a3:24:80:f8:c3:5d:22:
f0:eb:bd:27:9c:19:a2:2d:91:89:cc:a2:70:54:c8:
cf:88:9e:67:b7:6a:fe:26:e1:82:91:f1:dd:34:98:
a5:f5:0f:54:77:f0:13:fa:84:87:25:ea:eb:67:27:
58:9b:9b:a2:c7:86:ae:ec:ba:7c:74:9c:af:7b:45:
6f:43:e3:a0:07:f1:4d:21:ce:56:37:71:5e:12:33:
f2:b0:95:77:ef:81:0e:bf:ea:e4:dc:31:0f:a0:de:
05:cd:54:7a:51:f2:97:50:59:2b:df:61:53:e3:e7:
05:cc:8b:8f:94:ed:28:a6:ce:83:b7:7f:ef:fa:e8:
2b:06:be:e5:fa:d4:89:ea:80:82:eb:7b:ed:76:ef:
77:8e:a8:a8:0c:9b:bd:65:db:cb:d5:1e:d9:f6:d1:
82:08:7e:b6:46:08:e8:cf:b2:6c:22:be:03:9f:7b:
3c:a2:ec:99:27:49:21:2a:5f:0b:e1:95:5f:ca:7a:
91:a0:a6:06:8e:c9:83:dc:fd:40:6f:db:0e:52:a5:
88:a4:61:50:e2:fe:2f:de:a9:75:39:32:ad:23:de:
c4:df:04:91:68:09:16:37:09:25:f9:80:6f:9c:e1:
b0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E6:0E:F3:F3:C3:BB:E8:61:F0:5B:38:DE:02:A9:AD:70:5F:73:AB
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/MuYO8_PDu-hh8Fs43gKprXBfc6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.193.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:a9:c7:55:6e:c1:74:e4:fd:84:6d:42:85:dc:38:f8:81:bd:
bb:cb:ea:27:ba:78:49:cc:9a:68:1e:03:db:46:92:66:d3:f0:
aa:25:58:e6:71:47:08:06:8a:69:c4:27:98:6d:d1:3e:a8:89:
ce:f0:98:ee:eb:1a:65:fb:d8:85:b5:e6:1c:7e:fb:25:f3:78:
e0:dc:68:ce:d6:4d:81:8e:80:96:09:3b:e1:26:2b:97:85:11:
26:82:08:7e:e2:6b:3f:14:ca:23:e5:4a:27:72:19:fe:e6:dc:
d2:42:3d:ea:b3:2b:fe:e2:26:07:90:9a:91:36:4a:87:cc:25:
a0:3f:13:c3:6c:19:ec:12:62:d2:d2:b8:e7:f0:cd:3c:53:31:
e1:28:32:3a:e3:f8:de:75:81:21:0e:30:af:f4:89:8d:ec:0d:
75:2e:e5:d1:7a:9c:57:60:5e:0b:e8:14:fe:0c:2c:6e:03:74:
a8:27:16:47:23:47:e1:5d:e0:61:da:e7:7f:1b:63:f6:53:bb:
dd:2d:f8:fb:3a:95:32:2f:51:ca:05:37:b7:c4:54:73:78:a9:
15:78:0a:0d:c7:ca:66:4d:2a:71:b3:44:e3:98:f1:3e:a2:98:
54:10:e3:05:d0:b6:ef:c7:be:ab:69:25:70:31:ff:06:ab:2d:
c3:da:60:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:40 2024 by rpki-client on console-ams.rpki-client.org