Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/mgd3VD7WJpc8Ny_IHH_XUUkyXI4.roa
File: mgd3VD7WJpc8Ny_IHH_XUUkyXI4.roa (raw, json)
Hash identifier: +H0bz+kPBXNa7sa6U9IdCJJuBxQGPGnbJdeqTh7Ykkw=
Subject key identifier: 9A:07:77:54:3E:D6:26:97:3C:37:2F:C8:1C:7F:D7:51:49:32:5C:8E
Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial: 018A80B7EE597AF83BA306B9F84AA7859F4B
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/mgd3VD7WJpc8Ny_IHH_XUUkyXI4.roa
Signing time: Sun 10 Sep 2023 20:10:52 +0000
ROA not before: Sun 10 Sep 2023 20:10:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 92.41.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Sep 2023 20:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:80:b7:ee:59:7a:f8:3b:a3:06:b9:f8:4a:a7:85:9f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
Validity
Not Before: Sep 10 20:10:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a0777543ed626973c372fc81c7fd75149325c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:43:4f:bd:7a:75:19:ef:30:91:be:55:db:e2:
b9:8f:c7:4a:73:9c:7f:1f:f8:af:c1:de:8b:59:2f:
4f:c8:0e:49:46:b3:f8:83:db:45:ab:13:66:e9:f5:
44:cc:04:e6:e1:34:6d:28:9f:44:ad:69:4a:a6:e6:
42:47:1a:e4:1e:7f:cb:e8:9b:f2:92:34:c3:1e:f8:
00:40:3e:9f:e4:bd:f1:59:89:70:1f:fc:e5:24:0e:
d2:48:b4:fb:71:7f:d8:04:67:55:9f:3c:99:d7:05:
ff:cd:cd:86:60:7a:b9:d4:cc:40:fe:b5:e2:23:64:
c0:12:4c:3a:35:b5:99:13:a5:c3:3b:7e:f7:b8:2d:
2d:1f:89:7a:2a:de:9c:a5:0c:09:5f:5e:4f:d3:c0:
54:1d:74:8e:ec:90:eb:f7:c1:e6:34:1f:04:d9:28:
6f:ee:53:14:bc:1e:50:f3:5c:4f:c9:35:d8:a4:3f:
62:47:a2:c9:b7:fe:9f:ed:ac:64:90:1d:00:9c:c2:
30:40:93:be:9e:41:48:50:76:98:c6:83:da:34:70:
86:61:59:44:99:9c:ae:5c:81:fa:b4:bc:7d:63:cd:
f3:17:8d:d9:27:44:d1:42:ee:95:fc:38:8c:ae:c0:
9f:2c:7d:e2:16:d1:c4:8d:cb:90:b2:98:0f:31:17:
17:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:07:77:54:3E:D6:26:97:3C:37:2F:C8:1C:7F:D7:51:49:32:5C:8E
X509v3 Authority Key Identifier:
keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/mgd3VD7WJpc8Ny_IHH_XUUkyXI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.41.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:24:a1:9b:a6:48:db:0c:32:cb:7b:33:6d:02:56:2d:99:26:
7e:e5:1b:16:6f:af:6b:d7:1e:c9:81:eb:37:bd:77:77:dc:43:
84:36:88:7c:04:8b:99:81:85:f5:a7:e6:7f:b8:fc:30:07:df:
0a:30:bc:c9:cb:be:46:e0:49:33:91:11:4f:56:fe:1b:0e:dd:
02:58:84:22:12:5a:12:1f:35:37:04:62:79:d8:dc:e6:49:98:
9d:f7:bf:8f:90:19:b0:12:cb:25:b3:76:80:fe:21:98:61:41:
67:72:8d:1d:a9:ac:f5:9b:0c:f3:c4:9e:b0:ea:fd:31:20:7e:
8d:80:16:59:ad:54:95:08:18:77:5b:d5:46:84:03:29:d7:c6:
99:b3:a5:9d:f2:66:38:f9:95:c5:5e:89:bb:2c:e2:92:ac:94:
17:89:94:9b:38:db:61:9b:64:6e:30:09:f6:a9:4c:42:ac:5b:
7b:68:cc:fa:70:c1:c0:e9:b3:bb:2f:a1:e6:81:3c:09:b9:ff:
48:4b:01:a0:5c:fb:6d:87:38:45:73:a4:ce:20:8e:0c:0b:d8:
2c:18:6a:49:e6:88:7e:86:4b:fa:b9:2c:cb:b5:96:db:17:0d:
44:da:16:dd:15:de:c6:26:ee:1f:5e:50:ba:9d:8b:4a:ea:1e:
60:04:ca:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:41 2024 by rpki-client on console-ams.rpki-client.org