Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/Mcdf6rskxhmAEoBhTikCklZLI4E.roa
File: Mcdf6rskxhmAEoBhTikCklZLI4E.roa (raw, json)
Hash identifier: wejUAjAPb23gtjV6w7e0aKw1AoKBzPMbrQanJ6nxDwM=
Subject key identifier: 31:C7:5F:EA:BB:24:C6:19:80:12:80:61:4E:29:02:92:56:4B:23:81
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 01856F94986E8FA0CF7BF493711FCF825EBA
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/Mcdf6rskxhmAEoBhTikCklZLI4E.roa
Signing time: Sun 01 Jan 2023 23:04:47 +0000
ROA not before: Sun 01 Jan 2023 23:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 192.109.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Sep 2023 09:08:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:98:6e:8f:a0:cf:7b:f4:93:71:1f:cf:82:5e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Jan 1 23:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31c75feabb24c619801280614e290292564b2381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:58:9b:db:a7:4c:8d:f7:8f:e1:66:50:9e:
08:f8:55:46:3b:4d:75:7c:f2:15:62:e6:a8:43:dd:
97:e6:9b:a2:72:dc:90:ae:04:40:27:9f:1a:5f:b7:
9a:75:1c:cb:27:e1:62:b9:57:f7:78:d1:cf:84:8b:
1d:41:bd:58:d5:25:e5:1a:d5:07:49:fb:2c:c9:9c:
bc:e2:81:e8:cf:10:e8:3d:e9:1a:8c:82:fa:47:62:
6b:20:95:4a:ae:8d:5a:81:1c:ac:09:c6:4d:de:28:
d3:41:7d:49:55:49:90:55:1b:b7:04:b3:c6:d6:ef:
ef:75:6d:0a:33:b0:a2:2f:d0:b1:09:e9:f9:17:fe:
a0:98:30:fa:26:24:ba:9c:c8:63:dc:f8:66:2b:0b:
79:05:e9:5b:aa:30:3a:06:ed:df:b4:88:3a:be:f9:
cb:ac:c0:fe:77:9e:15:ce:9b:22:bb:cc:87:4b:84:
cb:90:3e:1f:e6:99:75:c5:3f:e3:b8:98:5c:cf:96:
c4:72:42:0a:30:ca:d1:f7:ba:41:3d:bf:76:5b:21:
c2:8f:8f:40:f0:3a:c8:1f:32:c7:61:71:e6:ce:6c:
c2:cf:56:73:88:99:eb:53:99:c9:d5:a2:ec:51:ae:
94:da:ff:43:bd:4b:27:26:f9:91:f6:4d:de:67:07:
3a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C7:5F:EA:BB:24:C6:19:80:12:80:61:4E:29:02:92:56:4B:23:81
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/Mcdf6rskxhmAEoBhTikCklZLI4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.139.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f8:dd:e4:24:7b:df:68:b9:0c:be:b9:8a:56:72:85:bb:d5:
10:f8:36:6c:84:48:7c:48:31:0a:9b:c5:5a:aa:ef:91:dd:9f:
57:2c:ab:ca:da:eb:20:ab:d5:6e:46:ad:89:09:c3:f5:68:26:
6f:76:8d:1b:ba:c7:29:dd:28:bb:61:72:7c:fc:0f:e2:df:f7:
f5:53:98:28:d6:a3:5e:d0:f4:7f:08:16:4d:f4:2c:c8:b9:5c:
50:32:22:19:88:58:d2:d7:98:d6:f3:66:e4:97:6d:27:04:a7:
f9:5f:48:e6:bb:52:2f:eb:f3:37:0a:74:ec:f7:0d:47:bc:b0:
92:81:d7:84:7f:60:55:b6:d3:04:13:f1:cd:38:8d:16:c1:55:
94:14:b2:ab:9d:bb:3c:d1:fe:bd:71:8f:17:a5:86:1f:2e:37:
28:9a:5d:41:01:19:cb:f7:08:f1:d6:0b:87:56:bb:ae:8f:13:
58:ab:ba:33:07:8b:90:5a:3f:45:83:ad:ab:6c:0e:6b:03:f7:
84:fa:89:88:2e:1b:9e:a3:89:fb:a7:dc:7d:5a:97:f4:1d:3b:
67:95:ab:9a:89:eb:4e:01:2a:83:83:dd:b5:b2:c5:49:42:4d:
ca:22:fc:68:54:eb:d5:b4:08:23:75:46:f5:48:e0:19:a7:af:
9c:f4:f9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:01 2024 by rpki-client on console-ams.rpki-client.org