Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/Mg_2auItq29XPcaCU9eKqvawzRw.roa
File: Mg_2auItq29XPcaCU9eKqvawzRw.roa (raw, json)
Hash identifier: FjNCKMt9Yf4TkwLd9+bJzDQkjmLxOGeHw4Sr4u5jo6g=
Subject key identifier: 32:0F:F6:6A:E2:2D:AB:6F:57:3D:C6:82:53:D7:8A:AA:F6:B0:CD:1C
Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial: 01857170A42B500B56D074A36530259A7AB8
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/Mg_2auItq29XPcaCU9eKqvawzRw.roa
Signing time: Mon 02 Jan 2023 07:44:45 +0000
ROA not before: Mon 02 Jan 2023 07:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12552
IP address blocks: 185.49.132.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 11 May 2023 08:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:70:a4:2b:50:0b:56:d0:74:a3:65:30:25:9a:7a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af935603e52e831537716d458b360192f99a3689
Validity
Not Before: Jan 2 07:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=320ff66ae22dab6f573dc68253d78aaaf6b0cd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:af:0a:87:f9:a7:0b:5f:a6:f3:61:91:f1:02:
39:7f:10:27:c2:08:2d:68:77:8a:f0:4e:23:92:5c:
f2:93:cc:a2:af:75:2c:39:54:87:06:5f:2e:d9:d0:
96:b4:15:cc:93:95:c9:73:e0:bb:c0:97:0f:6f:7d:
91:d3:d8:44:e0:cb:6a:83:d8:e0:45:58:b9:0a:60:
93:66:69:e9:a3:f5:f9:11:70:9c:aa:0b:48:a9:e0:
c3:4d:14:70:c9:0a:a4:e9:6f:e5:47:01:98:d2:6f:
17:85:ea:af:fc:fd:bf:4e:ce:e3:17:50:db:df:37:
95:55:3a:fc:17:d8:fd:e2:d3:9a:a0:fc:1d:4d:33:
6a:01:6b:2b:c8:34:93:85:9b:a4:dd:2e:ef:d0:51:
a0:dc:79:6a:80:92:1c:b4:1e:27:2a:67:25:6e:72:
b9:4a:4b:81:54:82:ae:e0:8d:95:12:2c:f6:5f:16:
9a:46:ea:10:e6:58:f0:91:8c:3a:91:f7:85:df:bc:
12:b6:72:51:c2:cb:cf:8d:7e:f1:90:de:04:c9:52:
01:2e:b3:32:28:8c:c0:f9:a9:d4:56:5b:5c:ef:c4:
ca:22:9e:9e:fe:1a:e1:8d:2e:4a:b4:34:ce:34:91:
81:3a:ba:ef:bb:e8:f5:d6:7f:75:9d:20:d9:e8:cc:
a0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0F:F6:6A:E2:2D:AB:6F:57:3D:C6:82:53:D7:8A:AA:F6:B0:CD:1C
X509v3 Authority Key Identifier:
keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/Mg_2auItq29XPcaCU9eKqvawzRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.132.0/23
Signature Algorithm: sha256WithRSAEncryption
13:74:98:1c:0c:f4:eb:e9:12:47:6c:40:8d:c8:51:73:b8:b1:
8a:e3:f1:4a:95:fa:0b:9e:b9:a2:88:2f:06:0c:1f:d3:56:15:
29:d9:32:78:da:4a:98:16:4c:19:16:59:11:17:53:fa:08:2e:
e3:7c:66:7e:3b:2e:4c:be:43:e7:71:1d:19:c6:8e:df:c5:82:
28:41:00:13:79:66:40:17:cd:0d:e1:0c:5c:60:29:39:82:03:
62:85:99:8f:36:00:a3:50:44:1e:65:fc:57:0b:b0:3e:80:c6:
59:25:44:91:c0:00:4f:ba:6e:b1:16:c8:f1:f0:75:3a:a0:09:
ce:f1:28:d5:02:24:5e:a8:be:83:91:ff:90:9f:64:36:0c:c7:
c9:c7:82:8b:04:d8:e5:10:84:94:9f:53:42:f4:4a:97:3d:4f:
c2:1c:64:b3:a2:35:85:d4:52:c1:8c:ab:81:d9:6d:b6:0a:33:
ad:fd:e2:4e:ee:e4:e2:12:e2:34:af:b0:f8:78:ed:37:18:10:
2b:6c:34:dc:38:19:9e:8a:55:18:37:d0:4f:32:16:66:5b:fb:
db:27:5a:8b:3f:56:11:2a:75:9a:d0:cf:28:9c:4b:3d:6f:c9:
9d:09:15:ca:62:40:c9:bb:e8:37:27:ef:01:e8:b1:74:39:8f:
e0:fe:17:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:43 2024 by rpki-client on console-fra.rpki-client.org