Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/MGNS1TS9k8qgDS5R9DTneFunaPQ.roa
File: MGNS1TS9k8qgDS5R9DTneFunaPQ.roa (raw, json)
Hash identifier: nMNIyBXbREGV6aKeLV5exQPgY249kPu2PNwxymSGNxw=
Subject key identifier: 30:63:52:D5:34:BD:93:CA:A0:0D:2E:51:F4:34:E7:78:5B:A7:68:F4
Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial: 01856BAE9812237B096B585E2FE4B494C55C
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/MGNS1TS9k8qgDS5R9DTneFunaPQ.roa
Signing time: Sun 01 Jan 2023 04:54:42 +0000
ROA not before: Sun 01 Jan 2023 04:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203650
IP address blocks: 62.176.216.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:98:12:23:7b:09:6b:58:5e:2f:e4:b4:94:c5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Validity
Not Before: Jan 1 04:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=306352d534bd93caa00d2e51f434e7785ba768f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b9:bb:3b:ce:7d:d2:bd:a4:03:84:0d:a9:b6:
43:9f:90:84:4d:4c:1f:cd:dd:8d:af:b1:19:87:11:
6b:6b:13:ef:68:b2:a0:7f:b1:33:a9:32:7d:43:fd:
68:6f:95:1c:26:40:d9:8c:da:9f:ea:51:7f:ff:66:
be:82:30:f5:cb:f8:7b:52:5a:d5:57:4c:64:84:d6:
46:c8:00:6e:69:72:0c:9f:34:d2:52:7f:7f:73:56:
4b:45:5f:fc:61:e6:29:33:0c:5a:a5:9d:b2:c5:c2:
33:15:4f:9e:7e:00:c5:45:7a:7b:e0:52:b3:56:a3:
91:70:8f:54:26:b3:01:da:88:75:45:ac:e4:0a:02:
fd:8b:32:c2:c4:b9:51:84:be:ca:e4:e3:2c:a1:51:
f7:c2:b6:5c:b2:af:70:3f:1f:3f:ba:53:7f:91:c0:
20:bc:fe:41:b9:dd:96:f3:7d:b1:2d:79:bb:d3:24:
1f:de:d3:96:d8:e9:70:94:08:e6:35:ee:42:10:58:
7e:71:dd:b3:b7:b9:e6:71:c2:56:97:b2:2d:73:b4:
bb:70:2f:d3:dc:a7:bb:aa:a5:73:c7:71:6d:b7:c1:
1f:35:ac:4d:f8:8c:85:d7:21:ae:6d:35:27:22:dc:
f1:49:24:47:2d:bc:9f:cb:d1:24:33:4a:8e:67:44:
93:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:63:52:D5:34:BD:93:CA:A0:0D:2E:51:F4:34:E7:78:5B:A7:68:F4
X509v3 Authority Key Identifier:
keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/MGNS1TS9k8qgDS5R9DTneFunaPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.176.216.0/21
Signature Algorithm: sha256WithRSAEncryption
43:52:a1:57:36:8e:a4:98:17:21:37:2a:46:5e:63:9a:4c:5b:
81:9d:7f:bc:b2:db:10:1a:54:73:1c:72:54:57:85:ad:aa:40:
e9:ca:60:bc:86:4b:51:ce:5c:22:f7:1a:4e:66:cc:8b:65:9e:
92:e5:2e:d5:0a:45:76:31:7e:e9:0b:56:e3:3c:eb:d4:61:b7:
f2:3b:6b:60:c5:3e:53:b6:11:0d:0b:4f:56:fb:49:f7:e2:5e:
be:48:d9:dd:e8:ee:e4:0e:2c:2d:eb:eb:56:7d:90:0a:74:43:
3d:a1:94:97:53:b1:22:24:c4:b5:31:3a:ce:1a:26:c8:73:64:
8f:bf:74:ae:65:8a:e2:22:88:52:9c:42:3c:7e:c6:9d:be:6a:
eb:89:74:ab:be:76:08:8a:9f:1a:b8:c4:3a:0e:41:72:1d:af:
38:0a:c4:a8:b2:da:05:73:b6:6d:a0:4e:6a:c4:70:4b:d9:d3:
a6:f3:e1:a1:6e:d0:dc:6b:ef:98:57:f6:5d:c0:35:60:6a:4c:
f3:1e:2f:28:ed:62:36:f6:7e:81:e5:50:aa:f9:28:a6:44:89:
7c:21:f6:99:6d:b0:a2:6c:95:67:7e:89:51:70:8b:52:25:72:
98:d5:67:df:82:f9:01:c7:25:b9:e1:c6:51:ec:ee:8b:62:ab:
ca:0a:85:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:44 2024 by rpki-client on console.sobornost.net