Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/MW8tYSM93xfV8pNd9so4Qu8RGVg.roa
File: MW8tYSM93xfV8pNd9so4Qu8RGVg.roa (raw, json)
Hash identifier: QQMB2jKLWfL1sw/CWx/7aYkB3dFPMHBT0vR86lQB3ZM=
Subject key identifier: 31:6F:2D:61:23:3D:DF:17:D5:F2:93:5D:F6:CA:38:42:EF:11:19:58
Certificate issuer: /CN=350cce1b9d06dcce8856659536499c1603391370
Certificate serial: 01856B254EB2BE5B65C12ECBFE7A08E47988
Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/MW8tYSM93xfV8pNd9so4Qu8RGVg.roa
Signing time: Sun 01 Jan 2023 02:24:45 +0000
ROA not before: Sun 01 Jan 2023 02:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48306
IP address blocks: 91.209.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:25:4e:b2:be:5b:65:c1:2e:cb:fe:7a:08:e4:79:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350cce1b9d06dcce8856659536499c1603391370
Validity
Not Before: Jan 1 02:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=316f2d61233ddf17d5f2935df6ca3842ef111958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e6:f9:4d:02:58:84:50:cb:a9:03:92:43:ac:
f3:2b:a6:20:75:4e:33:30:93:04:f0:c5:b3:70:a2:
7c:ea:ea:69:8c:16:ce:37:9a:bc:b1:a4:0e:48:89:
90:03:56:99:d6:df:6b:39:5d:51:b8:34:cd:c8:8c:
62:06:e3:ed:0d:52:41:da:34:0d:b7:5f:32:3d:88:
ed:98:90:19:56:7e:fa:c6:bc:f3:e6:d9:04:d9:4d:
37:32:12:9c:ee:7a:d9:17:47:05:a4:b6:74:7f:98:
b3:a9:0e:7b:36:74:2c:e9:8c:64:fa:28:98:48:e1:
51:40:ed:c2:f9:57:62:91:c3:09:7a:82:93:28:09:
07:69:7e:bd:e7:f0:1f:d7:6a:ad:6b:a8:94:11:e5:
44:c4:ff:60:9e:1a:b7:52:51:81:fd:c5:98:a6:e2:
c3:c1:b0:fb:27:9b:50:8f:64:47:a8:50:33:a7:cc:
87:cb:28:5a:96:b1:66:08:b8:25:aa:7f:50:5e:d8:
f3:49:84:07:1b:c4:ea:87:f9:1b:eb:08:0c:78:46:
ce:2e:63:9c:e4:0f:da:82:7c:be:d0:0d:c4:ad:84:
93:2d:9f:66:b2:6e:bb:03:f9:36:a8:8f:2c:e0:ff:
fc:90:3d:95:d6:9a:6b:9e:d2:0b:44:f8:de:37:ed:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6F:2D:61:23:3D:DF:17:D5:F2:93:5D:F6:CA:38:42:EF:11:19:58
X509v3 Authority Key Identifier:
keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/MW8tYSM93xfV8pNd9so4Qu8RGVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.88.0/24
Signature Algorithm: sha256WithRSAEncryption
96:67:eb:41:e9:ed:d9:10:2b:60:75:0a:ef:ce:c2:fb:52:7a:
c4:22:73:20:c4:99:2a:87:f1:7b:67:df:c7:a9:a2:4a:8c:43:
c8:66:96:f1:0f:ae:42:05:24:5d:08:fa:40:23:68:51:d0:4c:
d6:00:c2:a0:83:9e:ee:b1:76:c7:f5:0c:9c:1b:5a:7a:0b:db:
7b:4a:64:36:0e:d3:71:81:a3:82:9c:3e:a2:a7:10:72:e2:8b:
34:ad:c0:59:04:b1:be:e1:73:c0:d8:cd:0f:25:28:43:74:f0:
af:6e:2a:ac:bc:70:1a:fd:c7:94:d4:dc:3a:a0:18:9a:8e:f3:
c7:99:5b:51:a2:96:ea:a9:c0:69:c1:17:83:9e:eb:cc:64:31:
7f:96:20:33:1b:6a:60:b8:bc:db:66:ee:e8:dd:f6:02:29:43:
46:35:ac:75:5b:bb:0d:88:5f:03:6f:a1:37:ae:09:ea:84:5c:
44:99:eb:26:e5:30:0f:ce:a3:dc:65:0d:cf:2d:e0:20:61:bb:
de:86:00:86:c7:01:d7:55:2a:a5:a2:51:16:79:d7:73:d9:2b:
76:92:91:b1:8e:16:b8:0b:d9:1c:e2:95:2a:cc:92:37:ff:39:
ec:ba:9e:c3:8e:03:a2:7c:6f:c6:31:eb:71:cd:e7:55:ac:48:
2c:26:4b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:38 2024 by rpki-client on console-ams.rpki-client.org