Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/MhgmZQLKx_jovnxMG70hYAN-_6A.roa
File: MhgmZQLKx_jovnxMG70hYAN-_6A.roa (raw, json)
Hash identifier: +QKRNz3ulimGQuUnXY2LnChCC7Ln2j+tU3fLo3P1WZc=
Subject key identifier: 32:18:26:65:02:CA:C7:F8:E8:BE:7C:4C:1B:BD:21:60:03:7E:FF:A0
Certificate issuer: /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial: 01856F5DF5FDE02D0A3A96DA4F1FEB018217
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/MhgmZQLKx_jovnxMG70hYAN-_6A.roa
Signing time: Sun 01 Jan 2023 22:05:06 +0000
ROA not before: Sun 01 Jan 2023 22:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43171
IP address blocks: 91.189.32.0/21 maxlen: 21
77.87.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:f5:fd:e0:2d:0a:3a:96:da:4f:1f:eb:01:82:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Validity
Not Before: Jan 1 22:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3218266502cac7f8e8be7c4c1bbd2160037effa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:19:bf:21:ee:4d:84:af:91:07:29:84:24:05:
e5:70:3b:5b:52:0b:e0:85:73:c9:d5:29:70:17:bd:
3f:93:18:f8:f7:f4:39:39:d2:ac:e1:e6:2c:1a:81:
b9:42:0f:06:50:d1:fc:07:50:a3:b0:20:25:a4:c5:
52:49:db:d6:4f:56:3f:15:0f:2c:28:98:a5:e1:ad:
48:7a:bc:73:ce:f3:11:55:aa:d1:f7:50:80:02:a3:
70:69:ff:1d:d2:24:28:a4:73:93:63:63:f2:e7:3c:
1e:04:fa:3e:74:39:dc:50:c8:c6:86:be:62:7d:6d:
66:4a:79:ce:ec:9c:26:51:b0:38:25:d4:7f:9f:3a:
33:00:b6:18:c4:ac:6b:78:d4:62:85:a4:1b:48:57:
98:82:d6:55:84:c7:8e:a2:85:c2:79:af:47:04:31:
13:13:c3:00:72:2e:ee:0f:a6:45:76:3c:60:f3:d4:
8a:e4:30:b8:04:b9:0a:c1:b1:25:86:41:fc:76:85:
e4:b6:c4:fd:67:4e:86:db:41:21:ea:02:b6:f6:2e:
d6:10:60:8c:06:28:0c:35:27:47:24:8d:1f:31:3a:
44:1c:51:77:bd:f9:0a:73:84:0c:8b:78:87:2c:9a:
a3:94:a8:b9:4c:32:e3:6d:15:e5:72:3a:66:8c:ec:
27:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:18:26:65:02:CA:C7:F8:E8:BE:7C:4C:1B:BD:21:60:03:7E:FF:A0
X509v3 Authority Key Identifier:
keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/MhgmZQLKx_jovnxMG70hYAN-_6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.77.0/24
91.189.32.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:54:0d:d2:74:0e:3e:ff:4e:f7:08:97:92:80:b5:b4:73:69:
ad:20:30:49:e1:51:29:c2:a0:48:36:c5:4e:43:1a:be:6c:21:
96:36:8f:b3:90:4c:49:0d:95:f6:40:a9:9b:0a:ae:a9:45:83:
c9:b0:d2:a2:63:4b:1f:24:a9:85:0f:26:64:95:32:bd:72:e4:
30:b8:d7:b0:84:ff:7d:a7:72:ef:51:7b:34:e0:da:50:68:6f:
78:b3:60:2c:d7:64:2e:67:17:70:ba:9d:8a:7d:98:88:8f:62:
b0:e2:45:03:23:d5:6c:01:ac:b4:e6:f5:a8:d4:47:1c:d6:c8:
19:b8:fb:39:ce:31:4a:28:e6:06:e7:40:88:6f:ed:30:70:4c:
03:bc:41:c0:64:1d:d5:a4:4c:e3:05:28:9d:bd:1e:8e:e1:ea:
a1:be:d7:6d:88:d5:19:5c:8d:af:f6:fb:93:ba:f1:e8:43:8c:
28:2f:24:29:ce:2b:44:72:7a:c5:78:23:e7:40:04:9c:9f:3f:
b3:89:62:51:c1:88:d3:52:d4:12:cc:2a:9a:f5:0d:e9:e2:f3:
44:7f:e6:c7:0c:18:6a:f5:4e:f4:b9:81:94:d8:48:98:71:0a:
90:06:9f:64:13:3f:4a:da:7a:00:f0:3a:b6:ad:8f:dd:86:46:
19:be:dd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:48 2024 by rpki-client on console-fra.rpki-client.org