Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/Mimsh-pB5p9xSd9pFQ_2gyer7OI.roa
File: Mimsh-pB5p9xSd9pFQ_2gyer7OI.roa (raw, json)
Hash identifier: Tjz79bqqnL2U2KpqJXuF4k+YN0dZqeU4uIqPh333qUg=
Subject key identifier: 32:29:AC:87:EA:41:E6:9F:71:49:DF:69:15:0F:F6:83:27:AB:EC:E2
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 018B143FE393B3E25DC660B3F5A9E81CEDBF
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/Mimsh-pB5p9xSd9pFQ_2gyer7OI.roa
Signing time: Mon 09 Oct 2023 11:43:33 +0000
ROA not before: Mon 09 Oct 2023 11:43:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41801
IP address blocks: 91.102.160.0/22 maxlen: 22
91.102.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 28 Nov 2023 09:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:14:3f:e3:93:b3:e2:5d:c6:60:b3:f5:a9:e8:1c:ed:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Oct 9 11:43:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3229ac87ea41e69f7149df69150ff68327abece2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:28:ed:a8:ce:46:b1:fb:36:be:16:5e:d6:
98:d7:85:a8:11:50:5f:e8:52:77:36:8c:7e:87:bf:
25:48:28:cf:a6:c2:9f:7c:51:8d:1b:c3:28:39:7a:
b5:8c:47:90:15:e6:ba:f8:1b:71:b1:5f:85:90:8a:
69:27:84:4b:fd:cb:f8:a7:2b:73:1d:3e:a6:aa:7e:
d0:4d:90:01:4d:db:0b:82:c1:49:2f:40:4a:de:33:
f3:10:80:00:aa:0e:9a:5c:54:3f:7d:98:75:8b:3a:
38:b4:00:8e:80:07:f0:52:14:f9:9a:c0:8a:a1:e6:
10:3f:5d:6e:b8:21:8a:0d:f7:36:81:e0:79:26:05:
38:73:36:bb:d5:f9:b4:c4:e0:c7:65:0a:52:22:2a:
00:9d:32:9b:26:10:8d:96:c1:da:2a:5a:a9:b0:58:
86:bf:a6:c8:f9:5e:f3:e0:16:ce:61:4c:a2:94:e8:
f1:f4:58:e9:80:a9:8c:59:54:f5:8b:05:7b:7c:a1:
6a:f1:1b:b8:a3:70:b2:74:8a:da:3a:e6:43:c6:45:
78:5c:78:55:ee:3d:db:e3:45:fe:13:29:9f:cf:f2:
48:6a:e5:00:54:7e:7b:fc:b9:65:70:cc:c3:76:1e:
b3:9e:77:fc:ae:fd:4b:35:4f:da:b0:99:39:13:2e:
11:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:29:AC:87:EA:41:E6:9F:71:49:DF:69:15:0F:F6:83:27:AB:EC:E2
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/Mimsh-pB5p9xSd9pFQ_2gyer7OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.160.0/22
Signature Algorithm: sha256WithRSAEncryption
55:a0:e3:61:5b:de:33:e8:06:57:19:26:fe:be:fd:0f:96:7e:
88:d1:2b:3d:6c:6e:30:c1:e9:5c:ac:b9:83:43:0e:41:9f:1a:
c4:37:d0:94:e1:0b:e8:7b:6e:be:71:eb:8a:e4:43:dc:f3:30:
7f:9e:7e:9b:04:45:9a:00:c4:cb:36:32:fe:28:89:be:be:c6:
73:c9:06:df:a9:e4:8d:a8:5b:83:e6:95:57:0d:3b:3d:25:7e:
d7:f9:8b:29:ab:e2:8e:7f:cb:5d:3a:af:d6:4a:64:e7:76:3f:
bb:ff:7d:9b:c0:9d:58:92:3a:4b:f7:56:a3:ec:99:24:3a:41:
ee:ba:ed:e7:bd:11:61:75:57:70:50:4c:c6:12:5a:a7:60:30:
ba:fd:fb:6d:bd:98:79:2f:49:0f:10:cb:3b:ae:d6:e9:d7:6e:
12:60:db:13:ff:6a:87:4d:6f:f2:8e:cf:c3:6e:bc:a1:6d:11:
50:1b:51:27:13:42:34:2c:e0:ca:b0:9f:b1:7d:29:a6:6f:ea:
ac:8f:4c:ed:71:61:08:40:8b:a2:6d:87:26:4e:02:cf:7c:0c:
d9:34:a6:b1:76:da:33:cf:7b:56:23:62:39:8b:62:87:c5:58:
7b:04:66:d9:3f:6e:34:32:c8:9b:b6:0c:ca:61:00:70:6d:0d:
3d:f0:cc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:51 2024 by rpki-client on console-ams.rpki-client.org