Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/MUz69vhwVO5Wt2vjLjc7XxH41B8.roa
File: MUz69vhwVO5Wt2vjLjc7XxH41B8.roa (raw, json)
Hash identifier: 6JjaIZTapokzl7VOm7xtK6Ba+F1kcLUBsx40NCCt2rA=
Subject key identifier: 31:4C:FA:F6:F8:70:54:EE:56:B7:6B:E3:2E:37:3B:5F:11:F8:D4:1F
Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0
Certificate serial: 0192017837F1B2BCADC80CDFEEA3E7600A8E
Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/MUz69vhwVO5Wt2vjLjc7XxH41B8.roa
Signing time: Tue 17 Sep 2024 19:31:48 +0000
ROA not before: Tue 17 Sep 2024 19:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15020
IP address blocks: 91.235.168.0/24 maxlen: 24
193.23.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 23:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:01:78:37:f1:b2:bc:ad:c8:0c:df:ee:a3:e7:60:0a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0
Validity
Not Before: Sep 17 19:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=314cfaf6f87054ee56b76be32e373b5f11f8d41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:60:6c:12:a5:73:d3:c1:4e:88:fc:27:3b:
a9:d3:10:58:21:be:52:05:ce:f7:f3:af:21:14:f0:
bf:ae:32:a1:27:e6:85:ff:9a:c0:4a:2b:5c:c4:e2:
a0:f0:77:e8:7a:42:22:c9:f4:99:f0:7a:4f:02:97:
19:80:30:31:b0:36:37:6d:c2:15:0c:83:a3:34:e1:
b7:c0:88:04:6e:cc:9c:82:83:58:ce:0d:2c:43:33:
c2:d8:5d:25:02:d5:68:22:b5:b4:cf:c2:85:5f:0e:
28:fc:84:8b:8b:9a:80:d1:96:83:d8:aa:9c:22:84:
68:c0:4b:a6:0e:db:12:d8:9d:08:7c:64:20:2f:db:
ac:01:62:bd:24:33:f1:14:66:dc:57:a1:72:8a:0b:
19:be:c4:90:d2:2d:5e:b7:8b:b6:39:2d:eb:18:ff:
b5:5f:5e:49:5c:7b:94:74:c8:ad:d7:ab:a7:cb:a4:
d8:da:26:d2:95:6d:f3:a8:96:e3:7a:79:53:ba:fc:
44:f8:de:7a:1b:d0:6c:a6:89:85:fb:70:4f:2c:87:
d7:30:39:5f:b1:e7:37:ad:db:1e:e8:89:47:86:14:
ea:69:ee:a3:95:73:26:1e:ce:f7:1d:c7:5f:b0:f0:
d8:ba:ae:94:38:a8:23:95:d4:63:7d:5b:70:7e:42:
22:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4C:FA:F6:F8:70:54:EE:56:B7:6B:E3:2E:37:3B:5F:11:F8:D4:1F
X509v3 Authority Key Identifier:
keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/MUz69vhwVO5Wt2vjLjc7XxH41B8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.168.0/24
193.23.60.0/24
Signature Algorithm: sha256WithRSAEncryption
10:47:fb:02:ad:d9:28:08:71:5d:79:7b:c1:81:1a:1e:6f:8d:
c0:69:45:c8:ed:a5:ec:f2:28:d9:f1:4b:33:82:a6:1c:aa:c7:
43:bf:42:e1:06:e6:d3:bb:81:13:86:68:28:1a:85:30:74:7e:
be:b1:34:02:ec:31:bb:e2:4c:2a:27:b9:48:d3:58:f8:8d:0c:
f6:28:06:22:8b:3a:72:81:42:11:92:64:d3:a5:d3:5a:de:6f:
3e:4f:0b:6d:97:1d:ce:6b:94:1f:b3:3f:38:8d:27:c3:a9:f3:
46:03:25:5f:21:fb:2e:90:98:ca:78:d4:c4:20:11:1a:b7:95:
db:2a:79:a7:a5:ff:33:dc:cc:f1:90:50:11:69:e3:da:f0:c6:
53:6f:e8:24:b0:e5:75:e3:4e:39:ab:48:bc:c7:63:ac:66:85:
62:57:89:b1:19:2f:4c:b0:bb:ce:6e:17:41:a0:9d:3b:56:5e:
8d:79:1b:c5:dd:a1:64:8c:8e:e4:38:ac:bb:86:ea:80:c3:de:
d7:98:81:05:3f:d0:a0:a3:c8:14:20:86:e6:cc:05:81:3b:14:
35:f1:99:d9:36:92:18:57:77:17:6c:16:86:27:15:cc:e3:86:
d6:87:a3:bf:55:36:c5:5d:83:1b:c4:d5:78:4c:0f:bb:b5:bd:
d5:61:3c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 01:07:39 2024 by rpki-client on console-fra.rpki-client.org