Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MeTqcedu3H5GblSlPfifRyUqQs4.roa
File: MeTqcedu3H5GblSlPfifRyUqQs4.roa (raw, json)
Hash identifier: uP5i1JbVHFMdJpXlpmP2+hTGy1F+kKKJspOiYB17sRk=
Subject key identifier: 31:E4:EA:71:E7:6E:DC:7E:46:6E:54:A5:3D:F8:9F:47:25:2A:42:CE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190833E08C5E8FA3A3133DE8B638313F2F4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MeTqcedu3H5GblSlPfifRyUqQs4.roa
Signing time: Fri 05 Jul 2024 14:13:18 +0000
ROA not before: Fri 05 Jul 2024 14:13:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210099
IP address blocks: 87.120.166.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 05:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:83:3e:08:c5:e8:fa:3a:31:33:de:8b:63:83:13:f2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 5 14:13:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31e4ea71e76edc7e466e54a53df89f47252a42ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:04:f5:bb:49:4f:b4:42:66:a6:7d:aa:3d:
d9:41:f7:00:f0:73:00:99:e4:d9:0c:90:fc:41:d6:
e3:9d:57:93:b8:7a:2c:ac:f1:76:fb:ed:9d:4a:cd:
3e:85:c6:16:66:c9:36:19:10:73:b9:1b:47:75:da:
5b:4b:63:60:91:8c:59:11:44:71:8a:e0:ca:67:59:
80:f7:24:56:cc:ce:58:c1:ae:9b:80:3f:c1:8e:de:
58:99:ba:df:73:9d:93:64:e7:69:45:a7:cc:f7:5a:
0d:46:9d:58:80:8a:05:6a:cb:4e:13:2f:8c:0a:73:
84:27:57:f4:37:6f:50:cd:8a:45:2a:84:8b:3d:d7:
54:40:75:2e:39:92:ce:2f:50:f5:67:e3:ce:cf:d0:
e8:fb:12:7d:67:7b:08:0d:5d:c3:3a:f1:56:ad:0d:
b8:61:23:c0:c0:77:bb:66:68:0c:60:9b:67:5a:9e:
15:7a:66:66:08:04:97:6a:e9:56:af:76:a6:86:20:
75:4f:c0:e0:81:32:c8:40:0d:9a:cb:84:b1:cb:95:
33:0c:21:6c:54:46:88:d7:04:30:ea:b8:15:6e:6a:
3b:82:4b:83:e3:df:57:50:d8:d2:78:70:e0:1f:63:
b7:02:95:8f:66:9c:93:df:1e:ce:7e:bc:bd:bb:6d:
88:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E4:EA:71:E7:6E:DC:7E:46:6E:54:A5:3D:F8:9F:47:25:2A:42:CE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MeTqcedu3H5GblSlPfifRyUqQs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.166.0/24
185.246.223.0/24
Signature Algorithm: sha256WithRSAEncryption
70:38:08:4d:4c:79:e8:ab:b3:ba:c0:1f:77:57:ba:68:a0:eb:
e1:9a:70:6e:b3:85:b5:6f:be:9a:d4:05:83:a7:3a:85:a7:2b:
6d:9a:04:55:fc:de:62:23:df:e7:cc:d8:43:f6:c0:3c:59:bc:
89:9a:21:21:75:a2:9f:b3:bb:a6:4a:90:46:d7:7d:2d:37:ca:
a2:04:ee:1a:dd:1d:07:7f:6a:dd:d3:5a:27:69:52:bd:53:7b:
4c:d1:8e:e3:e2:ad:cf:39:a3:61:87:ea:84:ca:de:c5:1e:87:
c0:9e:1b:7f:1e:e2:44:ce:04:d1:a6:49:ce:37:e0:a7:d8:e0:
4c:53:72:24:bc:30:41:0b:9f:56:5c:35:2c:27:06:1c:25:63:
6d:51:df:70:5e:5f:19:be:06:fe:46:ba:cc:5d:a2:ba:06:cb:
d1:09:6a:2b:2e:27:40:e1:4a:31:bb:40:16:71:f0:68:e3:7c:
93:d9:96:92:a0:c6:2d:0e:58:23:3f:ec:6e:3c:4f:05:db:81:
11:53:1a:53:2e:b7:9a:16:fc:f2:0e:70:39:95:ab:32:57:70:
dd:98:4f:d4:b0:7e:87:23:8c:be:d4:50:31:4f:5a:cb:fb:04:
25:56:60:71:a5:36:d0:71:f3:5b:52:bf:20:9f:ed:4b:f4:52:
f2:be:37:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 06:29:46 2024 by rpki-client on console-fra.rpki-client.org