Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/MeUDMAgYMNYMNp_n1WBrhTKD_eo.roa
File: MeUDMAgYMNYMNp_n1WBrhTKD_eo.roa (raw, json)
Hash identifier: uo6kWhHSoSQCtjGB7c0f9g012fRSwOnov9CNWb8oeHk=
Subject key identifier: 31:E5:03:30:08:18:30:D6:0C:36:9F:E7:D5:60:6B:85:32:83:FD:EA
Certificate issuer: /CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Certificate serial: 01856CF84E988D0EA1808B8C4277927E06A4
Authority key identifier: 1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/MeUDMAgYMNYMNp_n1WBrhTKD_eo.roa
Signing time: Sun 01 Jan 2023 10:54:50 +0000
ROA not before: Sun 01 Jan 2023 10:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199939
IP address blocks: 91.220.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:4e:98:8d:0e:a1:80:8b:8c:42:77:92:7e:06:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Validity
Not Before: Jan 1 10:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31e50330081830d60c369fe7d5606b853283fdea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:73:fc:d8:0d:09:bc:30:40:d9:f1:b7:44:69:
e6:f7:30:8e:7c:1a:92:12:1b:88:0c:a5:a6:91:bf:
eb:5c:23:a1:33:35:d3:b4:32:1d:20:6d:02:9f:97:
46:f7:d0:b1:a8:d0:54:8b:98:77:b5:9e:9c:5e:d3:
53:a7:4a:e7:08:5f:43:3f:cc:58:83:2a:8e:5f:b2:
4b:e9:e6:f7:95:a9:b4:05:a5:3d:67:4d:a0:75:ac:
87:4f:f2:cc:9f:19:62:f5:5e:ab:08:c9:a0:54:0a:
a7:60:9a:c5:79:b3:06:20:4d:7b:5f:89:24:3b:04:
43:50:3a:1c:e5:01:56:fc:27:ab:fc:6c:79:5d:42:
68:1c:29:5f:64:21:bd:98:f2:c1:39:fa:2e:61:ed:
db:db:35:a7:14:f2:1e:39:95:9c:6b:cf:e4:6c:72:
9d:8f:2d:cb:5c:6f:16:7b:5f:74:8d:b6:8f:bc:a1:
04:ac:d0:0c:2e:66:09:c6:b4:22:52:27:de:f3:61:
fd:bc:2f:20:f0:88:42:bb:ab:92:bb:d6:c1:a3:72:
80:2e:5f:96:e7:a3:b2:d5:8c:e7:72:10:5a:05:d6:
b0:17:98:84:d6:c6:9b:3c:1e:f6:36:6c:de:e9:1a:
c5:f7:1b:37:4c:fe:02:9e:71:84:c7:ca:d1:f1:5c:
2c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E5:03:30:08:18:30:D6:0C:36:9F:E7:D5:60:6B:85:32:83:FD:EA
X509v3 Authority Key Identifier:
keyid:1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/MeUDMAgYMNYMNp_n1WBrhTKD_eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.30.0/24
Signature Algorithm: sha256WithRSAEncryption
31:08:65:b6:cc:4d:40:fa:2c:cc:bb:95:09:18:6b:6a:5b:18:
2d:f5:22:d0:ca:9f:ed:77:a4:ec:f8:be:a9:04:89:e6:b0:7c:
11:41:c2:fa:39:c6:ee:35:66:6d:cc:a8:8a:ba:f3:fd:87:21:
32:90:bf:e8:7f:42:87:97:79:98:9e:4b:63:00:2c:be:ed:c3:
2b:dc:e4:8c:66:7c:12:f2:87:a8:b5:db:6d:56:b9:e6:60:08:
6b:e6:db:f6:82:03:9d:74:59:ea:28:97:d6:07:f7:47:57:17:
b5:59:6c:f5:3e:0a:ac:e5:88:a3:a9:24:cd:c8:b2:aa:79:69:
72:9e:4a:11:07:e2:81:5f:b1:e9:2f:82:78:ea:ad:a4:67:a4:
55:ba:7d:93:05:0d:9d:d4:36:f9:02:b9:d0:7a:84:4e:cc:cc:
b0:11:cd:f0:9e:ec:6b:ed:c3:47:ff:9d:70:90:6a:05:0c:92:
dc:e4:9f:dc:54:23:7a:e5:37:72:b4:93:44:31:31:a1:7e:5a:
0d:95:83:ea:1c:20:1a:7d:d3:a8:6b:a0:c2:a0:84:8b:42:0b:
42:c1:ee:f9:e2:36:e6:43:c0:10:17:e2:6c:68:c3:01:4e:e4:
c3:ef:bc:78:b1:c7:c9:e7:43:99:87:72:95:0d:3e:d7:30:49:
75:16:b3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:13 2024 by rpki-client on console-ams.rpki-client.org