Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/MfzDngYGXZ53sTknQyZ1z7GMk8o.roa
File: MfzDngYGXZ53sTknQyZ1z7GMk8o.roa (raw, json)
Hash identifier: 4/vK+arG1tdVTjr4NMlnnSgI2YJwDw3w48qeRBkYCRM=
Subject key identifier: 31:FC:C3:9E:06:06:5D:9E:77:B1:39:27:43:26:75:CF:B1:8C:93:CA
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 01895E5984907E0E2377201C3CA243B06586
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/MfzDngYGXZ53sTknQyZ1z7GMk8o.roa
Signing time: Sun 16 Jul 2023 10:57:52 +0000
ROA not before: Sun 16 Jul 2023 10:57:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.198.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5e:59:84:90:7e:0e:23:77:20:1c:3c:a2:43:b0:65:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Jul 16 10:57:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31fcc39e06065d9e77b13927432675cfb18c93ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:b3:3d:6c:73:79:7a:0a:3e:11:52:e5:c0:
e8:e2:56:b2:10:b1:31:79:8e:5d:4e:73:7e:bd:bf:
39:bf:81:4b:e7:67:d4:76:39:30:45:d5:08:8a:74:
97:af:4c:2e:d8:7e:4b:30:d5:49:43:6e:d1:6c:62:
e2:c6:dd:63:d8:9f:fe:ef:51:58:f0:74:be:54:14:
b1:0a:06:d9:7e:b6:95:f7:80:70:90:e6:6e:eb:8f:
f4:bf:52:b7:15:1f:38:c4:c2:33:aa:25:11:1e:73:
ba:8e:98:57:c1:b2:be:b4:4c:0d:99:49:3c:72:40:
7b:58:91:9c:60:08:06:07:dc:6a:26:8b:67:cb:01:
e9:23:e9:ab:11:f2:f6:bd:05:8b:82:32:4d:85:81:
8e:9f:5d:75:20:2d:db:75:5a:13:c6:4f:ba:13:c7:
05:22:2c:03:d2:2c:10:13:3f:18:15:b7:0d:68:d1:
10:c6:21:e4:e2:94:b7:32:d3:3f:ec:ab:c6:50:fa:
30:10:e4:49:2e:e0:93:f6:3f:97:3c:3e:f6:4b:9d:
7f:52:44:bc:ee:ed:c7:f1:b8:69:36:93:ae:28:34:
c8:83:b5:44:ae:7c:b0:08:15:0d:cf:e4:38:e9:2d:
24:1e:f0:90:6b:9a:36:c7:2c:33:90:87:31:eb:2f:
97:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FC:C3:9E:06:06:5D:9E:77:B1:39:27:43:26:75:CF:B1:8C:93:CA
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/MfzDngYGXZ53sTknQyZ1z7GMk8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.81.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ef:7b:d5:0d:3e:3f:4f:f7:5c:a3:da:35:08:70:4c:75:b2:
c1:ef:2b:d6:8c:7a:55:c8:e7:6a:6a:4c:e5:04:36:5d:1e:44:
f8:a3:d5:fb:cb:e1:65:ab:9a:3d:17:69:f1:5a:19:69:a3:d2:
1e:ec:ea:71:13:61:b7:19:77:34:ab:02:59:ad:f7:a7:fa:d5:
5b:de:f9:1a:ef:87:2d:e0:ce:f7:b6:35:ef:b1:d6:0a:ba:5f:
b6:a0:10:f8:5a:1f:9d:89:a9:cb:3f:4e:00:65:7d:6a:ba:76:
b4:23:f2:ac:3e:d1:40:50:4d:54:b6:dd:fa:15:80:11:45:8b:
cf:e7:6a:88:72:a0:41:47:44:53:b0:d4:19:0e:ab:7e:90:58:
68:0e:38:60:43:1c:ed:85:a9:3a:5b:e5:19:f1:e4:10:8e:df:
17:7d:55:43:4c:b0:47:ea:c8:99:57:ad:38:3c:df:c3:f0:e3:
20:88:31:18:a9:88:fe:3b:43:1c:a1:ef:eb:a7:04:50:16:dc:
2f:a6:b0:0e:35:31:74:d8:25:6e:71:aa:36:d6:51:63:dd:dd:
01:58:86:f2:23:89:cf:ac:e6:dc:d5:7c:4e:fe:52:12:cb:41:
34:c8:7b:f5:b3:27:8e:c2:ed:bf:5b:95:89:d0:8a:1b:e6:02:
d6:ef:a2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 15:23:24 2023 by rpki-client on console-fra.rpki-client.org