Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/mb2F8FAP3UFWKQzfAGPEmg828TM.roa
File: mb2F8FAP3UFWKQzfAGPEmg828TM.roa (raw, json)
Hash identifier: PnCOyl5h07Dg6pjZzsuczk3G309WNvOGIyLbyx7rJXA=
Subject key identifier: 99:BD:85:F0:50:0F:DD:41:56:29:0C:DF:00:63:C4:9A:0F:36:F1:33
Certificate issuer: /CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Certificate serial: 018576C94CCABC61AA2F51809E80814D0939
Authority key identifier: 79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/mb2F8FAP3UFWKQzfAGPEmg828TM.roa
Signing time: Tue 03 Jan 2023 08:39:41 +0000
ROA not before: Tue 03 Jan 2023 08:39:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213047
IP address blocks: 91.234.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Feb 2023 13:15:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:76:c9:4c:ca:bc:61:aa:2f:51:80:9e:80:81:4d:09:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Validity
Not Before: Jan 3 08:39:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99bd85f0500fdd4156290cdf0063c49a0f36f133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8c:26:74:37:70:9b:60:7c:14:cd:cb:5c:40:
9d:0a:8e:53:f3:d2:b6:b5:e3:a0:39:11:93:d9:9b:
46:5a:04:cc:3b:2a:45:69:94:eb:46:fa:15:03:23:
35:24:91:34:6a:74:91:f8:9f:1e:24:6f:ac:06:2c:
f5:bc:08:b8:2c:5e:e2:15:a2:4f:4b:df:7d:de:01:
74:98:fd:91:61:29:4c:10:04:e1:b0:87:1a:f4:0d:
dd:da:d2:ff:9d:87:f5:cd:4f:3d:ee:75:a3:94:eb:
7f:f5:d9:1e:2f:f7:bc:80:d2:7b:0e:80:d5:36:9e:
27:eb:40:1b:68:94:c3:3a:9e:c8:f6:b7:92:a8:10:
00:92:54:f8:9e:22:82:e8:b9:3a:61:52:09:d6:6c:
6d:46:ca:37:da:bd:14:12:6c:83:4a:81:e5:c3:a2:
c3:cd:bf:31:ee:03:7d:5c:00:b2:f2:29:c6:e2:a0:
f1:9d:da:01:ab:38:65:31:c1:56:df:17:fb:df:0e:
e5:4a:d9:23:8c:60:9c:fe:7b:dd:9b:ff:22:17:7f:
ef:9f:97:ac:ef:1c:ef:e0:da:5d:5e:35:1a:7c:0c:
4f:9d:aa:e2:2b:47:5a:9b:2b:a6:8a:a8:32:21:20:
39:7b:6e:99:13:ad:50:ab:95:66:67:c7:5e:f9:e7:
d3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BD:85:F0:50:0F:DD:41:56:29:0C:DF:00:63:C4:9A:0F:36:F1:33
X509v3 Authority Key Identifier:
keyid:79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/mb2F8FAP3UFWKQzfAGPEmg828TM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.236.0/24
Signature Algorithm: sha256WithRSAEncryption
57:59:d6:1b:a9:8d:45:1a:b9:70:9f:18:da:e0:7b:18:d3:dd:
fb:14:5e:95:8d:f2:60:7c:41:4b:c0:9f:4c:c1:cf:0d:7f:cd:
0a:69:28:d8:99:6d:d4:67:a8:67:cc:19:98:54:02:2d:68:9e:
b9:c2:84:cc:5e:da:f6:68:49:b0:ca:47:72:7b:a6:35:f1:db:
be:12:6e:2e:e4:72:9a:11:59:8f:f4:53:70:2e:ba:b0:c8:92:
72:21:52:0c:dc:11:3b:1e:0f:0c:22:66:24:3c:45:f5:73:27:
58:5c:42:e0:13:95:bc:78:10:5c:8d:df:de:b8:1b:42:c1:f1:
8a:a3:08:ad:c5:17:65:9f:6d:40:06:d8:dd:35:18:b0:f9:1f:
d6:b0:16:fd:e1:be:da:81:ef:39:2c:90:8e:ae:8a:ab:9c:50:
a8:d8:b0:70:8c:8c:55:46:c2:8d:d4:41:f2:f1:c2:b5:47:d4:
fa:72:a2:6c:93:bd:1d:8d:50:93:f1:20:88:2f:6b:96:46:61:
24:41:b6:fa:3b:cf:c6:5e:7a:7e:2b:f2:06:54:50:e0:0c:e3:
b3:e6:7a:0b:ea:7c:50:81:58:23:fd:72:cf:e4:f4:ce:83:05:
b1:1d:d9:06:6a:b6:24:bf:fb:78:4b:35:65:e7:3f:31:bf:03:
e0:6b:8b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:05 2024 by rpki-client on console-fra.rpki-client.org