Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/megFB-3g0Isg3_3eCg1AQ4JTDVg.roa
File: megFB-3g0Isg3_3eCg1AQ4JTDVg.roa (raw, json)
Hash identifier: QHkWNDkEEUpDWQUu8IkhTzeGaPBoERJmZm1aK9bxFEo=
Subject key identifier: 99:E8:05:07:ED:E0:D0:8B:20:DF:FD:DE:0A:0D:40:43:82:53:0D:58
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01857246F95E0E5D3BC6949C6D7655FB70E9
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/megFB-3g0Isg3_3eCg1AQ4JTDVg.roa
Signing time: Mon 02 Jan 2023 11:38:51 +0000
ROA not before: Mon 02 Jan 2023 11:38:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19437
IP address blocks: 5.8.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:f9:5e:0e:5d:3b:c6:94:9c:6d:76:55:fb:70:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99e80507ede0d08b20dffdde0a0d404382530d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:60:57:3a:12:64:c7:e8:1f:7a:3d:d2:4d:80:
4c:ff:a1:cc:99:8f:e4:7c:3a:b4:86:47:3e:a0:71:
7e:02:f3:cd:3f:58:36:53:8c:57:73:06:1a:31:51:
ee:38:d5:73:0e:e6:2d:6e:70:6d:03:fe:5d:fd:7e:
96:b5:64:e4:88:99:dc:1d:5b:a3:1c:b5:01:e5:e7:
eb:0e:bc:ae:c9:a9:57:19:a8:9a:74:84:f3:51:41:
f1:c3:88:db:36:6a:05:85:fd:a1:96:51:24:da:9d:
4f:56:42:dc:3d:fa:20:94:8c:53:08:75:f1:a7:6c:
30:42:1e:19:bd:55:71:bd:6e:06:9e:5d:4a:5e:bd:
49:da:dd:61:dc:75:ba:93:22:91:bb:af:1e:d0:06:
6e:77:01:3a:73:26:fb:f6:c7:9e:5e:13:9d:95:f7:
c4:58:81:0b:3c:33:35:71:fb:91:29:b0:9d:c1:2c:
75:c9:b6:1d:3a:42:e7:6f:99:d0:9e:3e:80:39:99:
97:3e:c8:d2:59:97:f7:06:66:84:26:a8:88:99:2e:
58:eb:0c:4b:b9:94:21:7e:60:8c:21:94:0c:d3:d8:
84:96:7b:1b:3c:87:03:70:e1:5c:7e:ee:2c:8c:36:
c6:91:f6:ec:1a:39:b3:4e:7b:44:d6:8a:9a:17:87:
0d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E8:05:07:ED:E0:D0:8B:20:DF:FD:DE:0A:0D:40:43:82:53:0D:58
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/megFB-3g0Isg3_3eCg1AQ4JTDVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.63.0/24
Signature Algorithm: sha256WithRSAEncryption
92:15:c1:df:4f:4a:20:70:82:2a:23:79:cc:56:d7:df:c8:2e:
98:93:66:83:54:03:40:5c:49:60:98:36:da:cc:f7:2c:cd:8c:
ec:f6:9e:46:7f:75:8f:fa:38:df:36:3d:85:9f:fa:33:18:e2:
7b:ad:cd:04:da:68:89:e4:4d:1d:0b:38:af:81:e4:5f:61:42:
ae:3a:99:df:da:5d:2e:5b:8e:43:86:e9:c5:e0:41:01:12:34:
e8:db:10:4d:29:36:ae:e0:7f:2d:2f:a1:2c:9d:6c:77:0e:a0:
20:bd:2a:fd:03:4c:3a:29:7f:5e:5a:af:fd:3d:3d:6c:f2:70:
56:67:c5:cf:d2:4c:6d:af:24:de:7e:5e:ff:7c:4e:6f:60:da:
36:45:7f:84:90:4f:83:a4:74:4d:7b:b5:64:06:a2:a5:98:db:
68:c4:78:90:3d:e9:07:62:9c:0d:57:3b:9b:db:bf:33:b2:66:
2e:1f:05:a5:4e:3a:51:60:0a:77:6a:e7:d2:eb:0e:52:94:69:
0e:0a:82:03:d5:df:1d:2f:9b:46:1f:b7:bb:58:e1:37:1e:e7:
a9:79:bf:53:34:5b:06:74:fc:45:1d:5e:e3:00:9f:d6:af:63:
c4:c5:00:ab:e3:bd:2a:6a:36:a7:5a:be:07:ce:b4:b9:10:c4:
2d:99:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:25 2024 by rpki-client on console-fra.rpki-client.org