Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/mme-Zt0YbgSG8AiVe4mdS6H35p8.roa
File: mme-Zt0YbgSG8AiVe4mdS6H35p8.roa (raw, json)
Hash identifier: jb5HQQdMD7XoMXphq0J7i3weQ+zCHZmRQwyEd4wUCWM=
Subject key identifier: 9A:67:BE:66:DD:18:6E:04:86:F0:08:95:7B:89:9D:4B:A1:F7:E6:9F
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7AB6B5F3DF4C4A1DA0EB1DBA537BF
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/mme-Zt0YbgSG8AiVe4mdS6H35p8.roa
Signing time: Mon 02 Jan 2023 08:44:51 +0000
ROA not before: Mon 02 Jan 2023 08:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202722
IP address blocks: 91.242.80.0/24 maxlen: 24
91.242.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:ab:6b:5f:3d:f4:c4:a1:da:0e:b1:db:a5:37:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a67be66dd186e0486f008957b899d4ba1f7e69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c0:66:6c:af:1d:04:7a:dd:82:69:41:a6:53:
cd:53:dd:d8:85:63:50:60:b1:9d:99:06:d1:32:35:
f7:fd:19:1d:1d:a5:f1:50:8b:46:75:f4:47:a5:29:
5b:0b:07:fa:f6:c3:32:25:85:dd:7d:68:ae:0b:a5:
1f:6a:c5:3e:a0:67:a8:13:dc:f5:d8:9f:13:c3:8a:
86:69:dd:f8:49:0e:39:1a:3e:44:0b:d9:57:da:5b:
cd:ec:e7:07:7a:22:82:b3:2f:39:fa:b6:63:c3:24:
be:b4:5a:59:76:23:e7:20:ee:4e:86:73:0d:96:48:
d9:63:e3:28:c2:82:9a:61:58:3f:bd:1d:69:71:d7:
98:26:e2:b2:a6:a7:3e:dc:16:73:75:2e:ee:3e:16:
62:62:d2:3b:c0:f0:e1:7c:c6:ad:0e:0f:2a:86:32:
b3:ba:d8:d0:9c:59:c9:e2:dc:0f:5b:7b:c4:c7:29:
3d:2f:76:83:d2:26:67:90:b6:d6:41:21:3d:ef:22:
0a:d7:e5:5a:fe:b3:85:2d:97:3f:a3:35:1b:c8:1b:
74:a5:33:54:5c:83:59:4f:f6:a7:78:6a:85:93:3a:
de:97:d2:78:c4:d0:c9:94:93:8e:d3:e5:0f:46:e9:
76:ef:7a:49:3e:4f:28:45:10:bb:e1:7b:38:56:12:
1d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:67:BE:66:DD:18:6E:04:86:F0:08:95:7B:89:9D:4B:A1:F7:E6:9F
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/mme-Zt0YbgSG8AiVe4mdS6H35p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.80.0/24
91.242.99.0/24
Signature Algorithm: sha256WithRSAEncryption
22:09:ba:1c:0a:99:d4:e2:4d:03:f0:9b:0d:8a:7e:72:25:ff:
d0:17:24:7c:b9:44:85:3e:ac:ec:2c:3c:37:f9:14:3c:c1:79:
6b:be:2d:d8:05:05:04:38:8f:09:f0:ba:82:68:f5:e5:c8:9a:
e7:9e:a4:66:7a:6f:5b:61:02:30:98:b0:65:a1:e2:f0:91:83:
f4:51:1f:16:f0:7a:88:2f:65:e7:26:6d:5d:01:d7:7a:d3:21:
c8:fb:3c:8b:f5:17:48:ed:16:50:f2:b3:c2:6e:c6:ce:45:06:
28:e6:2c:79:77:e5:e7:16:c8:45:7c:6a:77:69:ac:45:68:27:
d0:a7:f9:44:c2:9d:9a:84:da:cf:2d:e0:b9:52:e6:94:21:78:
79:41:58:a6:dd:46:ab:21:01:f2:bb:2f:6a:28:94:7f:00:9f:
0f:34:cb:81:5e:16:ef:06:1f:e0:fc:d9:80:bb:b0:4d:fc:e9:
f6:17:9f:2a:b4:33:e8:3e:78:77:f8:b4:fd:d5:cb:6c:43:bf:
ae:47:1a:da:ef:49:cf:df:ff:63:51:aa:b9:89:11:0d:d2:9f:
b4:ca:48:52:69:a3:37:ab:04:7c:11:78:0c:b6:25:72:b0:5b:
a1:af:de:f4:38:46:c6:62:d7:22:e0:ee:9e:e4:b3:67:a7:b3:
f8:7a:27:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:06 2024 by rpki-client on console-ams.rpki-client.org