Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/MbakCb9bYg3NIVF3RkGLmFgu_iI.roa
File: MbakCb9bYg3NIVF3RkGLmFgu_iI.roa (raw, json)
Hash identifier: rxd7qEbq0tGVTPtKmx+8G5220dTQqRzRlpL0EZ+cJoU=
Subject key identifier: 31:B6:A4:09:BF:5B:62:0D:CD:21:51:77:46:41:8B:98:58:2E:FE:22
Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Certificate serial: 01856F9DFBB800C406C80C91A7D1A9D830E3
Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/MbakCb9bYg3NIVF3RkGLmFgu_iI.roa
Signing time: Sun 01 Jan 2023 23:15:02 +0000
ROA not before: Sun 01 Jan 2023 23:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 91.204.83.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:fb:b8:00:c4:06:c8:0c:91:a7:d1:a9:d8:30:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Validity
Not Before: Jan 1 23:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31b6a409bf5b620dcd21517746418b98582efe22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:22:db:ba:ec:67:7b:10:95:9d:ba:d1:18:f8:
e0:38:25:15:4f:b0:43:5a:0b:0a:38:75:0a:9b:f9:
a7:c4:9a:03:ad:6c:10:91:ac:58:24:f5:22:11:54:
a9:12:d8:0e:f7:04:0d:1a:19:58:ef:7a:93:fc:0c:
ee:3e:c3:4b:68:65:b9:52:8d:bb:a4:39:30:88:10:
64:8f:4d:ba:cc:c5:38:30:ba:aa:50:de:b3:b8:6e:
b8:d4:26:40:65:b6:7f:fb:da:c7:99:e9:a3:e9:e5:
3c:7a:f2:ac:6a:50:e1:0f:33:62:de:5e:5b:a3:53:
bc:aa:1e:4b:83:94:9d:42:e4:19:13:b5:5d:04:3b:
ed:26:c6:4c:fb:46:cd:3c:f0:dc:e7:3a:62:bc:3f:
4a:b0:1c:c4:91:f2:c9:b9:9f:c0:7e:1b:05:98:7a:
e4:56:22:41:2f:62:2e:4d:6b:ae:cf:51:f2:43:d0:
e9:2f:3f:94:44:b0:a2:4c:7a:1a:7a:7a:85:58:35:
c3:5d:9e:df:01:c0:3d:3f:4d:e1:8b:b8:b9:7c:a3:
9f:c6:c0:55:28:af:ff:d8:bc:b9:aa:90:3f:d4:ad:
aa:eb:12:6a:77:f2:b6:97:dd:85:d8:bc:0b:98:27:
01:cd:f4:64:33:3d:86:6f:f6:66:80:9d:6e:2f:8f:
2a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B6:A4:09:BF:5B:62:0D:CD:21:51:77:46:41:8B:98:58:2E:FE:22
X509v3 Authority Key Identifier:
keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/MbakCb9bYg3NIVF3RkGLmFgu_iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.83.0/24
Signature Algorithm: sha256WithRSAEncryption
43:1e:71:f3:2b:1f:b6:2f:fe:6a:5f:ed:64:6c:21:96:11:08:
3f:ac:ad:fc:24:de:72:8b:58:59:92:56:30:13:f2:d5:63:dc:
5d:66:65:13:8e:cb:86:f0:11:10:6b:b8:ac:56:cf:1b:7f:ec:
c8:38:ac:b3:5a:07:21:dc:c6:2a:34:9f:35:bc:f1:16:b5:51:
b5:0c:3d:cf:f1:0b:9d:c2:87:5a:5d:90:4e:c2:a1:46:83:47:
a0:2f:f4:5d:47:e8:0e:03:2d:4b:4b:af:9a:8a:cd:ad:87:da:
0e:b4:b0:31:3d:65:eb:5d:d0:ac:4d:67:36:d1:44:6f:64:fa:
16:17:02:35:9c:87:05:66:f8:a0:7d:c2:98:07:0e:9c:68:fa:
09:9f:9c:7c:62:62:b5:3a:d7:33:94:2e:d1:96:17:69:ba:06:
bd:80:87:11:b5:a2:78:a8:77:8b:94:82:13:e9:8a:08:fb:4d:
47:59:c0:84:2d:01:2f:44:ff:70:57:d1:48:6a:fe:e5:4f:7a:
6b:0a:56:69:9c:35:d9:b2:6c:ce:ac:c3:d9:23:88:79:73:07:
ab:0a:d9:42:b0:2f:75:89:43:f2:85:9a:dc:74:03:89:9a:c2:
eb:42:9f:66:ea:5c:da:04:94:68:04:c9:30:b9:4a:22:09:79:
d7:86:a6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:32 2024 by rpki-client on console-ams.rpki-client.org