Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/10f8e7-fec8-4171-98db-ac2830bed56b/1/Mm2gfER_2iFxJfs1cmBb_h7U074.roa
File: Mm2gfER_2iFxJfs1cmBb_h7U074.roa (raw, json)
Hash identifier: ia0VbJB3ZkUdb39eeSWWzP0Luy3VCKgBzjSS8B6B3k8=
Subject key identifier: 32:6D:A0:7C:44:7F:DA:21:71:25:FB:35:72:60:5B:FE:1E:D4:D3:BE
Certificate issuer: /CN=d89ae0014a1462705eaf7e22642ed9b9987f9131
Certificate serial: 018570797EBAD53EFDE87F3FE4D785A6E06F
Authority key identifier: D8:9A:E0:01:4A:14:62:70:5E:AF:7E:22:64:2E:D9:B9:98:7F:91:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JrgAUoUYnBer34iZC7ZuZh_kTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/10f8e7-fec8-4171-98db-ac2830bed56b/1/Mm2gfER_2iFxJfs1cmBb_h7U074.roa
Signing time: Mon 02 Jan 2023 03:14:48 +0000
ROA not before: Mon 02 Jan 2023 03:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201814
IP address blocks: 91.223.3.0/24 maxlen: 24
193.34.212.0/22 maxlen: 22
195.3.222.0/24 maxlen: 24
195.3.220.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:7e:ba:d5:3e:fd:e8:7f:3f:e4:d7:85:a6:e0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89ae0014a1462705eaf7e22642ed9b9987f9131
Validity
Not Before: Jan 2 03:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=326da07c447fda217125fb3572605bfe1ed4d3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:31:f4:ad:dc:51:be:94:90:49:5a:bf:14:
22:83:54:2f:7e:98:fc:5e:c6:3a:52:ca:d0:bf:6e:
2f:6a:41:2d:70:6f:a9:7c:9e:12:18:82:bf:9f:17:
e0:34:d9:6c:74:07:19:19:24:87:5e:e9:2c:6e:56:
d8:a4:a2:b8:22:1a:d0:e1:bb:f8:ba:f9:91:de:e5:
23:e3:28:d2:4f:74:40:d2:6d:ff:db:35:09:72:e7:
65:2f:b7:39:e4:3d:e4:55:f7:03:fc:0d:27:b7:79:
07:f3:ff:af:cb:bf:19:dc:17:82:ce:29:99:b9:73:
93:7c:44:8d:76:ea:0c:f8:3a:01:c6:6b:51:61:10:
04:7b:5f:37:71:80:85:74:af:0b:b4:c8:67:c6:b1:
e7:31:90:49:b6:f0:e1:99:39:57:96:01:96:b6:d4:
ad:f2:c8:07:4b:18:74:43:fc:2d:5a:f6:38:ba:9e:
14:50:d7:3d:c8:e9:2c:19:fe:68:97:af:df:2e:51:
4a:d3:57:0c:bc:a0:7e:30:8b:f4:3c:fd:43:f0:47:
6d:47:87:05:3f:9a:9a:54:43:1f:48:0e:67:2f:57:
98:8f:87:3d:eb:97:8f:90:17:f9:ea:28:b8:d8:f4:
d6:c3:f9:f5:2c:f0:93:ee:4c:a7:ff:73:ee:64:45:
c6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6D:A0:7C:44:7F:DA:21:71:25:FB:35:72:60:5B:FE:1E:D4:D3:BE
X509v3 Authority Key Identifier:
keyid:D8:9A:E0:01:4A:14:62:70:5E:AF:7E:22:64:2E:D9:B9:98:7F:91:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JrgAUoUYnBer34iZC7ZuZh_kTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/10f8e7-fec8-4171-98db-ac2830bed56b/1/Mm2gfER_2iFxJfs1cmBb_h7U074.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/10f8e7-fec8-4171-98db-ac2830bed56b/1/2JrgAUoUYnBer34iZC7ZuZh_kTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.3.0/24
193.34.212.0/22
195.3.220.0/22
Signature Algorithm: sha256WithRSAEncryption
31:5e:0d:7d:64:77:ed:45:5e:25:80:fb:29:95:7c:df:85:07:
a7:4c:c7:6b:78:fa:6e:0d:7e:41:a1:32:e1:43:6e:b6:d2:bd:
53:88:06:2c:a5:3f:4a:11:5f:9f:f6:7d:82:c3:af:e9:1f:94:
56:7f:f7:ff:71:57:32:e7:03:19:16:55:c8:6f:c0:f9:a6:7d:
94:09:af:e1:c0:2f:3d:b8:e6:e5:32:46:b6:e1:8f:d7:ba:8f:
e3:fe:47:00:f3:ea:f2:33:a7:76:25:ee:c7:a7:36:07:cc:2a:
f0:bd:92:15:06:5c:b5:9c:6d:b3:b2:1e:90:f8:fd:b1:9c:09:
e6:5c:6e:08:61:93:37:fa:07:28:a2:e6:96:d6:43:cc:a2:04:
3e:c3:df:37:4e:2c:46:f4:d7:8f:78:2f:16:47:62:04:d3:62:
25:7c:a9:7d:67:43:2a:bd:32:b5:a0:1e:3a:24:7c:ba:b8:f1:
2e:d6:01:71:7f:4c:85:89:5a:29:1a:b8:2f:df:b7:cf:8d:ab:
fa:84:a5:aa:bc:a1:ee:ec:7b:95:25:44:00:f4:5a:c7:62:31:
64:61:fa:76:f4:5e:cb:3a:ed:8a:b8:4b:68:69:f9:10:18:b7:
80:66:b3:a5:b7:82:65:c4:28:16:13:ec:b7:e7:27:b9:84:42:
48:bf:4c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:44 2024 by rpki-client on console-ams.rpki-client.org