Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/MK65PA3i_SuuztMSEwMjQD-8ZVg.roa
File: MK65PA3i_SuuztMSEwMjQD-8ZVg.roa (raw, json)
Hash identifier: ZgZ/DjhDKJ7W9pGHFPzldwx6K5tGmz0llTdO/o2uYkI=
Subject key identifier: 30:AE:B9:3C:0D:E2:FD:2B:AE:CE:D3:12:13:03:23:40:3F:BC:65:58
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 018612ABBC37BE56097DEB0C67BF4B9AE0E5
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/MK65PA3i_SuuztMSEwMjQD-8ZVg.roa
Signing time: Thu 02 Feb 2023 15:08:10 +0000
ROA not before: Thu 02 Feb 2023 15:08:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 86.62.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Jun 2023 14:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:12:ab:bc:37:be:56:09:7d:eb:0c:67:bf:4b:9a:e0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Feb 2 15:08:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30aeb93c0de2fd2baeced312130323403fbc6558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:74:bb:df:ab:ba:cd:f1:d7:2c:fe:15:33:
29:07:64:32:76:23:4d:7a:ff:42:10:fe:9b:f2:a1:
ce:45:43:6d:83:b1:39:89:4c:85:75:3d:d5:f0:ef:
4b:80:3f:1d:22:c7:77:aa:d3:5c:5c:e9:09:e0:38:
1d:a6:73:89:c0:98:83:08:25:21:89:64:61:ec:e5:
f0:91:ef:18:34:26:63:5a:ee:ca:81:77:1c:7f:37:
9c:ae:61:46:a8:ee:3a:4f:fd:e6:3a:0b:94:e6:b0:
ae:5c:32:73:ef:5b:cb:88:a1:85:64:da:88:80:fe:
a8:cf:a7:2c:11:99:ef:81:eb:a4:2b:20:f9:c6:81:
1a:05:4f:cc:67:36:21:08:26:4a:3e:e0:b2:22:20:
c3:84:4d:21:49:7d:b3:20:a6:e6:ad:f4:d2:1b:59:
ed:b0:fd:b2:be:76:e8:12:8a:85:f5:68:a2:5c:d0:
df:a8:b3:62:21:9e:9c:e1:57:38:7f:5b:a9:29:03:
24:bb:db:8a:41:b4:8d:01:20:39:da:9f:e6:c3:4b:
70:5d:b1:28:55:e0:63:62:c4:0a:22:48:15:bb:e9:
72:41:51:4b:50:05:e1:df:2b:4a:4d:af:24:a3:fe:
61:1b:06:15:2a:8d:ba:c0:26:bd:6c:51:90:6b:6e:
98:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AE:B9:3C:0D:E2:FD:2B:AE:CE:D3:12:13:03:23:40:3F:BC:65:58
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/MK65PA3i_SuuztMSEwMjQD-8ZVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.31.0/24
Signature Algorithm: sha256WithRSAEncryption
43:81:c7:85:0a:1f:55:d0:31:a9:7d:23:b8:aa:89:54:2d:59:
e4:1e:93:47:29:7c:41:ef:7f:d2:3f:b4:17:a5:67:99:bb:08:
bf:81:b0:4d:4b:f5:37:1c:95:ab:a2:39:37:cb:e9:3d:ba:63:
9f:76:d9:03:b0:33:5c:12:e7:65:c4:92:45:be:2a:68:3a:bc:
f8:1d:48:a2:1d:95:b5:2c:8a:b1:74:5f:94:77:60:51:8d:f8:
84:aa:d6:d0:2a:81:ee:04:f3:5c:e5:e6:de:03:cc:40:34:ed:
01:51:4c:70:7f:6c:e6:54:cf:66:42:f1:fd:e9:d8:66:62:ea:
68:df:09:74:79:5d:94:ef:92:78:f1:be:8b:95:aa:20:c1:2b:
cf:b4:4d:e1:f3:d2:4f:20:66:8e:80:11:2c:cc:9b:73:d2:bd:
ea:19:1d:72:6f:69:9b:02:ae:92:3f:da:c9:7d:63:58:ec:a5:
4b:74:b8:e1:e6:3d:cb:d1:64:48:df:67:01:80:15:28:62:71:
60:db:a3:66:30:b9:79:c0:fc:12:c5:fd:c1:f7:d5:60:6a:d5:
4e:e5:7b:f1:19:a9:72:7c:08:7c:2a:68:ad:87:1b:d3:6f:94:
38:f8:c6:67:05:a2:a7:1f:55:0f:05:a7:19:63:f8:42:09:97:
d1:df:c0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:12 2024 by rpki-client on console-fra.rpki-client.org