Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/MJT4zQ_4NfOVuINz16COyIWllgQ.roa
File: MJT4zQ_4NfOVuINz16COyIWllgQ.roa (raw, json)
Hash identifier: ZfZPSwu9OeQ233nNSJCJc49oj4jfHrpNN+n5LC2ebNg=
Subject key identifier: 30:94:F8:CD:0F:F8:35:F3:95:B8:83:73:D7:A0:8E:C8:85:A5:96:04
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0185D8CC2CE44475A2B9D750B95B55FDB740
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/MJT4zQ_4NfOVuINz16COyIWllgQ.roa
Signing time: Sun 22 Jan 2023 09:25:37 +0000
ROA not before: Sun 22 Jan 2023 09:25:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 91.225.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Feb 2023 05:55:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d8:cc:2c:e4:44:75:a2:b9:d7:50:b9:5b:55:fd:b7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 22 09:25:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3094f8cd0ff835f395b88373d7a08ec885a59604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2b:c3:d6:d1:69:4c:fb:47:e3:1e:c4:f7:8c:
0d:b1:af:66:b7:04:5e:2e:78:4b:6a:03:a2:fb:cc:
d3:31:3e:3a:34:d0:94:82:d2:8c:e0:73:b9:ca:6a:
dc:32:cb:57:07:47:38:18:cf:d9:bb:2a:7d:fc:f2:
a4:02:b8:a6:43:3c:06:19:93:b9:e3:74:14:c6:65:
6b:11:da:dc:04:f5:95:04:d2:02:e5:5a:90:1e:8e:
db:af:c8:67:56:fe:28:1b:74:39:fd:03:e3:dc:f8:
11:22:ed:c3:01:75:c7:48:e9:6c:2e:86:9e:da:5b:
88:7d:7a:c3:b5:9e:d8:d7:94:79:30:c8:cd:d9:4e:
75:50:d7:6d:51:f0:7f:e4:0d:db:12:0b:2f:ed:99:
77:22:79:f6:67:64:5d:13:53:5c:55:94:9e:fe:90:
5b:6e:6e:be:1c:4d:3e:2f:54:9f:4f:ef:fa:e8:6c:
3c:3b:ea:91:ab:84:d5:16:e4:9e:94:53:5e:c7:74:
b9:fb:89:08:2f:de:70:76:16:06:cd:4e:c3:71:c6:
38:23:a2:62:52:97:4e:d1:93:48:09:7c:3d:e8:b6:
08:6a:d8:be:f4:70:e4:54:ed:fb:af:93:06:5b:0d:
42:11:03:fb:0e:dd:41:b6:2b:59:5f:4a:25:e3:77:
41:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:94:F8:CD:0F:F8:35:F3:95:B8:83:73:D7:A0:8E:C8:85:A5:96:04
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/MJT4zQ_4NfOVuINz16COyIWllgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.227.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ee:2e:84:ee:fc:8d:79:33:55:4c:8e:eb:e8:c4:76:90:5e:
b9:b3:0c:75:7d:bf:98:ed:21:17:4e:a5:4c:24:f5:44:5d:97:
17:2b:2a:04:5c:93:cc:0f:4d:ee:0b:b0:b1:34:2b:71:ac:74:
4d:a8:c6:65:c3:be:5d:80:88:89:5b:59:28:59:62:c1:6d:fa:
cb:17:27:e4:be:03:91:f2:96:e6:9d:34:c1:dc:3a:6f:01:9d:
82:7e:b0:27:c9:87:0e:95:7a:15:46:7c:ae:aa:87:18:79:47:
4d:d8:9c:5f:75:9c:77:d5:70:79:bd:61:4d:09:ee:ee:1a:0f:
0e:31:5c:85:5d:7c:7a:62:97:d8:58:04:24:53:77:0b:12:2f:
23:d6:7a:7e:91:bd:5d:62:de:2a:e7:2a:ee:d2:bd:a0:1c:17:
53:48:d7:e6:6f:a6:bc:26:7b:66:ea:ce:c4:77:8a:4a:cf:1c:
51:ea:33:f5:40:0a:a6:36:bb:c8:b8:bf:69:b6:98:09:7f:f3:
d0:0b:0f:5c:96:c4:30:f3:26:4e:18:af:f6:9f:25:f5:04:f8:
b9:35:5f:1f:14:b3:cc:73:8b:62:60:1b:b4:c2:22:17:83:11:
43:8b:3b:39:82:10:78:88:2c:17:d6:b5:e2:36:b6:e1:3e:7f:
0c:53:f3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:49 2024 by rpki-client on console-ams.rpki-client.org