Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/MepN0AavGnK_cI4MGysDlcFEcYY.roa
File: MepN0AavGnK_cI4MGysDlcFEcYY.roa (raw, json)
Hash identifier: R9hyKaies3dMF/ysBGll73BOJbFHPWM9R9evM5jFeKs=
Subject key identifier: 31:EA:4D:D0:06:AF:1A:72:BF:70:8E:0C:1B:2B:03:95:C1:44:71:86
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0187A35752BDCFCFFF440124B5994D05B300
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/MepN0AavGnK_cI4MGysDlcFEcYY.roa
Signing time: Fri 21 Apr 2023 10:23:41 +0000
ROA not before: Fri 21 Apr 2023 10:23:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.225.227.0/24 maxlen: 24
91.225.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Apr 2023 11:35:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a3:57:52:bd:cf:cf:ff:44:01:24:b5:99:4d:05:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Apr 21 10:23:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31ea4dd006af1a72bf708e0c1b2b0395c1447186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:36:4e:b7:13:20:7f:07:d1:b7:d4:8c:90:df:
96:35:b1:17:c2:bc:61:b4:c8:0b:6b:5e:64:b7:c1:
1b:c4:0a:77:48:36:7a:8c:bb:f8:2b:2f:ff:2f:f3:
36:08:4e:2b:3d:12:e7:6f:37:00:e5:18:77:68:a3:
3d:40:47:f9:2b:3b:f3:ef:fb:35:02:10:5c:0e:38:
84:49:be:ed:76:bf:1d:54:d5:1e:9d:47:f8:6b:0c:
0a:9c:d4:48:f4:73:d6:02:d3:33:dd:f1:e3:bf:da:
03:c2:bc:d8:0f:3e:5e:14:53:b7:45:92:c7:2b:4f:
dc:16:69:13:b4:b1:db:e6:fa:6f:0e:c0:6f:44:64:
bf:c8:db:24:5d:48:3a:69:39:f3:52:f5:03:41:06:
1f:d3:47:e0:4a:c0:b5:58:4f:da:5e:d0:54:95:7d:
b8:f2:32:db:62:1b:5a:29:59:c4:44:a5:04:b9:b4:
fa:a8:14:7d:7f:9c:1c:be:20:45:52:5b:e1:e1:37:
c3:4a:31:c0:46:35:e8:b0:60:44:f2:77:a8:5f:21:
29:a8:e3:b7:32:68:48:e7:30:59:7a:06:86:e0:e9:
8a:be:80:d5:28:af:c1:bb:e8:23:55:ee:0a:53:d1:
45:50:e5:bb:8c:f5:68:e6:64:5f:4e:a3:bf:e4:50:
6b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EA:4D:D0:06:AF:1A:72:BF:70:8E:0C:1B:2B:03:95:C1:44:71:86
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/MepN0AavGnK_cI4MGysDlcFEcYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.225.0/24
91.225.227.0/24
Signature Algorithm: sha256WithRSAEncryption
12:bc:63:85:8b:f5:34:c6:dc:ce:40:42:4b:30:12:f7:88:bc:
12:74:12:27:d5:00:69:14:9f:0b:e4:35:7d:85:4c:a7:68:37:
0c:9f:14:ce:39:c8:ae:05:33:16:17:d1:5a:13:2d:77:45:80:
dd:bf:ac:0d:a4:84:9f:97:e9:86:cb:6b:5e:2f:6b:45:e5:15:
e4:c3:34:75:ab:e0:f2:11:f0:d8:1f:30:b1:8b:c0:96:0c:51:
ff:f2:14:08:b3:f5:5d:2f:8c:9c:35:4b:88:10:10:fc:d4:67:
49:91:73:23:47:a3:8f:fd:c9:ac:ec:35:dc:d1:82:02:71:95:
15:b0:62:14:b7:15:96:97:f2:e7:21:ec:9e:12:fd:8b:f2:85:
41:73:51:38:5a:cc:83:f3:42:c5:f2:d6:88:0b:e9:e3:e4:f2:
29:68:96:3a:27:8c:5f:82:60:88:a6:d7:72:14:bc:89:ac:e2:
2e:9b:ba:63:28:f9:54:97:f9:b1:cb:54:b7:03:a8:81:81:66:
d8:71:f7:67:e4:08:ee:0d:b5:5d:8e:e8:96:86:d0:6a:15:fc:
1d:a3:0e:90:4a:fe:88:4c:4f:ae:7b:65:f4:29:e0:c3:61:aa:
04:a9:ed:d1:f8:cf:c0:4e:38:1e:11:44:31:11:b0:04:ef:b0:
37:e6:50:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:06 2024 by rpki-client on console-fra.rpki-client.org