Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/mJL4JgwLrWuavEwRpbNHaQb7wug.roa
File: mJL4JgwLrWuavEwRpbNHaQb7wug.roa (raw, json)
Hash identifier: FWa4DZZCGtDyrgk9stOU3/Gcs91a/UXiIDZTPfxDDg0=
Subject key identifier: 98:92:F8:26:0C:0B:AD:6B:9A:BC:4C:11:A5:B3:47:69:06:FB:C2:E8
Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b
Certificate serial: 018727FF9F29F44F10BE03BB4C91E11D628B
Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/mJL4JgwLrWuavEwRpbNHaQb7wug.roa
Signing time: Tue 28 Mar 2023 11:34:36 +0000
ROA not before: Tue 28 Mar 2023 11:34:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209828
IP address blocks: 91.241.50.0/24 maxlen: 24
91.241.49.0/24 maxlen: 24
194.5.236.0/24 maxlen: 24
194.5.237.0/24 maxlen: 24
2a0c:8dc6::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 30 Dec 2023 19:09:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:27:ff:9f:29:f4:4f:10:be:03:bb:4c:91:e1:1d:62:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b
Validity
Not Before: Mar 28 11:34:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9892f8260c0bad6b9abc4c11a5b3476906fbc2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:36:26:c6:5d:c2:7c:50:98:ed:1d:f7:37:
1d:86:77:26:0d:ab:d7:60:c8:e9:69:02:b4:97:ea:
e5:48:3c:c1:9a:49:59:d0:b6:92:34:28:10:5e:4a:
f9:98:61:7b:a9:24:34:4f:c4:1e:5e:5f:68:0d:cd:
43:b8:05:c9:65:5a:64:06:f8:d5:98:12:c1:87:86:
84:f8:99:5e:c4:48:01:c5:d6:8d:5b:c7:53:80:84:
74:3d:32:0c:2b:69:65:32:db:b0:95:28:e1:15:c8:
5b:c8:f8:77:0f:ef:90:98:e6:70:db:45:04:2d:ab:
37:32:28:8d:b9:b4:92:28:61:a6:ee:b1:3f:7e:83:
61:e3:dc:fa:10:6b:fd:f9:b0:ce:6f:16:25:e0:33:
e6:73:ef:26:3d:84:71:d6:3d:7c:65:67:fc:c1:da:
14:78:fa:8f:c4:1d:3a:a1:49:6f:68:14:cf:55:2d:
ed:93:3f:94:81:82:24:3d:29:8f:70:6c:bf:e6:cd:
04:38:9f:24:3a:10:93:e1:ac:00:40:0a:48:a1:45:
7c:87:fe:86:3f:6d:06:d4:c8:e5:79:4a:f9:c2:49:
0f:a0:2d:74:8c:e8:16:55:62:7b:c7:bd:0a:28:12:
7a:0f:17:db:e1:66:2e:2e:5b:5a:59:fa:8f:17:1b:
50:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:92:F8:26:0C:0B:AD:6B:9A:BC:4C:11:A5:B3:47:69:06:FB:C2:E8
X509v3 Authority Key Identifier:
keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/mJL4JgwLrWuavEwRpbNHaQb7wug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.49.0-91.241.50.255
194.5.236.0/23
IPv6:
2a0c:8dc6::/32
Signature Algorithm: sha256WithRSAEncryption
1d:90:03:c8:81:b7:45:a7:9d:ab:be:3d:17:b9:c9:68:5b:bc:
3a:09:96:6f:f4:0f:c6:ab:c7:17:f9:92:18:47:c9:2b:ef:92:
71:b7:6f:00:6e:83:70:b2:6b:8a:a8:0e:81:2b:fa:40:14:a8:
05:72:75:c3:83:49:d6:1d:7f:87:17:f2:6f:2c:a8:a8:86:37:
77:a0:26:73:13:12:f4:68:ac:be:8d:4e:fa:b1:c7:42:65:ed:
26:4f:78:ba:47:b2:14:ac:64:b4:ce:81:84:24:bc:71:04:95:
b1:ea:01:72:f7:1c:c7:f2:c8:3b:97:03:50:c4:08:b4:9e:a5:
bf:cc:0f:58:ac:4a:83:b0:8e:39:75:ed:4d:c0:f4:7d:3e:5f:
03:ab:45:d5:54:b2:f9:a6:b3:bd:4a:b7:b7:35:c8:ab:17:56:
73:93:34:1c:21:f6:d4:5c:59:c6:13:f5:6d:53:b5:39:da:c7:
e8:05:65:fa:a1:cb:75:60:24:1c:46:e4:22:ff:48:f1:31:f4:
b5:81:99:41:56:08:09:75:f0:b1:b4:8b:df:29:ed:4b:ba:2e:
7e:c3:8c:8b:49:06:df:03:ac:f5:7c:40:16:72:f9:b8:2b:fc:
5e:f6:1a:51:b6:85:dd:7d:e5:6e:d7:78:5d:7a:ef:17:14:93:
d6:71:a0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:22 2024 by rpki-client on console-fra.rpki-client.org