Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/mekGA6Nj4ML6C32NQ1Y4RxxaX9A.roa
File: mekGA6Nj4ML6C32NQ1Y4RxxaX9A.roa (raw, json)
Hash identifier: 5W7lOVCYJ0xS0eSYWNiMcbggKxAqIIgZLMzOiccpCA4=
Subject key identifier: 99:E9:06:03:A3:63:E0:C2:FA:0B:7D:8D:43:56:38:47:1C:5A:5F:D0
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 0191F6181244E593CDE275A10AFD6F9C1213
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/mekGA6Nj4ML6C32NQ1Y4RxxaX9A.roa
Signing time: Sun 15 Sep 2024 14:30:58 +0000
ROA not before: Sun 15 Sep 2024 14:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 91.216.138.0/24 maxlen: 24
91.229.228.0/24 maxlen: 24
93.180.208.0/22 maxlen: 24
94.139.40.0/21 maxlen: 32
119.13.224.0/20 maxlen: 20
134.199.64.0/19 maxlen: 19
136.227.160.0/19 maxlen: 19
193.37.136.0/24 maxlen: 24
193.105.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Sep 2024 15:14:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f6:18:12:44:e5:93:cd:e2:75:a1:0a:fd:6f:9c:12:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Sep 15 14:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99e90603a363e0c2fa0b7d8d435638471c5a5fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bc:d1:34:3c:43:ad:5d:ea:bf:02:46:f7:ca:
a3:18:f4:3f:16:21:73:89:e0:03:40:47:f7:ac:4b:
fa:6b:f3:d7:65:0f:a5:75:46:2e:87:99:66:e8:f2:
5b:09:e8:3e:c2:a3:e2:aa:53:73:e9:5e:51:ee:66:
5f:c5:c2:d8:01:e1:dd:94:6a:4f:33:50:49:e4:60:
81:c9:af:b0:fb:01:67:31:af:94:8f:d2:dc:a8:0c:
7c:f4:37:7c:11:a9:67:c8:5e:f4:8e:e8:e0:dd:51:
b1:0d:8a:e1:ef:6b:0d:c2:ac:88:88:21:02:2e:cc:
98:d1:73:96:ee:a7:2b:78:17:f2:89:b2:15:2b:a7:
bd:a2:d6:36:8b:21:20:30:e9:e1:de:74:aa:c7:86:
41:66:44:83:49:59:a0:a8:4a:63:bf:bb:04:47:b8:
c3:19:a0:07:73:cc:f2:3f:39:35:c7:5e:5d:a8:5c:
32:f1:22:5b:db:e6:76:09:49:9b:7e:b9:56:4d:2b:
8e:fc:eb:81:39:7e:00:50:b9:af:44:be:d6:8c:b0:
21:6d:5d:ee:42:e2:1c:9d:f1:12:b7:64:1a:f5:84:
ce:12:7a:c8:93:88:5c:0a:65:43:a7:73:12:53:f6:
84:65:37:aa:b0:5b:0b:4e:22:09:18:a2:42:94:17:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E9:06:03:A3:63:E0:C2:FA:0B:7D:8D:43:56:38:47:1C:5A:5F:D0
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/mekGA6Nj4ML6C32NQ1Y4RxxaX9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.138.0/24
91.229.228.0/24
93.180.208.0/22
94.139.40.0/21
119.13.224.0/20
134.199.64.0/19
136.227.160.0/19
193.37.136.0/24
193.105.176.0/24
Signature Algorithm: sha256WithRSAEncryption
91:21:d3:a4:86:2c:ee:57:a4:ea:f6:7b:7e:aa:16:51:d3:38:
7f:21:92:58:91:bf:0a:85:8a:0f:62:7d:01:fe:54:64:e2:a8:
4e:2a:d7:9a:f6:5a:5b:7c:ee:71:b4:8f:8b:09:ea:f6:50:5e:
a4:af:3e:7f:dd:88:07:b1:3a:7f:de:4f:bf:c1:ed:fc:19:c4:
f5:9b:aa:0f:7f:d2:24:93:62:07:a8:52:6f:00:f1:15:38:b6:
da:8a:ab:32:18:8a:20:9c:cb:1e:54:93:a6:68:65:a2:79:06:
af:b5:14:21:67:61:5c:4b:70:d3:48:91:26:80:ba:f2:f3:6f:
f8:a5:4c:5b:6c:5d:81:58:30:a4:88:30:77:df:44:4a:1e:87:
04:6b:e9:fc:c2:ad:80:7a:5b:83:06:9f:6f:90:0f:da:f9:71:
f5:51:eb:bd:fe:d9:f4:d9:79:49:63:7b:55:ec:d0:28:bd:89:
7f:8f:12:ae:a7:1f:94:8f:a6:b3:fd:2c:ce:30:eb:d9:88:02:
75:07:eb:3a:75:3a:64:1f:27:05:65:76:32:b9:4c:f3:cf:cc:
29:2d:e3:29:58:a4:5e:66:0a:a6:df:4d:4b:6b:8c:26:c6:77:
8c:9e:f3:3d:63:d4:70:ea:bf:98:b4:67:32:c6:14:26:42:83:
34:b7:77:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 20:26:04 2024 by rpki-client on console-fra.rpki-client.org