Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/MDRxicKEqvZ1UnLC1cDJCa5w8cI.roa
File: MDRxicKEqvZ1UnLC1cDJCa5w8cI.roa (raw, json)
Hash identifier: wmVBi2lS4dyfR9fMtb12b+OMsJ9x9vstEu1YRn7Ylbc=
Subject key identifier: 30:34:71:89:C2:84:AA:F6:75:52:72:C2:D5:C0:C9:09:AE:70:F1:C2
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 019241930BF9010005AB8C3867A66CA6EEFC
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/MDRxicKEqvZ1UnLC1cDJCa5w8cI.roa
Signing time: Mon 30 Sep 2024 06:16:48 +0000
ROA not before: Mon 30 Sep 2024 06:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.102.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 09:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:41:93:0b:f9:01:00:05:ab:8c:38:67:a6:6c:a6:ee:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Sep 30 06:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30347189c284aaf6755272c2d5c0c909ae70f1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:4a:d8:e3:8a:2a:43:e3:db:4e:12:25:72:
f5:e8:9a:14:d5:e6:25:b5:87:c9:6c:70:50:da:6f:
33:43:71:75:e8:b0:ee:f4:10:4b:61:52:66:61:f6:
b0:1b:c9:93:27:6a:94:be:50:28:b0:a9:8e:68:fd:
ae:5f:ff:44:c0:b5:84:f6:d2:8f:e5:8a:f1:76:cd:
3f:7d:41:b9:eb:a0:01:89:a6:9c:43:c5:66:07:56:
a4:9e:02:1e:8f:b6:13:b1:dc:80:f6:78:cf:f3:9b:
1c:d5:7c:61:f0:7c:fa:9f:4d:24:9d:78:bf:bc:8c:
1b:bf:ee:c8:6f:4b:84:7c:2c:a8:ee:bc:2e:d9:e2:
93:5a:2b:89:f4:03:0d:a2:ea:86:40:20:4e:f5:f3:
b1:2b:a1:86:84:2b:e1:37:f2:93:4d:02:1e:b0:86:
00:24:19:77:14:c7:c1:62:8e:8c:ad:ae:e8:5a:72:
12:44:4e:80:43:32:0b:53:c2:fd:76:6a:e0:e1:3d:
9f:6f:b9:d9:9f:64:7b:c9:f3:63:fc:ca:7b:de:6a:
09:08:33:cc:1f:d0:54:cc:87:2d:10:60:7e:c9:a1:
ac:f3:3a:be:50:4b:97:02:44:93:31:31:54:ca:3b:
9e:fb:76:61:ca:37:ed:c0:4e:d3:b5:d1:97:dc:3d:
a3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:34:71:89:C2:84:AA:F6:75:52:72:C2:D5:C0:C9:09:AE:70:F1:C2
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/MDRxicKEqvZ1UnLC1cDJCa5w8cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.167.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c6:b6:78:94:fb:da:0a:ad:08:9e:05:e6:5a:f8:79:7b:6c:
90:db:5a:64:f8:00:cd:e4:6c:f7:0c:ba:c8:0d:41:44:7c:02:
d0:90:22:f5:24:d7:8d:42:77:6a:d9:f2:39:17:8d:36:9d:e4:
31:64:ea:d1:bd:9d:47:42:15:f3:0c:c0:ae:9a:d1:d5:3b:de:
db:fb:0d:e5:23:2e:35:41:c1:2d:e1:b5:6e:62:e1:de:00:47:
74:5a:84:77:c8:84:9b:d0:6c:b0:45:fc:54:f7:c8:f5:19:63:
da:fc:a1:69:0e:f8:f0:e6:c6:79:93:fe:c5:1b:a5:f2:68:ec:
85:36:3d:9c:8e:1d:8b:47:5a:43:bd:8c:7c:20:25:af:a1:3f:
de:42:0e:c5:61:d1:2b:e5:7a:19:f0:dd:a7:5c:63:3d:23:77:
bb:7c:a6:3c:8f:73:3e:5d:a3:5a:a7:ea:12:9b:16:f5:48:9a:
cc:ed:c9:f7:fa:a4:6e:22:10:df:21:27:01:bd:dd:4b:92:7c:
1b:dd:3f:48:38:29:f6:b1:31:98:7e:dd:8c:9f:7a:8a:b4:fb:
b9:a2:07:0c:4c:f7:72:56:8e:2c:d9:b6:50:9e:9f:7f:1f:63:
10:31:3b:94:eb:62:22:99:52:3b:28:c4:21:56:80:b9:c8:3d:
3d:aa:f4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 12:20:05 2024 by rpki-client on console-ams.rpki-client.org