Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/MFRP1ErwztDucWzBN94PpyE4KvY.roa
File: MFRP1ErwztDucWzBN94PpyE4KvY.roa (raw, json)
Hash identifier: YvvePOrH8+ekmzMPERuiMWkaBV1Y1VeOzc/uVGiHtlw=
Subject key identifier: 30:54:4F:D4:4A:F0:CE:D0:EE:71:6C:C1:37:DE:0F:A7:21:38:2A:F6
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 01910CAF5C3C46485AB431AE2220EDDD3A2F
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/MFRP1ErwztDucWzBN94PpyE4KvY.roa
Signing time: Thu 01 Aug 2024 06:45:04 +0000
ROA not before: Thu 01 Aug 2024 06:45:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 94.228.164.0/24 maxlen: 24
94.228.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 10:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0c:af:5c:3c:46:48:5a:b4:31:ae:22:20:ed:dd:3a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Aug 1 06:45:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30544fd44af0ced0ee716cc137de0fa721382af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:38:f8:5e:3b:c9:cd:a7:f2:fb:2b:06:9e:55:
88:50:03:28:14:20:ba:3c:5b:88:44:59:ef:26:be:
3b:3a:37:46:36:ac:3d:ae:46:9e:61:67:1f:b2:1a:
a5:c5:52:fe:cf:c5:bc:32:51:24:98:94:eb:f8:52:
73:18:32:85:3d:23:e0:da:93:0a:06:da:c1:b0:87:
b4:78:bb:e3:cf:83:51:bd:55:35:c8:a9:cc:72:2b:
f9:9b:c4:df:ae:0c:2a:7a:a6:f9:93:4f:ae:fd:27:
96:23:a5:9d:a4:02:2c:ee:69:38:13:f7:c8:e5:1c:
8f:2d:60:94:0b:59:36:20:cb:5c:b6:38:ba:6f:8a:
b4:f1:f7:d6:71:d3:64:c8:d2:b7:82:f3:d4:6a:e3:
23:dd:a1:83:11:5d:6d:1c:6d:95:1e:d4:4e:be:c3:
3e:a1:f8:a9:13:d6:42:c3:c1:e6:ea:71:b1:18:4c:
a5:93:f9:44:c5:59:0f:71:93:ae:f5:4c:84:a6:72:
bf:06:49:18:6c:e4:d1:7c:4b:0c:4d:83:87:45:12:
31:36:72:de:f4:27:70:35:12:2d:0a:d6:27:e8:12:
84:9b:43:9c:de:22:ad:4c:de:b9:4f:e8:11:84:7b:
da:a2:a2:59:3b:76:80:a4:ba:8a:ec:93:18:0d:4b:
64:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:54:4F:D4:4A:F0:CE:D0:EE:71:6C:C1:37:DE:0F:A7:21:38:2A:F6
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/MFRP1ErwztDucWzBN94PpyE4KvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.164.0/23
Signature Algorithm: sha256WithRSAEncryption
71:88:45:97:88:78:e2:5b:fc:f6:b4:8c:63:52:25:89:73:12:
77:30:51:77:1f:e0:e0:18:41:a7:0a:c1:d5:c5:88:68:8d:67:
63:55:b8:81:63:16:73:6c:5e:31:ec:34:02:a6:e9:f3:31:b0:
61:cc:02:26:42:60:23:36:5b:23:e2:f3:f3:c7:11:d5:79:84:
cf:9d:ff:f7:f4:44:17:65:6a:3f:84:a7:58:ec:f0:d0:e3:56:
85:cc:07:e5:4a:e8:17:f5:98:5d:1d:35:3c:5c:9d:63:a7:73:
26:5e:2f:5b:02:c9:bb:6d:20:d3:c1:c4:39:1d:cc:79:1d:c5:
c6:01:6a:aa:82:cb:9f:c6:88:00:31:42:e7:c0:ec:5a:0a:86:
35:7c:c9:e4:b3:08:3d:88:0d:5f:25:22:5e:72:3d:4e:b0:fd:
fb:ae:15:55:5f:83:86:9f:1f:9e:8c:0e:f9:66:5c:a0:33:d7:
91:79:07:ec:b8:d5:6e:84:5e:86:8e:d1:e9:8f:a4:bb:41:b8:
d5:12:20:21:65:9e:35:f6:e4:f5:65:76:de:d1:e9:31:e2:cc:
8b:e9:c6:86:79:66:99:dd:16:e2:da:30:5e:f5:66:8d:3d:85:
25:b7:6e:b1:80:74:93:8d:1c:57:cb:38:98:a1:3d:6c:c4:77:
d4:87:c9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 12:26:51 2024 by rpki-client on console-fra.rpki-client.org