Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MeBPoAkBt2mQq6-jbwiyKUxMosE.roa
File: MeBPoAkBt2mQq6-jbwiyKUxMosE.roa (raw, json)
Hash identifier: GBGrRI31dOocE/nxSD3hMWGBRVQe9yTVzV0mXtOXzRs=
Subject key identifier: 31:E0:4F:A0:09:01:B7:69:90:AB:AF:A3:6F:08:B2:29:4C:4C:A2:C1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018D3AEB8C8201905EDA84D1A4D41571963B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MeBPoAkBt2mQq6-jbwiyKUxMosE.roa
Signing time: Wed 24 Jan 2024 10:02:11 +0000
ROA not before: Wed 24 Jan 2024 10:02:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61112
IP address blocks: 89.213.164.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Mar 2024 14:09:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3a:eb:8c:82:01:90:5e:da:84:d1:a4:d4:15:71:96:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 24 10:02:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31e04fa00901b76990abafa36f08b2294c4ca2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:df:44:8d:82:76:9c:d7:4d:78:e1:c2:b0:78:
3c:da:3c:54:3b:ca:85:0b:24:8b:53:b9:54:71:8b:
38:9f:04:d1:be:92:92:32:bf:43:47:94:e2:11:13:
82:f7:10:de:a4:97:8c:81:1f:2c:f8:65:ac:77:96:
20:cd:6a:9e:a5:23:c6:24:03:1a:25:8f:77:f8:12:
ef:60:52:90:75:c1:95:ff:f6:41:0e:1f:b6:f7:71:
e2:ba:41:f4:ce:cd:86:1b:f7:15:43:f9:94:37:c9:
b8:7c:6a:ce:60:a8:a3:57:0c:b6:63:19:ef:f5:47:
03:eb:a4:71:b2:36:3f:9b:2b:bb:42:c4:25:3b:89:
33:be:ff:ab:cc:62:79:32:7b:b1:ca:4f:c8:b9:28:
b0:07:63:a4:90:01:ed:ef:39:97:77:ed:e6:ba:2b:
90:f4:f5:43:43:e5:2a:de:06:2f:cc:ca:45:b1:a9:
e2:89:b1:25:04:6e:04:ad:3f:8a:91:af:82:60:53:
8b:03:32:d8:e5:c8:f3:43:2a:33:ff:16:a6:84:cb:
37:17:45:ef:75:82:29:11:dd:18:af:db:36:56:79:
49:65:83:f4:db:b0:42:1e:6f:3e:cd:c6:82:2a:cf:
cd:53:47:1f:86:a3:89:ab:12:ca:15:15:7e:24:59:
fc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E0:4F:A0:09:01:B7:69:90:AB:AF:A3:6F:08:B2:29:4C:4C:A2:C1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MeBPoAkBt2mQq6-jbwiyKUxMosE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.164.0/24
89.213.184.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:9f:49:9c:e9:f7:8c:dc:0b:86:9e:9d:61:99:8c:23:8c:f1:
99:14:6c:6d:9a:48:70:82:7d:3e:37:44:e0:c7:7b:39:87:f7:
db:de:5a:da:54:4b:78:e8:f0:01:5b:b4:b9:a0:ee:d4:0b:0d:
5c:e4:b6:f3:bc:50:93:a1:36:f7:0a:2d:7e:17:ed:15:38:2a:
3c:77:12:cc:e7:c3:ff:7e:aa:70:ff:c7:ee:71:59:08:23:ee:
fe:8b:4c:76:d4:e7:1e:8c:0b:9b:f8:b9:e6:99:d6:93:bb:f6:
0b:d9:1c:ab:67:a3:bd:70:3a:6d:f2:ae:ad:2b:8e:10:d9:b2:
10:b1:33:70:4f:94:1d:30:b1:24:93:83:01:eb:e2:26:c1:19:
62:22:b1:8d:7f:7a:b6:d9:8c:54:c9:f3:7a:34:3d:bf:28:42:
9b:67:62:6f:83:e1:d8:64:e1:c6:2c:c7:f5:56:ff:ae:97:84:
02:92:cd:54:3f:36:d6:73:c3:67:c4:c1:79:01:a8:5d:7f:ea:
e9:b3:26:58:24:e4:25:8a:d6:20:97:f7:98:78:50:b5:e4:3f:
87:0d:25:47:9e:06:06:eb:15:f1:58:f3:4d:cf:be:f6:9d:a0:
a0:3d:6e:64:90:8e:28:89:3d:f9:2f:ab:2c:0a:47:47:dc:0f:
7f:f6:3e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:22 2024 by rpki-client on console-ams.rpki-client.org