Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/mAQMaRYkR4wdOlk5HxJGxFJyNkc.roa
File: mAQMaRYkR4wdOlk5HxJGxFJyNkc.roa (raw, json)
Hash identifier: OYGMBuNqQGy9sZE7VtxX6xtWIzOa0UlhN96nB9KdbtU=
Subject key identifier: 98:04:0C:69:16:24:47:8C:1D:3A:59:39:1F:12:46:C4:52:72:36:47
Certificate issuer: /CN=5811ab97aac984b7524effad5fac68eb1e19cdce
Certificate serial: 0185732841BB69E7B2E86F8CF75581A2183A
Authority key identifier: 58:11:AB:97:AA:C9:84:B7:52:4E:FF:AD:5F:AC:68:EB:1E:19:CD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/mAQMaRYkR4wdOlk5HxJGxFJyNkc.roa
Signing time: Mon 02 Jan 2023 15:44:56 +0000
ROA not before: Mon 02 Jan 2023 15:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197611
IP address blocks: 91.224.188.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:28:41:bb:69:e7:b2:e8:6f:8c:f7:55:81:a2:18:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5811ab97aac984b7524effad5fac68eb1e19cdce
Validity
Not Before: Jan 2 15:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98040c691624478c1d3a59391f1246c452723647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:a8:1f:7c:df:42:18:3c:4b:95:f8:59:a7:
32:c0:3b:b6:d5:3a:11:fe:69:3b:49:c8:55:d0:a1:
a7:ae:58:e6:3c:06:35:55:14:7f:89:90:9d:eb:fd:
0f:a2:a0:b3:37:90:af:7a:99:9c:1f:73:01:b7:32:
f2:95:f7:da:2c:6e:8b:fc:f9:3b:f5:a4:8d:cf:a9:
0d:01:a1:1b:d6:e1:52:20:78:1a:30:16:f7:9c:9f:
ba:b2:08:08:1a:ef:14:f2:74:bd:10:97:b6:e5:7c:
46:24:d6:33:9a:1a:ed:96:9f:4c:85:a8:68:fb:54:
c2:1c:42:7a:9a:da:59:e5:07:60:02:dc:e0:30:b5:
ea:bc:09:76:bf:ae:31:c1:46:a8:87:8f:db:f9:8e:
f1:97:62:aa:d8:f8:f8:00:04:26:c2:e8:b4:fc:53:
66:42:f4:7e:e7:ce:e2:7f:eb:d9:50:ec:19:a1:a1:
10:0f:24:76:e7:59:04:ba:4e:ba:f3:13:ab:ff:8d:
6e:12:f0:4d:ab:26:e3:58:fe:dc:f1:7c:d7:86:f2:
b1:76:03:aa:0b:8b:7e:0f:6f:6a:06:7c:22:b0:1d:
53:6b:72:0d:77:a9:b3:71:62:8a:aa:ca:23:8c:0d:
7f:2f:aa:af:38:19:04:19:64:b6:10:f8:18:d5:76:
61:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:04:0C:69:16:24:47:8C:1D:3A:59:39:1F:12:46:C4:52:72:36:47
X509v3 Authority Key Identifier:
keyid:58:11:AB:97:AA:C9:84:B7:52:4E:FF:AD:5F:AC:68:EB:1E:19:CD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/mAQMaRYkR4wdOlk5HxJGxFJyNkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.188.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:bf:d6:8b:01:55:df:d0:78:dc:82:e8:ae:d7:61:25:1e:4e:
71:96:4a:f1:60:e2:c9:72:83:38:c5:c5:10:53:6c:76:d0:51:
a6:fd:43:db:71:51:af:d9:25:dd:a4:09:15:66:c1:b8:5c:36:
7e:85:18:c1:2e:7e:f5:de:f8:c9:e7:62:35:3a:8e:e2:99:39:
58:c8:59:be:1d:26:6f:1b:f4:cd:11:d0:13:ed:27:6a:87:76:
6e:06:6c:c8:98:ba:68:d0:c0:03:e3:82:3d:be:eb:4e:3b:1b:
e0:a0:4d:14:fd:60:c1:a5:f0:3b:c9:27:19:16:4a:cc:3b:82:
ba:71:27:d4:62:e3:36:f4:09:44:fd:72:77:77:4d:5d:86:13:
1e:36:33:27:db:70:dc:87:b6:64:6e:b5:79:35:45:7b:4b:1b:
a5:6e:c2:a7:10:e6:bf:6f:ef:02:df:e1:f8:0f:df:d2:33:5f:
ae:0a:1c:45:dd:ed:27:84:4b:6b:e3:f9:bb:c7:48:98:93:49:
9f:b2:5d:fc:37:08:b5:98:0c:40:9c:89:66:f8:0b:2b:b7:57:
aa:3c:d1:a2:c6:f1:c2:65:13:60:56:79:a8:a6:39:38:fb:52:
de:cc:27:e6:47:cf:7d:44:df:b2:e8:17:4d:43:cb:93:bd:a8:
7e:c9:07:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-fra.rpki-client.org