Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/MGMa_SRUrFBeR9BTKCclRIbFkwg.roa
File: MGMa_SRUrFBeR9BTKCclRIbFkwg.roa (raw, json)
Hash identifier: FiCTYM7BrSVtj3pTAN1oS5WJyMqXoVC0jMqjXpNUHQc=
Subject key identifier: 30:63:1A:FD:24:54:AC:50:5E:47:D0:53:28:27:25:44:86:C5:93:08
Certificate issuer: /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Certificate serial: 0185714C15A0888087609398910A133D01FD
Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/MGMa_SRUrFBeR9BTKCclRIbFkwg.roa
Signing time: Mon 02 Jan 2023 07:04:49 +0000
ROA not before: Mon 02 Jan 2023 07:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 91.193.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:15:a0:88:80:87:60:93:98:91:0a:13:3d:01:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Validity
Not Before: Jan 2 07:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30631afd2454ac505e47d0532827254486c59308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6c:c6:24:2f:2d:bc:15:e9:fa:ed:e3:2c:65:
8a:9c:83:b7:d6:60:a4:a6:e1:e4:e3:b8:2d:e5:44:
8a:f7:45:2c:83:c6:2c:06:ab:b0:fe:d8:e0:a6:80:
fe:35:e5:93:68:6a:57:a2:5d:5b:29:cb:65:6c:cb:
b6:a8:3d:d7:fb:b2:04:b1:b6:cd:7d:67:b9:4f:95:
b1:1c:c0:31:ab:39:d8:b2:15:85:c0:77:8f:64:a1:
42:7e:ca:3d:80:13:c1:d2:b5:d8:8d:09:f9:45:db:
46:66:ed:db:be:f0:c5:59:fc:05:59:86:38:0f:b8:
e2:af:f7:c5:c3:84:88:43:55:f8:e0:e7:76:18:46:
ed:ef:77:6e:28:9a:19:ad:3d:1c:66:a5:b1:ab:f9:
3e:66:ac:ff:18:7a:04:a1:8a:f3:24:f0:4e:b1:67:
f5:48:de:11:8c:a4:33:90:47:93:0b:ec:6d:63:c2:
eb:9c:e8:4f:36:e4:e3:11:52:57:7f:b6:ef:29:59:
73:b7:72:f3:8a:5e:db:8f:4b:b9:f8:0c:78:ee:55:
d9:9c:9c:13:be:ec:e2:fa:fe:46:34:4e:a2:0b:ee:
4e:6b:6a:9c:09:bb:ad:9b:1c:40:77:ef:0c:d6:03:
e1:2c:af:4f:9c:17:a3:0a:24:9d:3f:ba:8d:a6:70:
4d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:63:1A:FD:24:54:AC:50:5E:47:D0:53:28:27:25:44:86:C5:93:08
X509v3 Authority Key Identifier:
keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/MGMa_SRUrFBeR9BTKCclRIbFkwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.42.0/24
Signature Algorithm: sha256WithRSAEncryption
66:a8:ad:6f:d9:6b:2d:f8:0a:7e:e1:95:52:65:11:2d:c7:73:
ec:95:bb:ec:be:9b:a0:35:ec:dd:47:ef:12:9c:24:62:a6:a9:
d0:0c:cd:30:5a:49:fb:3e:a0:a1:1c:3e:be:07:e3:f7:c7:fe:
ac:dd:6d:46:2a:42:e0:5a:05:bf:d2:05:0a:29:6d:df:f0:f2:
e6:4c:07:ac:73:cb:c1:b2:2d:ea:62:06:24:7a:8c:e5:bf:1d:
b3:b5:c0:13:6e:7a:cf:fa:47:87:cb:f0:28:e2:bb:a9:14:d1:
f7:ff:de:fc:32:e9:84:16:12:fd:24:31:ad:aa:af:19:76:6c:
34:dc:19:bc:74:96:12:6c:a7:70:e7:1d:be:7a:9d:78:f5:46:
69:59:1b:b2:cd:e4:d7:66:f5:d4:24:f2:39:16:ae:e1:06:34:
45:4b:2b:24:e3:22:ef:b5:8c:54:ef:27:03:4c:c1:ef:82:83:
0b:92:c8:51:10:89:32:e5:da:b5:83:34:ab:2c:3d:09:fb:15:
05:32:0a:e5:9a:e7:3d:9d:b3:02:cf:17:10:26:35:b8:50:1c:
59:52:3e:d9:c3:3c:69:08:a8:49:33:a8:fc:c6:9c:fc:87:0b:
9f:fb:62:33:eb:1f:79:e3:54:df:3e:20:8e:8a:24:ce:81:9a:
cb:25:1e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-fra.rpki-client.org