Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/MNoAt3lDdvyGkuhbUGnCVm60_E4.roa
File: MNoAt3lDdvyGkuhbUGnCVm60_E4.roa (raw, json)
Hash identifier: q52r1qZEUT4xmjqiRqeA1MU0xguxc4a4xxELYW6SSNM=
Subject key identifier: 30:DA:00:B7:79:43:76:FC:86:92:E8:5B:50:69:C2:56:6E:B4:FC:4E
Certificate issuer: /CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Certificate serial: 018CC87002AD01CD18CD7B270EF0FC080335
Authority key identifier: F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/MNoAt3lDdvyGkuhbUGnCVm60_E4.roa
Signing time: Tue 02 Jan 2024 04:30:32 +0000
ROA not before: Tue 02 Jan 2024 04:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43807
IP address blocks: 91.198.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:02:ad:01:cd:18:cd:7b:27:0e:f0:fc:08:03:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Validity
Not Before: Jan 2 04:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30da00b7794376fc8692e85b5069c2566eb4fc4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a6:2a:b9:c5:f7:e2:a0:2a:95:ae:3a:b1:78:
7d:38:4f:f8:33:e8:99:29:71:b7:73:e6:58:ae:a2:
6a:26:92:66:a5:05:01:dd:1b:6a:2c:da:ab:a4:b0:
fc:c4:98:d2:33:b4:7b:6b:5a:f6:5e:02:73:ab:c5:
8e:88:c5:bf:75:73:df:6a:ed:7a:a2:19:e2:7f:df:
9d:19:b7:98:24:9e:ae:c3:66:c9:15:84:8a:01:69:
9d:f7:a7:cd:ff:43:22:9f:03:82:05:73:a7:aa:c8:
1a:36:02:f5:59:1e:e9:56:0c:7f:c7:dc:ea:8b:86:
2d:8b:81:38:cc:d7:4f:78:dc:8d:8e:f0:68:51:2a:
c7:72:dd:bf:2e:6e:da:95:4c:ae:f8:12:aa:7a:6f:
e7:00:0e:d0:33:3c:52:4e:4f:9c:19:1f:ed:a1:dd:
9b:72:d7:30:bd:d4:11:ac:ba:76:00:c6:2d:89:bb:
c0:2f:d8:7a:6b:24:56:4c:c8:ac:4f:6a:7e:e8:27:
f3:d7:e4:58:67:da:ed:dd:98:3f:23:99:81:d9:07:
4c:f2:df:16:eb:9a:4a:c5:a3:5e:eb:e4:9d:57:26:
a2:b2:c6:19:e0:6b:82:f0:a6:dd:5f:0b:80:bc:99:
60:66:52:a7:9b:fa:b1:66:0a:79:2c:76:34:a4:6e:
34:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DA:00:B7:79:43:76:FC:86:92:E8:5B:50:69:C2:56:6E:B4:FC:4E
X509v3 Authority Key Identifier:
keyid:F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/MNoAt3lDdvyGkuhbUGnCVm60_E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.160.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:2d:04:6b:d1:a4:b0:f6:62:9b:93:72:cf:93:77:fa:43:3e:
3e:9b:83:e8:58:52:49:56:c4:17:ec:15:c7:27:c8:61:e7:f8:
ac:14:6b:30:a6:34:1a:96:06:3c:c6:4b:6b:16:40:43:b8:05:
b8:ec:82:14:f7:f9:e4:85:77:df:c5:a3:16:7b:1b:dd:f6:78:
06:7c:c7:f5:3f:c4:1d:05:22:43:7d:27:b8:f1:e1:d1:8c:4b:
8b:4f:86:e5:93:14:c9:fb:96:c5:93:b3:75:1d:13:2f:cc:74:
d0:d9:5a:66:f7:f3:9b:51:0f:bc:eb:1c:43:4b:3b:e9:0c:7d:
02:b2:bb:6d:4c:34:68:85:35:a9:c1:32:0a:05:92:72:f0:8d:
0e:7b:db:e2:5d:ea:b1:c9:91:4c:90:95:da:7b:5f:70:fc:a0:
4b:e4:17:cb:b8:10:0d:e1:e8:b9:ad:76:cb:e2:25:4e:4c:6a:
5b:52:1f:8b:02:aa:cf:25:db:a6:32:61:fe:01:1a:b3:98:2b:
a6:fb:80:47:3e:2e:99:ed:68:61:9a:dc:87:f7:2c:3b:6c:70:
16:96:57:89:c3:08:c5:ef:46:35:aa:33:e1:87:6a:29:ca:ba:
8f:db:06:bc:30:fb:15:74:a5:9c:c9:6f:b9:b5:7f:21:04:52:
d4:bb:39:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:40 2025 by rpki-client