Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/mjpiXWK06njKTIBfzAXtDKdoGa4.roa
File: mjpiXWK06njKTIBfzAXtDKdoGa4.roa (raw, json)
Hash identifier: 2NMHrT3/RDUT8MToaauTUyrIcH7h7KT3cY9Kyia/8I8=
Subject key identifier: 9A:3A:62:5D:62:B4:EA:78:CA:4C:80:5F:CC:05:ED:0C:A7:68:19:AE
Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Certificate serial: 01919448C4A57207D3019BFD05F2E7E8BE7B
Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/mjpiXWK06njKTIBfzAXtDKdoGa4.roa
Signing time: Tue 27 Aug 2024 14:41:22 +0000
ROA not before: Tue 27 Aug 2024 14:41:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60707
IP address blocks: 91.151.83.0/24 maxlen: 24
91.151.84.0/24 maxlen: 24
213.142.135.0/24 maxlen: 24
2a01:ed80::/29 maxlen: 48
Validation: Failed, certificate revoked on Fri 30 Aug 2024 12:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:94:48:c4:a5:72:07:d3:01:9b:fd:05:f2:e7:e8:be:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Validity
Not Before: Aug 27 14:41:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a3a625d62b4ea78ca4c805fcc05ed0ca76819ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:8d:d7:e8:72:06:1b:de:7c:da:27:3a:80:
5a:73:4a:7f:4c:a8:d4:da:15:a2:c8:30:a1:a6:65:
2b:69:3a:84:5f:8c:7f:6c:fa:fd:fc:27:d6:88:f6:
64:37:f1:e3:26:98:7f:f5:0c:30:1f:f4:25:22:12:
d1:fa:21:a1:8f:a3:d7:80:88:52:a5:d2:76:64:4c:
5b:a9:cd:b2:7c:ae:3f:5d:1c:2d:35:7a:e0:b3:bc:
41:34:ee:78:81:22:a3:ed:42:07:bb:90:48:8d:e6:
e6:c9:8f:70:ec:c8:ea:d6:e9:8e:92:30:46:be:3e:
87:ce:a3:0c:9d:43:43:d7:2c:62:8f:63:8c:a6:45:
28:22:55:37:15:6e:6b:36:47:75:eb:96:cc:3d:3e:
28:6b:d1:eb:11:d7:83:89:55:d6:9c:aa:48:2b:75:
58:36:63:55:9e:85:15:7d:9b:31:c6:1c:2c:15:18:
fe:1f:fd:e7:7a:6e:80:5c:a8:47:c9:bb:c6:aa:cc:
04:41:80:ca:2b:70:a0:ce:97:a9:3f:cf:a1:47:a2:
93:e0:17:77:dc:41:6d:63:ad:21:d5:59:f9:60:19:
88:73:f0:43:f5:55:6a:9b:f6:bd:61:5d:16:ae:19:
20:c7:b8:6b:39:56:3f:68:00:29:e9:0d:2c:d3:b4:
d7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3A:62:5D:62:B4:EA:78:CA:4C:80:5F:CC:05:ED:0C:A7:68:19:AE
X509v3 Authority Key Identifier:
keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/mjpiXWK06njKTIBfzAXtDKdoGa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.83.0-91.151.84.255
213.142.135.0/24
IPv6:
2a01:ed80::/29
Signature Algorithm: sha256WithRSAEncryption
57:bc:10:e0:47:d9:fe:07:2e:2a:5a:f5:af:d1:d0:d1:2e:d5:
b2:67:fe:08:93:72:00:f8:7d:f3:c2:c4:93:70:f2:a2:4a:8b:
d1:16:91:c0:49:c8:3f:ab:b9:06:3c:40:25:ec:23:fd:00:d9:
b6:ee:91:7d:74:27:34:33:f6:44:4e:da:27:48:a4:4f:55:c6:
54:8e:fe:50:22:ba:f0:68:d3:b7:ec:6c:06:e6:41:fc:60:93:
84:0c:40:04:cf:92:46:b3:d3:e4:e2:5e:d1:e0:93:c3:89:52:
dc:70:bb:87:41:c7:90:0f:a2:f9:48:50:23:ba:72:6c:2b:9f:
57:d2:e0:e3:8b:59:75:13:bf:cd:0f:3c:d5:25:c6:68:06:ac:
f2:b5:4b:bd:8f:ac:8f:ae:e4:81:14:40:a6:db:1f:be:6c:1d:
52:5b:58:f2:24:20:47:c0:f4:03:56:3d:1d:c8:40:18:f8:ed:
27:cb:ab:b8:7b:00:b0:12:4d:6e:3b:86:51:45:fa:50:78:ef:
1a:9d:a5:d9:a4:e4:c8:fd:27:2e:40:d3:d6:e3:bf:44:5e:9e:
03:61:54:f5:f1:14:40:d9:1b:7e:70:79:38:69:cb:21:d8:19:
70:cd:42:6b:b3:e4:82:89:12:f5:2a:59:ff:36:43:dc:5d:3f:
d8:36:4c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 15:58:44 2024 by rpki-client on console-fra.rpki-client.org