Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/MKkllxkWohAgt0tPmn3p-nzmGzY.roa
File: MKkllxkWohAgt0tPmn3p-nzmGzY.roa (raw, json)
Hash identifier: XLT6GiBc3giWLu7YO6CmS6Q2ZPNFYsRny/ipFZuP0b8=
Subject key identifier: 30:A9:25:97:19:16:A2:10:20:B7:4B:4F:9A:7D:E9:FA:7C:E6:1B:36
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 01856DC1C0F20A0A0BB91AA54A2EF8A31A98
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/MKkllxkWohAgt0tPmn3p-nzmGzY.roa
Signing time: Sun 01 Jan 2023 14:34:52 +0000
ROA not before: Sun 01 Jan 2023 14:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 91.149.231.0/24 maxlen: 24
91.149.230.0/24 maxlen: 24
91.149.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:c0:f2:0a:0a:0b:b9:1a:a5:4a:2e:f8:a3:1a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Jan 1 14:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30a925971916a21020b74b4f9a7de9fa7ce61b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:4d:f4:00:2c:30:5b:d2:a9:b5:34:f9:81:
61:e6:4f:b0:ee:f5:7d:da:19:20:f0:66:2a:10:7e:
1e:e6:96:9c:2a:a8:a1:1b:68:b1:35:1f:28:ff:38:
20:44:3c:01:3c:07:d7:9a:dc:b1:d2:5c:be:7e:5a:
49:fd:a4:08:b4:08:32:25:68:38:bf:b1:df:50:8e:
09:b3:c0:ed:ac:c0:26:49:a8:4c:53:22:cb:01:ed:
a3:07:f0:d3:05:8d:b9:3a:54:52:c3:1b:8e:da:69:
bf:01:5d:c3:36:24:f6:8e:2b:6c:93:a9:16:fa:07:
db:79:0b:9b:aa:46:04:e8:22:77:76:1d:af:f4:d0:
c4:85:58:34:22:e0:19:24:6c:8f:72:c4:4f:7f:c7:
f9:37:94:e5:4b:e5:e6:91:1b:ab:ad:f8:ce:51:61:
21:dd:94:1c:8d:ee:b4:a0:86:6d:3e:d8:89:57:1e:
d1:a0:d4:3a:42:98:22:8e:b7:11:0d:5e:79:19:16:
10:7f:6c:98:3d:2e:d8:19:cf:f0:ec:5c:e5:5b:81:
2a:4a:43:5b:82:6e:43:42:cc:e9:8b:28:a1:6c:c0:
c8:df:78:e0:f6:78:0d:cf:fc:00:63:bc:4b:9c:0c:
c5:b9:4d:0b:a5:ae:19:f6:4a:5b:9d:dc:c0:75:9d:
e0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A9:25:97:19:16:A2:10:20:B7:4B:4F:9A:7D:E9:FA:7C:E6:1B:36
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/MKkllxkWohAgt0tPmn3p-nzmGzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.229.0-91.149.231.255
Signature Algorithm: sha256WithRSAEncryption
26:97:ab:bd:22:fd:dd:d7:2c:4c:b6:dd:1a:d3:e2:4c:7c:d9:
02:17:24:ea:aa:4b:66:46:d2:3f:17:86:16:9a:a8:e0:b3:8f:
94:78:bd:3a:c1:31:38:41:3d:15:65:fc:9f:1b:65:04:bb:3a:
4b:a9:57:72:66:27:af:bd:72:3b:9a:60:5d:a4:b4:00:27:23:
3b:d0:31:16:4f:0d:17:2a:b1:1a:c8:a2:d7:b3:fb:da:34:b7:
e3:a8:13:c0:45:78:b3:41:f3:61:a8:de:85:e5:87:b8:b4:aa:
c0:07:88:2c:3f:6b:e6:02:69:a0:34:b9:14:66:45:1b:d6:ab:
67:d3:e0:df:d9:b0:7e:ea:d8:5e:c9:54:68:b2:f5:7a:60:90:
4c:27:39:78:79:1f:d4:ed:e4:64:bd:cc:7f:34:21:9b:a2:0f:
a1:9e:04:bf:be:b7:1c:d8:91:49:57:8e:24:7d:81:88:c0:26:
50:2a:22:c0:fe:4b:84:c0:36:8e:6a:df:9f:cf:58:62:76:5f:
75:ed:61:e4:47:b2:3f:e5:a7:e7:1e:d9:cb:16:f9:ef:dc:88:
d3:d5:32:be:08:1a:b0:8d:69:65:51:e9:48:b6:44:c9:de:86:
66:91:0d:23:8b:79:f4:81:52:71:22:94:c5:1e:d2:5d:68:90:
3e:31:92:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:21 2024 by rpki-client on console-fra.rpki-client.org