Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/MwbgviuUnkhLB-Tw3jHBbizeRPw.roa
File: MwbgviuUnkhLB-Tw3jHBbizeRPw.roa (raw, json)
Hash identifier: JFIFPCDGNJvPhQK1+D89KuDHheAMJmRYPuXtD5Fdgfo=
Subject key identifier: 33:06:E0:BE:2B:94:9E:48:4B:07:E4:F0:DE:31:C1:6E:2C:DE:44:FC
Certificate issuer: /CN=6e94cdea9365612adf7611144668254b388fa612
Certificate serial: 01856C25E55EED728F1AC30284CC0F2A013B
Authority key identifier: 6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/MwbgviuUnkhLB-Tw3jHBbizeRPw.roa
Signing time: Sun 01 Jan 2023 07:05:00 +0000
ROA not before: Sun 01 Jan 2023 07:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29075
IP address blocks: 91.217.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:e5:5e:ed:72:8f:1a:c3:02:84:cc:0f:2a:01:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e94cdea9365612adf7611144668254b388fa612
Validity
Not Before: Jan 1 07:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3306e0be2b949e484b07e4f0de31c16e2cde44fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:32:a8:f5:05:73:b6:b2:38:9e:9e:09:9f:
15:25:47:f2:ea:4c:15:30:04:12:a4:e0:8f:4c:3a:
8a:2d:36:cb:a2:2a:aa:ae:ae:19:15:ce:9a:f1:3c:
b0:20:75:7e:b6:c3:45:54:47:47:87:81:55:0a:06:
25:d9:f0:bc:fe:4b:41:e1:4c:b3:37:49:dc:0b:49:
bd:0d:2e:2d:fb:8b:f5:13:3b:1e:a8:1a:e8:29:1b:
d9:42:fc:94:74:bc:2f:4c:61:c2:75:d9:b2:ad:e8:
71:8d:a4:2d:e4:c5:4f:8a:ba:d2:57:46:3b:85:1e:
ff:ed:c9:a1:25:d1:8d:d3:35:a6:ac:0c:49:b8:41:
48:a0:13:bd:8a:7a:b1:f4:1f:1c:f7:79:a8:4e:4a:
06:63:6e:38:67:14:e0:97:7a:76:7b:e0:03:01:4c:
75:e8:32:f1:55:80:f5:61:32:f2:c7:dd:9a:f0:de:
37:c8:fa:74:c9:11:d0:7a:67:c1:fb:65:88:bd:c0:
0b:74:96:30:a4:48:09:4a:c6:2d:23:00:2d:e4:8c:
c2:56:94:a1:3e:34:0d:f2:cd:b7:6f:f1:5f:df:ba:
aa:23:75:59:43:d4:8f:e0:ed:12:eb:45:77:86:68:
dc:58:6a:b9:43:1d:9f:43:67:e4:1f:eb:a1:28:a8:
c9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:06:E0:BE:2B:94:9E:48:4B:07:E4:F0:DE:31:C1:6E:2C:DE:44:FC
X509v3 Authority Key Identifier:
keyid:6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/MwbgviuUnkhLB-Tw3jHBbizeRPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.234.0/24
Signature Algorithm: sha256WithRSAEncryption
38:75:eb:2a:61:a9:6b:da:c5:ce:01:2f:de:85:93:4f:ff:ce:
c7:be:23:f3:3c:be:38:c4:56:43:2f:da:1d:de:f0:d7:f9:09:
ef:1d:42:93:e6:de:da:f0:29:a2:45:ee:a1:b1:a5:ae:56:cc:
e0:1a:20:86:64:0e:6d:b1:f6:37:b7:6d:1c:65:a7:54:dc:2d:
50:48:da:38:3d:8d:80:64:76:cd:38:10:6b:f6:b4:1e:0c:6a:
a1:d3:88:28:4d:b7:99:e5:e6:19:42:0f:85:94:09:ee:38:e3:
7e:65:2e:b4:f3:6b:ab:02:d7:6a:d9:92:63:67:82:95:d7:8a:
93:c5:be:00:48:11:53:b7:77:c5:01:a2:33:e3:ee:89:2e:ac:
15:1c:e0:48:c8:0e:49:8c:6e:b6:2b:12:b3:a3:9e:1a:f9:7f:
37:05:78:31:66:f1:14:b8:14:59:10:7d:4f:13:d7:b8:d2:a9:
43:63:43:7b:dc:b0:d4:4d:2c:65:99:10:bf:61:dd:d6:77:4f:
0b:ff:af:81:f3:b7:50:fd:4e:36:a1:e1:c1:88:54:db:71:6f:
59:4d:8a:2b:84:66:30:4b:8f:27:b9:28:a7:0f:b6:88:f7:27:
13:4f:c4:00:c1:d1:c0:31:bf:b4:49:e7:78:6f:8b:54:7f:fc:
48:2e:12:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:38 2024 by rpki-client on console-fra.rpki-client.org