Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/pMMSomEtJPmWk8R-U9RG2tkaGqk.roa
File: pMMSomEtJPmWk8R-U9RG2tkaGqk.roa (raw, json)
Hash identifier: ORdtzknUI64El1QmOhnXwrzWG+lByaFbTr/WBvOSOq0=
Subject key identifier: A4:C3:12:A2:61:2D:24:F9:96:93:C4:7E:53:D4:46:DA:D9:1A:1A:A9
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246E0EFD2E1F188D65FCEC4E0604DCA
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/pMMSomEtJPmWk8R-U9RG2tkaGqk.roa
Signing time: Mon 02 Jan 2023 11:38:45 +0000
ROA not before: Mon 02 Jan 2023 11:38:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59432
IP address blocks: 91.229.134.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Mar 2023 08:42:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:e0:ef:d2:e1:f1:88:d6:5f:ce:c4:e0:60:4d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4c312a2612d24f99693c47e53d446dad91a1aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:64:fb:60:a1:e5:78:70:07:c4:a6:17:b7:71:
17:1f:6c:1c:85:21:83:fa:56:ae:3d:39:f6:70:63:
33:8b:31:53:1a:c7:41:aa:f6:cc:3b:89:4a:c1:e6:
b8:aa:45:2b:c9:33:16:8d:de:f4:6c:20:64:0e:4c:
fc:c3:e1:34:5c:ce:6c:4b:36:3a:f8:55:0e:3e:15:
b8:10:75:51:55:49:aa:09:ad:b3:c8:f9:8d:33:ba:
d3:ec:87:9d:71:db:d0:a1:a1:96:68:18:ce:1a:8f:
2d:0a:74:73:3a:44:57:b4:e1:99:3e:17:9f:9a:f1:
b9:dc:0d:30:a5:ac:27:3d:77:54:c2:a2:a1:c3:e2:
62:30:1a:a8:4f:05:20:17:fa:4b:e7:76:8d:5e:8b:
e1:3c:0e:97:45:13:0b:97:b4:ff:1c:c7:c2:36:58:
48:a7:c0:2a:c3:87:e5:00:a7:50:c9:97:fd:9e:1d:
90:1c:b5:b5:a7:f5:d0:c6:b3:08:28:06:e6:cd:a1:
02:1c:94:23:f4:03:9a:a9:f3:ba:51:b1:b1:ba:84:
86:a3:ba:d2:7f:91:19:4a:56:e4:4e:e7:ac:f1:df:
8a:2c:19:83:d6:9c:0d:ec:41:c1:36:8b:f7:2b:82:
94:b3:c6:a0:08:9a:52:43:1e:b9:54:6c:b8:23:79:
5b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C3:12:A2:61:2D:24:F9:96:93:C4:7E:53:D4:46:DA:D9:1A:1A:A9
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/pMMSomEtJPmWk8R-U9RG2tkaGqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.134.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:c8:68:50:4b:e0:22:f7:b0:e2:7f:96:d6:36:ba:52:28:54:
39:3d:b9:3d:ea:ce:5a:d6:39:3e:5b:89:1b:6b:c2:e2:16:08:
ce:0f:6e:d0:1d:46:0c:da:f0:8b:91:67:f6:87:22:7c:0b:ea:
cb:9d:81:e4:1d:22:b7:63:f2:ef:c6:fd:4c:ca:5e:66:95:1c:
9f:7d:93:39:00:4f:f0:24:73:ff:30:28:2f:77:30:38:12:13:
c3:00:c5:d8:95:3e:af:45:df:bb:7c:c7:29:71:5a:ed:db:3e:
80:ce:2f:70:40:86:1d:04:5e:3f:74:81:2f:39:9d:87:83:ee:
5a:e4:b3:b7:88:e7:50:f8:5b:7b:77:03:28:7c:38:0f:2e:a6:
d5:8b:73:7f:5e:47:90:6b:4c:a4:65:01:aa:5e:d6:09:0d:0d:
1e:35:29:8e:2a:e8:7e:ce:6d:87:ec:37:67:0f:b0:64:85:d7:
c4:38:43:d6:ec:e0:af:6e:75:2f:c5:ca:59:3c:1d:c8:26:0f:
cd:23:06:d6:c4:ac:be:59:6d:62:be:53:4d:a1:b9:c7:a3:48:
8c:00:70:ac:7d:87:89:c4:e7:c1:7e:77:1c:20:2d:fc:0b:b8:
48:90:d1:52:f7:8b:f0:88:ac:04:68:a7:ab:d9:58:31:78:56:
60:35:d6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org