Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/mJnEQN0O3n2w_j_7TpA5z-paJGQ.roa
File: mJnEQN0O3n2w_j_7TpA5z-paJGQ.roa (raw, json)
Hash identifier: Gzjpr5WceZxwqj0jHrdUH8/Q5QgViUrZVFcUTqc9J2c=
Subject key identifier: 98:99:C4:40:DD:0E:DE:7D:B0:FE:3F:FB:4E:90:39:CF:EA:5A:24:64
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 01856F42B72F2EA5405F5A9B26D0A1E53732
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/mJnEQN0O3n2w_j_7TpA5z-paJGQ.roa
Signing time: Sun 01 Jan 2023 21:35:21 +0000
ROA not before: Sun 01 Jan 2023 21:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47810
IP address blocks: 91.239.206.0/23 maxlen: 23
91.208.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:b7:2f:2e:a5:40:5f:5a:9b:26:d0:a1:e5:37:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Jan 1 21:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9899c440dd0ede7db0fe3ffb4e9039cfea5a2464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:12:c3:2c:87:fd:d4:11:8e:07:4b:36:e7:ea:
07:0d:4f:c9:f2:72:ef:0f:d0:4c:cd:44:6d:b8:85:
1d:04:4a:6a:25:71:39:cc:0a:85:fa:6b:35:1b:54:
6a:bd:83:c1:1c:f9:e9:ca:8c:f1:f4:3d:82:f3:03:
1f:94:d0:94:5b:7b:9e:29:84:73:14:73:fc:d8:e2:
ef:06:a8:f7:64:b6:36:3b:15:b2:24:92:85:be:a0:
fd:9e:93:de:cf:cf:13:33:28:fe:06:e7:bf:4d:f8:
ba:24:cf:fb:8c:46:33:9b:ed:dc:60:40:a7:fd:5e:
5e:53:96:20:31:5a:92:1c:f9:7c:49:6b:56:5b:af:
1e:90:81:9d:de:ee:09:35:55:29:69:0c:f4:24:21:
59:38:ff:63:97:44:77:2c:a8:24:af:7b:c8:96:ef:
e2:95:59:2e:4d:e0:70:6d:d3:e8:b7:14:dc:87:3b:
3d:90:05:11:cb:8b:f7:07:87:30:17:b5:63:b2:d9:
13:ff:d0:08:76:1e:03:78:30:52:d0:33:d2:f2:e3:
d9:ea:b0:ef:59:e6:80:6f:43:c5:9d:6e:00:9b:86:
90:b5:bb:bd:91:44:33:45:fd:13:9c:34:6e:ce:76:
ff:7c:b2:04:1f:08:8e:22:ad:e9:ec:ba:74:e4:31:
4e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:99:C4:40:DD:0E:DE:7D:B0:FE:3F:FB:4E:90:39:CF:EA:5A:24:64
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/mJnEQN0O3n2w_j_7TpA5z-paJGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.144.0/24
91.239.206.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:ff:86:58:8c:35:77:05:50:23:bd:29:d0:37:1d:89:77:cd:
3b:e5:bf:4d:dc:e5:3c:5f:60:f2:b5:2f:86:42:38:69:f2:63:
c7:48:f2:fc:eb:11:5f:74:c9:d9:37:5a:61:9d:b2:bd:5a:39:
45:49:19:2e:27:d8:5e:01:ec:41:8b:e2:75:71:a9:a3:41:8d:
69:6b:11:8b:b4:0f:db:68:77:90:ae:bf:18:77:38:27:6a:fd:
81:8a:4e:40:ea:7b:fd:af:e5:d2:e5:c5:95:75:cf:7c:4c:af:
7d:59:a6:a8:70:ba:e7:46:df:12:e2:3b:dc:53:4c:ed:f3:4f:
03:07:3a:f2:48:53:cf:cd:a0:22:5f:38:52:08:3b:5a:23:95:
45:ba:16:d2:a0:ad:dc:e1:64:b4:bf:02:a7:58:9d:7e:ad:4f:
71:9c:2b:2b:ff:a5:4d:b1:2f:e4:0d:0b:35:18:3b:2c:c6:28:
16:86:22:94:8b:42:18:85:37:0e:02:f3:10:26:55:da:ec:a9:
ac:3a:62:17:e9:dc:65:83:e4:a0:1f:19:4d:6a:08:7c:8c:bf:
d2:c1:26:c2:c8:0b:16:18:67:33:c8:de:e9:f6:ba:c0:48:6f:
43:56:d8:04:47:59:e2:47:40:a6:c5:04:35:67:3a:d5:2c:82:
85:c2:b1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:15 2024 by rpki-client on console-fra.rpki-client.org