Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/Mqa0jq9ZsqbzxUrdIJIpPb9bODs.roa
File: Mqa0jq9ZsqbzxUrdIJIpPb9bODs.roa (raw, json)
Hash identifier: YnSU6lOYG09icM9k8tUYdzqfQcmyQFJUCTu3DThhSqM=
Subject key identifier: 32:A6:B4:8E:AF:59:B2:A6:F3:C5:4A:DD:20:92:29:3D:BF:5B:38:3B
Certificate issuer: /CN=21506035b32cc33af0589c55be849775e92c4693
Certificate serial: 01857169E079791AD87B2F1932370608BA94
Authority key identifier: 21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/Mqa0jq9ZsqbzxUrdIJIpPb9bODs.roa
Signing time: Mon 02 Jan 2023 07:37:22 +0000
ROA not before: Mon 02 Jan 2023 07:37:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44480
IP address blocks: 91.199.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:e0:79:79:1a:d8:7b:2f:19:32:37:06:08:ba:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21506035b32cc33af0589c55be849775e92c4693
Validity
Not Before: Jan 2 07:37:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32a6b48eaf59b2a6f3c54add2092293dbf5b383b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:76:a0:35:88:1f:d7:ab:59:6c:69:7c:99:d2:
70:b7:c1:52:b4:4c:0d:64:c4:a2:ea:32:0c:57:32:
b1:fa:88:4b:22:08:45:63:13:85:a8:4e:5f:9f:e8:
7e:40:8d:1e:f0:57:ef:6b:03:6c:e7:6d:15:bc:04:
80:49:38:c8:51:fe:9f:f0:69:2f:74:eb:fc:e6:ee:
de:e8:02:b9:2c:fb:66:d7:21:4e:60:51:89:85:49:
b0:63:1b:26:10:2d:61:33:80:c6:ea:eb:c7:ad:ea:
d4:74:56:03:71:dd:47:f4:8a:72:50:9d:0d:4b:55:
2e:f5:49:80:84:56:2a:35:10:c0:0f:92:b2:e6:7e:
df:be:cc:8f:72:5b:88:07:c7:2f:a7:7a:bb:93:8d:
ce:ff:df:0e:78:02:1a:c5:87:e0:b4:8b:61:1c:64:
42:0d:31:49:25:f3:98:6b:72:a4:4f:70:8f:d7:36:
6c:80:03:70:1d:ce:73:cf:bc:98:0a:a1:ee:a8:88:
d9:c0:ce:cb:6d:35:72:ba:f5:23:a9:64:46:4b:21:
2e:60:ec:f7:02:a9:fe:24:da:98:ba:7f:9b:d0:ed:
20:9f:e4:82:2f:c5:d0:7a:80:d4:44:75:d3:49:84:
3d:0e:96:c7:f4:67:02:48:96:2e:6a:49:d4:b3:68:
e4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A6:B4:8E:AF:59:B2:A6:F3:C5:4A:DD:20:92:29:3D:BF:5B:38:3B
X509v3 Authority Key Identifier:
keyid:21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/Mqa0jq9ZsqbzxUrdIJIpPb9bODs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:9d:97:2f:33:55:08:6f:eb:f8:11:13:20:fb:05:13:82:d0:
4a:aa:59:0e:41:52:95:e3:b7:ac:bb:83:2a:1e:65:85:d2:06:
f5:a8:b6:1b:40:5f:a8:81:5a:c9:5f:dc:43:df:18:e9:0d:2d:
1f:08:a8:13:57:2f:89:2b:00:a2:df:d5:5a:e6:ba:6d:f0:45:
e3:6d:fd:e9:c8:40:29:f1:b9:de:fa:01:48:56:c1:f8:db:9a:
6a:76:54:d7:c5:f1:96:2d:ec:25:04:33:91:52:bd:6e:7f:53:
ea:35:d8:bf:63:5b:45:a9:55:d9:d1:18:00:89:f2:ac:9c:bf:
87:ec:70:3f:2b:fd:76:3c:7b:6c:e2:09:6c:bc:9c:6f:61:e9:
d7:34:9a:ce:70:3b:64:e8:26:c4:12:4e:d3:1f:97:96:b3:9f:
19:47:0f:01:69:30:5c:44:b7:37:d1:2f:4d:0e:88:e4:57:f6:
af:3e:61:e5:72:08:8f:4a:65:b3:0b:f3:ec:3d:6d:e8:9d:27:
75:b3:fe:44:39:f9:5a:28:45:6e:68:dc:7f:38:3f:e2:e7:01:
e2:7c:91:ae:fe:d1:f1:9f:91:ff:2b:8b:35:ae:23:73:c6:92:
d8:3e:e5:6b:3e:bb:5b:8b:26:c0:fb:41:ec:60:f8:a5:26:46:
07:bb:35:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:57 2024 by rpki-client on console-ams.rpki-client.org