Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/MPchWEbQkjAzqK8HCn85m0-8WEA.roa
File: MPchWEbQkjAzqK8HCn85m0-8WEA.roa (raw, json)
Hash identifier: BpvN+XGGl7BpkY5DJv/ZEhltjhm1X8vn752agdWmLRs=
Subject key identifier: 30:F7:21:58:46:D0:92:30:33:A8:AF:07:0A:7F:39:9B:4F:BC:58:40
Certificate issuer: /CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
Certificate serial: 018655B297A14AD20A6B7669FE8F7F84B5DC
Authority key identifier: 7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/MPchWEbQkjAzqK8HCn85m0-8WEA.roa
Signing time: Wed 15 Feb 2023 15:30:12 +0000
ROA not before: Wed 15 Feb 2023 15:30:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42093
IP address blocks: 185.140.20.0/22 maxlen: 22
2a07:3c00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:55:b2:97:a1:4a:d2:0a:6b:76:69:fe:8f:7f:84:b5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
Validity
Not Before: Feb 15 15:30:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30f7215846d0923033a8af070a7f399b4fbc5840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:92:1b:80:27:67:e5:dc:40:99:6b:67:95:ff:
3c:12:d2:8d:34:83:88:0b:fd:2d:cc:94:a1:79:ae:
f6:cb:28:73:31:d1:c2:45:f8:ea:43:44:62:b0:54:
4a:c2:ea:80:66:89:4e:99:bc:ce:b4:9d:9b:f2:8b:
95:a1:7c:fb:2f:e6:cc:29:e6:19:d8:67:0a:22:66:
0e:a7:0c:ab:d7:4c:8f:d8:a2:dc:21:04:34:d5:bf:
33:83:92:58:68:50:61:e2:89:cf:99:2d:42:8e:c1:
57:19:94:66:1e:08:34:59:1a:6a:7a:ed:fa:d8:66:
6c:a8:26:27:3b:f9:f6:20:6f:71:39:f5:ea:45:0a:
d4:3b:61:49:ae:5b:6a:f5:92:ba:0c:47:7a:d4:89:
d3:d5:ed:d6:36:b9:f5:8b:31:99:73:92:82:3a:4d:
3a:85:8f:b2:10:db:00:68:97:46:94:d2:ee:98:bc:
84:9e:ba:f4:91:01:8a:95:3d:47:99:8c:0a:67:d6:
d8:0c:23:c8:13:53:4d:4e:ee:9c:c8:d8:35:49:fd:
62:7f:53:11:17:0f:17:64:a7:ae:2a:42:49:ff:29:
8f:8b:32:5e:17:2a:7c:c6:2c:07:fd:fe:a9:21:6b:
ca:be:90:ee:ba:9d:3d:4c:35:9b:8a:71:f4:94:15:
d5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F7:21:58:46:D0:92:30:33:A8:AF:07:0A:7F:39:9B:4F:BC:58:40
X509v3 Authority Key Identifier:
keyid:7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/MPchWEbQkjAzqK8HCn85m0-8WEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.20.0/22
IPv6:
2a07:3c00::/29
Signature Algorithm: sha256WithRSAEncryption
c0:0a:2c:70:06:2c:22:97:7a:2a:e2:0f:f9:aa:1d:8d:8b:f0:
7b:5a:fa:a5:ff:96:91:cf:cc:83:33:3f:3c:7e:1f:25:8e:69:
44:fd:2a:39:31:a2:54:c1:e2:08:54:6b:41:92:54:63:e9:b0:
2b:6b:cd:ce:b4:e2:f7:a0:bb:79:a8:c8:37:c8:26:4c:95:23:
d3:ce:ef:01:ef:45:b9:42:60:78:01:a6:78:90:91:a6:48:0c:
2a:a9:c1:7d:b1:50:87:8c:7e:cb:28:93:3c:94:60:7c:ce:77:
ac:f0:19:b6:1c:dc:71:bf:82:98:08:81:db:e6:8f:2f:ca:cb:
d6:a6:ff:4b:d4:74:15:17:e7:fb:70:42:13:d7:5e:56:a3:fd:
85:ba:50:1e:9e:0a:ce:8d:b3:f7:2c:d5:31:3d:31:4c:98:89:
33:69:c7:23:8d:61:41:9e:41:96:71:05:3f:0a:16:6c:a5:5f:
f1:5c:3e:87:24:f8:c5:35:ae:0d:8f:b8:be:05:32:2c:8f:aa:
3d:fe:d4:90:2b:93:b5:20:18:a2:f0:7d:b4:6d:5a:6a:bd:29:
7c:8b:bc:44:1c:20:6b:0e:33:a8:92:76:7e:d7:87:43:bd:09:
77:3b:12:de:dd:b7:af:75:1b:f6:94:40:e2:d6:65:4a:6c:af:
f6:48:e8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:30 2024 by rpki-client on console-ams.rpki-client.org