Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/MC8ZiVcghKGYgQcpbtlKLEyhC4c.roa
File: MC8ZiVcghKGYgQcpbtlKLEyhC4c.roa (raw, json)
Hash identifier: IJmi+7Vyc/8BmmmbjXY4fhrwDZUFTJ9wsvO7vvI9EdA=
Subject key identifier: 30:2F:19:89:57:20:84:A1:98:81:07:29:6E:D9:4A:2C:4C:A1:0B:87
Certificate issuer: /CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
Certificate serial: 01856D53E8FDC74BC9B6AA31112FA97AB7BF
Authority key identifier: 57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/MC8ZiVcghKGYgQcpbtlKLEyhC4c.roa
Signing time: Sun 01 Jan 2023 12:34:53 +0000
ROA not before: Sun 01 Jan 2023 12:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42760
IP address blocks: 77.74.0.0/21 maxlen: 21
185.74.28.0/22 maxlen: 22
46.227.224.0/21 maxlen: 21
193.246.101.0/24 maxlen: 24
193.246.120.0/24 maxlen: 24
2a02:cd8::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:e8:fd:c7:4b:c9:b6:aa:31:11:2f:a9:7a:b7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
Validity
Not Before: Jan 1 12:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=302f1989572084a1988107296ed94a2c4ca10b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:35:c3:bd:15:66:34:7c:c7:e3:69:b7:88:57:
2b:d3:2b:ea:96:3b:ab:4d:99:04:b8:a2:12:45:a1:
b9:e8:c4:ea:44:26:86:d0:9e:1f:8f:e9:37:cf:dc:
18:ed:f5:d4:39:b7:4e:69:a9:13:69:4b:25:06:d9:
78:fe:b5:74:02:66:45:c7:99:8b:12:03:06:3e:ab:
ca:c0:4a:56:fd:99:b6:e1:19:20:57:98:b7:82:56:
9b:8a:9c:76:34:5f:a2:0d:f5:17:48:ff:4c:7e:76:
a6:b5:19:5b:42:80:c9:08:20:ad:7d:23:6f:23:b8:
85:ac:aa:32:04:df:cc:9d:07:db:34:4b:3d:da:f7:
66:58:3e:25:83:8e:bc:49:24:28:05:c9:b7:4c:5c:
b6:3a:2d:c1:31:33:8f:00:3d:70:6f:ed:c2:3d:d4:
60:b9:8f:53:25:c6:dd:43:97:09:61:2c:ba:2a:8e:
37:7f:35:d8:58:32:9c:79:37:0a:3b:b5:e5:ba:ea:
e4:80:f6:f0:28:88:0e:1b:2e:9f:9d:8c:71:d4:df:
ae:95:15:a5:58:e1:36:2e:e4:ad:77:42:21:d4:aa:
ee:84:c5:6d:8c:15:08:1c:b2:0c:d7:af:c3:56:6c:
d9:dc:dd:42:2c:5b:b9:a6:35:6a:8d:2e:17:9c:7e:
44:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2F:19:89:57:20:84:A1:98:81:07:29:6E:D9:4A:2C:4C:A1:0B:87
X509v3 Authority Key Identifier:
keyid:57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/MC8ZiVcghKGYgQcpbtlKLEyhC4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.224.0/21
77.74.0.0/21
185.74.28.0/22
193.246.101.0/24
193.246.120.0/24
IPv6:
2a02:cd8::/32
Signature Algorithm: sha256WithRSAEncryption
9d:a3:39:72:8b:7d:54:4f:7c:14:c1:48:f6:1b:34:21:b3:94:
02:0d:c3:cd:95:df:6a:fe:ea:99:73:fc:ac:3a:de:4e:fc:a3:
32:f3:6d:c8:bd:70:cd:b9:a2:5b:fb:90:7f:0f:22:b9:0f:02:
12:cc:c3:b3:7b:6c:36:2c:0d:d7:28:c9:4f:e0:93:d0:93:c1:
3a:65:03:d9:49:31:b9:f3:16:63:ec:4f:aa:fd:4d:8f:81:ef:
18:15:9a:26:ef:33:9c:0e:a4:01:fc:df:4e:32:e6:3c:bf:9c:
d0:1e:b2:34:69:88:ae:bd:22:f6:85:4f:20:1a:a8:e6:6d:11:
0e:9d:eb:ce:76:c0:0a:4b:a8:ac:02:4c:ff:c4:ae:ba:0a:70:
ae:32:00:15:c5:76:d4:d5:d3:ed:81:eb:bd:7d:e1:db:81:62:
1d:4b:f6:e4:cb:1e:3a:5c:b3:c3:7e:78:5f:d7:b9:40:6f:e0:
cb:a7:c3:d9:dd:32:74:e6:db:9f:f0:11:54:df:bc:9c:98:9e:
1a:28:2f:9d:45:49:84:3f:f5:bf:79:cf:e6:99:f6:87:b7:02:
8d:68:cb:c1:51:e6:88:cc:20:92:96:b5:3e:44:02:5a:5a:3c:
f8:ee:7f:7d:c1:be:fd:71:88:6e:bc:80:f5:10:0c:c9:7f:4c:
12:b9:b8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:50 2024 by rpki-client on console-ams.rpki-client.org