Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/MojjrGp_S2BMr9bnrWixyLwBlRQ.roa
File: MojjrGp_S2BMr9bnrWixyLwBlRQ.roa (raw, json)
Hash identifier: 1z1UCwMaVj290K3bWttsvakhubaySNl3dniLbLn/SNU=
Subject key identifier: 32:88:E3:AC:6A:7F:4B:60:4C:AF:D6:E7:AD:68:B1:C8:BC:01:95:14
Certificate issuer: /CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Certificate serial: 018B51419BAC4B94BE0A4B242F00436DBC06
Authority key identifier: 4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/MojjrGp_S2BMr9bnrWixyLwBlRQ.roa
Signing time: Sat 21 Oct 2023 08:02:16 +0000
ROA not before: Sat 21 Oct 2023 08:02:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2116
IP address blocks: 185.3.4.0/24 maxlen: 24
185.3.6.0/24 maxlen: 24
185.3.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:51:41:9b:ac:4b:94:be:0a:4b:24:2f:00:43:6d:bc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Validity
Not Before: Oct 21 08:02:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3288e3ac6a7f4b604cafd6e7ad68b1c8bc019514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a8:8b:9f:2b:82:28:35:f7:9e:b4:c5:f6:a3:
c5:6a:2d:a5:d9:6e:9f:2b:7d:c4:42:5a:c9:97:c6:
3a:eb:1f:f2:95:75:3e:27:d9:a8:55:0d:39:07:04:
ef:d5:af:92:77:7f:a5:f0:c3:96:90:23:b8:fe:20:
f7:a4:59:26:c1:f6:70:94:b9:79:04:1d:49:ab:4e:
fa:9b:26:5b:87:93:24:49:c9:f8:82:bc:91:9c:85:
4c:7a:1e:f0:4a:b5:97:64:fb:1f:5c:3a:32:1c:40:
85:74:b9:f2:a1:0e:d1:6d:1f:1f:cd:a0:72:e3:87:
c8:13:57:52:36:e0:5f:f7:29:58:fd:a1:ff:1e:ec:
cc:45:88:b2:e5:f0:4c:50:62:e7:27:b8:9e:49:20:
20:4d:c1:7e:73:b5:39:8a:99:45:6f:2d:33:4f:5e:
52:4d:74:f9:ae:fe:ce:5a:74:3f:85:e9:c1:36:42:
ec:bc:2c:a7:8c:d3:da:34:fc:f4:f7:f6:31:19:68:
95:b1:24:6d:56:98:a4:7e:5e:c8:35:74:ff:a7:7f:
07:80:c7:49:e4:f5:22:5c:b2:5d:a7:d9:8b:94:b0:
67:12:5b:39:f4:46:0f:8c:72:b8:63:96:9a:04:c1:
57:ea:69:20:e1:2c:60:fc:ac:5d:a7:f3:43:5e:75:
1c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:88:E3:AC:6A:7F:4B:60:4C:AF:D6:E7:AD:68:B1:C8:BC:01:95:14
X509v3 Authority Key Identifier:
keyid:4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/MojjrGp_S2BMr9bnrWixyLwBlRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.4.0-185.3.6.255
Signature Algorithm: sha256WithRSAEncryption
c9:11:4a:36:b8:54:1c:52:67:28:8c:c8:bd:96:5f:a6:e4:6f:
98:4c:20:59:f9:70:28:fc:b3:91:45:63:3d:a2:a0:ed:c3:5c:
39:93:93:f1:5b:bb:a4:55:96:da:b8:c6:91:5c:03:11:3c:70:
6d:bd:2f:88:07:16:64:80:ec:d5:d2:b2:cc:dc:fc:e3:78:02:
67:7d:26:b6:3d:5b:41:a6:b2:99:ea:14:8b:7f:09:4e:aa:32:
69:59:f9:ac:48:3e:57:1f:55:11:6e:42:fb:91:47:5d:16:9d:
c7:e0:0f:4d:34:be:7c:56:00:c6:32:8e:8b:8d:e8:a6:19:6e:
02:ca:f5:8b:21:ae:f7:fb:3c:2a:5d:b8:06:b3:ac:ef:2a:ed:
4f:74:4c:15:e8:7f:10:64:0c:e8:2c:2b:8f:db:a3:93:65:0d:
03:e0:6e:21:fc:86:3b:d4:05:e1:52:80:db:41:f4:1c:bd:17:
63:69:10:fc:88:87:d9:e1:69:08:26:83:01:7d:b2:1d:b7:9a:
df:6e:63:e0:93:0e:07:ce:b5:8e:34:9a:a5:42:a4:79:2b:3d:
1a:35:0a:51:1a:77:b5:2b:d8:4b:a6:23:92:8c:09:cf:d9:e3:
97:8d:e2:64:e4:78:7b:34:95:37:cb:bf:d8:16:a9:c3:35:cf:
b5:7a:da:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:15 2024 by rpki-client on console-fra.rpki-client.org