Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MPFBor4rFdIfw9w_y08lf0K3wZc.roa
File: MPFBor4rFdIfw9w_y08lf0K3wZc.roa (raw, json)
Hash identifier: rawElAPqdf2Gsasj+8Gbt/jjnefd/4AUOpo2qiwqTxU=
Subject key identifier: 30:F1:41:A2:BE:2B:15:D2:1F:C3:DC:3F:CB:4F:25:7F:42:B7:C1:97
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F66F73DDFEB518D9920D2C18475661F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MPFBor4rFdIfw9w_y08lf0K3wZc.roa
Signing time: Sun 01 Jan 2023 22:14:56 +0000
ROA not before: Sun 01 Jan 2023 22:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49392
IP address blocks: 194.87.118.0/23 maxlen: 24
194.135.32.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
195.133.26.0/23 maxlen: 24
195.133.25.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
195.133.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:f7:3d:df:eb:51:8d:99:20:d2:c1:84:75:66:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30f141a2be2b15d21fc3dc3fcb4f257f42b7c197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1d:ae:cf:93:8a:08:44:e2:d7:d5:5e:44:9d:
eb:5e:fb:d1:bc:89:b8:96:85:07:58:d2:7f:e4:bd:
e2:3a:26:6e:9e:6a:2a:1a:49:a0:80:d0:54:5e:e4:
3a:09:e9:b4:f9:bd:9a:0e:5f:fb:14:db:2c:45:b9:
ed:05:6d:33:d3:1f:3c:bc:24:cf:0f:24:76:07:9e:
79:4d:a5:14:8e:3d:45:72:c1:4f:3d:66:bd:06:72:
c7:25:b2:4b:55:e5:88:8a:61:a2:10:ae:cb:db:2f:
78:8a:1d:aa:03:c4:84:7c:ea:83:bf:36:a3:1c:9e:
b2:aa:fc:8b:4f:5a:41:87:2f:3a:68:1c:31:8a:35:
a6:43:4c:86:8e:14:19:a6:8b:fd:8d:09:72:17:fd:
ad:bd:9c:fb:f1:d2:f2:ae:ef:dc:75:d4:2f:21:05:
65:a7:b8:68:29:a3:2e:35:55:bd:75:f4:df:bb:7a:
28:65:62:5e:9e:9a:e7:96:e7:ff:2d:55:e1:1f:d3:
e8:32:df:a4:52:d1:fe:f5:52:d9:a6:66:fc:a8:9c:
40:d8:04:8b:0b:c0:de:7c:00:39:e1:c9:38:b0:e8:
57:72:80:b4:d0:6c:58:0c:62:10:c8:20:6b:c5:f0:
1a:83:a1:f4:70:95:4c:86:ea:98:3d:2b:31:40:80:
eb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F1:41:A2:BE:2B:15:D2:1F:C3:DC:3F:CB:4F:25:7F:42:B7:C1:97
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MPFBor4rFdIfw9w_y08lf0K3wZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.10.0/24
194.87.118.0/23
194.135.32.0/24
195.133.25.0-195.133.27.255
195.133.59.0/24
212.192.15.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:9f:7c:22:68:50:27:d8:64:d6:85:16:b4:c3:57:11:3f:2d:
28:ba:b9:8b:88:c3:cb:54:a6:ec:1c:72:21:70:a1:29:6f:42:
f7:6f:99:cf:45:2c:56:ed:8c:c5:a0:b5:3e:97:01:44:e1:08:
3f:0e:00:de:1d:e4:4f:e5:db:93:ec:87:20:fa:ab:29:59:16:
37:96:19:0a:ec:39:a3:6e:e0:9e:d2:3a:e3:08:f3:4f:08:17:
9b:c6:32:5e:01:21:af:cf:16:70:ef:48:8e:5d:cd:af:9a:94:
05:96:aa:ad:79:2f:a0:32:db:15:97:82:18:c1:83:5d:a0:b4:
d9:c9:0f:66:82:0b:57:0e:c8:a6:9e:f8:9e:e6:e5:b9:da:fe:
68:5d:22:91:46:7b:f6:b3:a6:ed:54:15:a3:fb:3a:80:75:0a:
2f:2f:59:fc:c5:8e:18:99:ad:04:4a:83:f0:1b:bd:69:04:bb:
4b:ee:29:1a:86:2a:11:e0:ef:22:f3:db:c6:49:59:ee:c4:a0:
14:64:7b:8f:a0:0d:c1:88:e4:62:2c:ef:55:f2:f0:5e:d7:4a:
94:6d:b2:39:19:93:b0:9b:84:60:66:75:a6:42:e3:61:20:ee:
16:c5:fa:33:f1:3b:59:ca:c4:d5:f8:60:02:06:da:22:44:77:
32:fd:fa:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:56 2023 by rpki-client on console-ams.rpki-client.org