Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MXcq37wL4NQ_NOIkHvcNF488kA8.roa
File: MXcq37wL4NQ_NOIkHvcNF488kA8.roa (raw, json)
Hash identifier: v7hKR46+CT/hy0OloMIQe4d6Xs3oMuMwwX9KE9jD3GI=
Subject key identifier: 31:77:2A:DF:BC:0B:E0:D4:3F:34:E2:24:1E:F7:0D:17:8F:3C:90:0F
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018906E4AF8648D72B06C02A9FC0501EA1A0
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MXcq37wL4NQ_NOIkHvcNF488kA8.roa
Signing time: Thu 29 Jun 2023 11:23:17 +0000
ROA not before: Thu 29 Jun 2023 11:23:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34358
IP address blocks: 85.121.136.0/23 maxlen: 23
217.156.44.0/23 maxlen: 23
85.120.35.0/24 maxlen: 24
81.180.200.0/24 maxlen: 24
217.156.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:06:e4:af:86:48:d7:2b:06:c0:2a:9f:c0:50:1e:a1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jun 29 11:23:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31772adfbc0be0d43f34e2241ef70d178f3c900f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:1a:6d:a8:53:45:6e:15:b3:64:98:3d:75:
04:eb:2c:ad:f4:34:76:cc:8a:ff:0c:e6:5f:89:e2:
2b:dc:af:f4:9f:92:f1:82:5d:8e:83:ee:5f:a5:87:
37:f5:07:17:04:c4:2a:49:8a:ca:0e:1e:5b:2e:1d:
49:76:7b:4b:ac:fd:66:9e:3f:c7:cd:12:6d:e2:b3:
35:80:2c:01:f6:ae:db:7e:88:60:0f:84:70:26:45:
8b:ec:4f:6b:53:bb:78:8b:38:d3:d8:13:fc:be:60:
87:11:23:0f:15:72:30:2a:d2:2e:28:52:78:94:ff:
db:d6:26:36:20:2f:f1:68:12:ac:17:60:d4:50:d0:
fc:0c:d0:00:43:37:e5:03:46:21:78:47:dd:f9:a6:
1e:5b:2f:07:a0:7d:5d:bc:ec:14:c6:ca:39:f3:f6:
7a:df:e1:d1:36:ba:c9:60:e8:fe:25:eb:03:fd:29:
36:2e:32:fd:54:5c:dc:56:9a:05:fa:eb:55:db:10:
74:00:2f:0b:bf:4f:05:11:1c:1b:f7:52:86:07:9f:
91:5e:a7:23:bc:cd:7c:fb:fd:f9:3d:1b:99:05:f9:
31:cf:95:4d:5f:1b:f4:11:80:cf:a7:89:b2:74:2d:
f3:db:1c:a1:03:30:5e:f1:1b:7c:81:7e:30:81:20:
8f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:77:2A:DF:BC:0B:E0:D4:3F:34:E2:24:1E:F7:0D:17:8F:3C:90:0F
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MXcq37wL4NQ_NOIkHvcNF488kA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.200.0/24
85.120.35.0/24
85.121.136.0/23
217.156.44.0/23
217.156.103.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:13:04:97:9f:f7:47:55:0c:c3:4b:5f:b4:2f:36:a9:e7:db:
17:d8:51:80:a1:64:55:7c:1d:d8:b3:ff:5c:25:f5:e1:ae:db:
b7:cb:88:60:1e:44:57:fe:a7:1c:d4:16:94:08:61:fc:0d:97:
0f:52:4d:39:37:76:23:1b:d6:fb:7a:aa:3f:ae:02:ae:e7:2e:
c6:7b:84:32:a4:95:75:e2:d7:39:83:f3:54:74:e4:fe:c6:af:
6b:71:75:c6:09:44:04:a6:88:dd:05:df:5d:16:81:0c:bf:c7:
54:57:66:13:0f:98:32:2c:16:3f:a3:a5:43:07:da:b8:0d:f3:
33:bc:96:30:f5:d8:41:a9:6a:63:81:13:8b:ea:e1:90:27:68:
98:f8:2e:e3:0b:15:40:50:83:00:f7:16:23:d2:23:a0:88:59:
9e:fb:94:7e:95:2b:47:b7:9e:18:f8:fb:5d:31:b6:4c:de:49:
b9:06:b3:92:bb:d5:5b:2c:23:44:cb:f7:f9:ac:1e:1e:01:3f:
c0:bd:92:c4:e3:2f:55:1b:05:3d:0e:04:34:2b:51:7d:ea:04:
c4:ec:de:2c:b5:7b:66:38:cd:8b:11:c6:e7:77:62:a8:dd:96:
88:48:30:d3:42:eb:28:51:dc:ca:3b:fe:42:39:18:92:ed:f9:
d7:3a:91:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:28 2023 by rpki-client on console-fra.rpki-client.org