Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/MRADdU7D6sEN8_dSwtDZxgXEd_U.roa
File: MRADdU7D6sEN8_dSwtDZxgXEd_U.roa (raw, json)
Hash identifier: +ACk/Bdzp4aBZY/mikJzi1JbQn3lcd/wYGm7+dYh1SQ=
Subject key identifier: 31:10:03:75:4E:C3:EA:C1:0D:F3:F7:52:C2:D0:D9:C6:05:C4:77:F5
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 01856EA686DCBF294E8F45C93484CF789A88
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/MRADdU7D6sEN8_dSwtDZxgXEd_U.roa
Signing time: Sun 01 Jan 2023 18:44:45 +0000
ROA not before: Sun 01 Jan 2023 18:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.93.221.0/24 maxlen: 24
94.124.160.0/23 maxlen: 24
78.142.216.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:86:dc:bf:29:4e:8f:45:c9:34:84:cf:78:9a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 1 18:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=311003754ec3eac10df3f752c2d0d9c605c477f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:26:74:52:32:e5:d6:a8:6b:46:87:09:63:67:
f3:c0:b5:c7:6a:57:fd:82:7c:b8:de:92:3c:40:2c:
3d:c7:82:94:aa:de:0b:0d:25:62:95:19:5a:bb:04:
02:23:fa:fc:3f:16:c7:a4:9b:84:92:0f:60:93:23:
ed:64:92:c2:e1:3e:6c:60:61:88:39:ce:0e:0d:e3:
61:e3:46:c4:9e:a5:86:77:f3:c3:30:aa:bc:20:75:
70:11:2a:b2:4c:af:ab:76:70:06:0c:99:4c:94:a1:
74:f1:1a:c0:d3:87:c6:81:ab:59:e5:37:1f:16:91:
72:e2:85:63:61:1b:80:a0:13:be:ac:7d:0c:1a:15:
51:04:82:98:43:36:3e:0d:67:02:b4:b5:a1:80:e3:
d5:0e:23:71:04:3b:c8:83:31:2e:d6:2a:2f:50:0f:
b7:3c:72:99:f6:73:12:9b:29:0b:df:95:0a:3d:9d:
96:ed:f3:ef:0d:d6:d7:59:ae:bf:bb:1e:28:d4:1c:
ed:0f:93:8a:e9:ed:81:bf:c3:01:6e:bd:5e:bb:7b:
6c:2c:5f:cc:e9:f2:f3:bc:ca:88:2f:7f:10:1f:5d:
67:13:52:1a:a1:3e:69:18:db:e4:d7:e2:99:b4:ef:
5a:88:7c:65:36:8d:86:29:fc:b2:57:cf:b7:91:5f:
f1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:10:03:75:4E:C3:EA:C1:0D:F3:F7:52:C2:D0:D9:C6:05:C4:77:F5
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/MRADdU7D6sEN8_dSwtDZxgXEd_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.216.0/22
94.124.160.0/23
185.93.221.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ec:e0:02:d9:13:b1:48:fa:b9:3e:a9:fa:a1:9d:e3:d9:c6:
7a:40:d4:73:3a:fd:29:89:bd:13:98:d6:fc:1d:cd:14:e2:62:
07:e3:f3:f9:de:76:8e:c0:19:61:c1:38:48:59:23:fb:80:97:
e3:c6:df:7d:6e:f7:8b:2b:86:65:47:df:bd:f2:ad:fc:37:20:
23:5c:22:09:0b:f6:b9:29:a0:0c:1f:26:06:d8:5c:74:8d:2c:
7b:bd:d5:1e:b1:dc:cc:f2:89:43:29:47:37:e6:3f:aa:5a:6a:
21:6f:b0:b8:e8:5e:1a:0e:87:a3:2b:d3:df:13:0b:f8:9e:58:
21:c4:3f:20:4c:76:94:dc:e1:19:b1:db:e7:9a:d5:51:b9:1d:
3d:15:b7:c1:0d:3d:29:f4:2c:22:ec:bc:85:20:b3:76:3c:89:
14:5c:c3:e6:24:4f:ea:93:06:31:f4:ac:3d:39:d9:27:8a:74:
01:ab:cf:5d:66:c5:4b:2a:f8:d0:da:25:21:ad:c1:fd:5d:5b:
cb:96:e2:f6:72:5c:34:ea:fc:7e:76:95:09:fd:cd:8a:39:d6:
2c:21:3a:6b:01:27:ce:ec:13:28:07:99:98:18:38:9c:61:1f:
f7:d4:60:d0:3e:74:28:c0:80:22:1e:c1:8b:ee:66:a3:bb:73:
9e:39:e1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:06 2024 by rpki-client on console-fra.rpki-client.org