Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/MVAD-x28hduR0o7HlmeLrjdvb-c.roa
File: MVAD-x28hduR0o7HlmeLrjdvb-c.roa (raw, json)
Hash identifier: s1WKJRPwPJVNudZdyEuAf+0qSOLnZbkdxH8H6GMN6fY=
Subject key identifier: 31:50:03:FB:1D:BC:85:DB:91:D2:8E:C7:96:67:8B:AE:37:6F:6F:E7
Certificate issuer: /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Certificate serial: 01857295E399438F60589DAA5C29FEE3A9DA
Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/MVAD-x28hduR0o7HlmeLrjdvb-c.roa
Signing time: Mon 02 Jan 2023 13:05:03 +0000
ROA not before: Mon 02 Jan 2023 13:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 128.127.169.0/24 maxlen: 24
128.127.170.0/24 maxlen: 24
128.127.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:e3:99:43:8f:60:58:9d:aa:5c:29:fe:e3:a9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Validity
Not Before: Jan 2 13:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=315003fb1dbc85db91d28ec796678bae376f6fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:99:f9:3a:5a:2c:ad:ec:d2:f4:a7:6b:4e:
ce:b9:98:78:39:30:3b:5a:f8:d2:00:ab:0d:2e:3b:
84:19:cb:d0:2b:e6:8a:0a:0a:02:4b:a0:c8:be:59:
3a:4e:29:d7:dd:56:fe:34:16:10:2f:aa:47:30:9a:
b7:99:f5:1c:1e:dc:ff:cb:1d:51:0d:8b:36:56:e8:
dd:3c:5e:76:b5:20:2d:60:d0:59:14:43:b5:3d:e9:
e0:0c:be:c9:b6:c2:7c:00:49:66:94:c2:69:58:8b:
5a:a4:0e:9e:63:cb:21:73:df:4b:6a:b5:19:3d:0a:
2c:34:78:1e:13:0d:60:34:f9:65:ef:9d:d4:24:a8:
97:dd:cc:33:b0:b4:e4:91:99:87:28:5e:d5:47:59:
1e:e0:fc:76:79:1c:d0:19:58:a1:ad:19:3d:55:cc:
9b:04:9e:98:c1:c4:5d:a0:8b:be:e5:86:14:ec:37:
fe:58:d8:00:95:e7:bd:28:8d:89:2f:4f:f0:8b:41:
76:7d:e3:c6:6d:fc:f0:c2:f6:e7:c6:80:88:34:76:
98:3a:b9:ce:82:1e:c8:c8:17:81:9b:4c:d6:ab:d3:
bd:ec:ed:47:fd:eb:47:70:d5:46:56:23:64:7d:1b:
c0:f6:0d:63:47:98:38:d2:c9:68:1f:88:40:3d:12:
b3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:50:03:FB:1D:BC:85:DB:91:D2:8E:C7:96:67:8B:AE:37:6F:6F:E7
X509v3 Authority Key Identifier:
keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/MVAD-x28hduR0o7HlmeLrjdvb-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.168.0-128.127.170.255
Signature Algorithm: sha256WithRSAEncryption
7c:65:a9:ef:41:3b:a2:0d:08:1a:61:12:32:94:cc:1d:24:fa:
12:f1:ed:b9:61:42:e0:de:0e:4b:73:0a:98:4e:a1:5f:98:5b:
a1:e5:9d:00:86:ea:fa:9d:ce:1b:35:8e:d2:5d:67:68:28:c2:
90:01:b9:c0:a3:f5:2b:8b:8d:e2:57:51:17:e9:40:ef:d7:e9:
0f:3e:40:b4:f0:0b:c7:b9:af:9a:5b:f7:44:e2:74:21:66:29:
20:b1:a6:59:15:b3:9c:2b:85:6c:48:d4:ae:77:b9:35:94:54:
58:22:ff:63:90:5b:64:1b:f4:3d:2d:fb:d2:ff:49:0f:51:bc:
d0:9c:0f:4e:b2:c4:fc:c7:8a:56:f3:c9:d9:10:a0:75:73:1f:
1c:3a:92:c6:3c:95:ba:c2:f3:36:74:cf:ef:fc:8d:2f:1a:ad:
02:e5:ac:f4:2d:cd:17:ca:38:3a:cb:c9:13:5b:e4:a4:6d:22:
a8:15:0a:20:02:fc:5d:d7:46:11:e1:ca:29:41:49:d1:44:52:
6c:92:63:67:2c:17:2c:8f:95:4c:b4:46:41:d0:55:32:ef:7d:
9d:9a:3b:65:f3:25:c4:00:71:a3:24:bc:33:ac:95:d9:0d:a1:
ba:0a:2a:e1:a9:7c:b2:1d:b5:ee:8c:84:c0:90:86:9a:49:3b:
cc:33:29:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:55 2024 by rpki-client on console-ams.rpki-client.org