Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/MlFs4xLETQBXuIyLFO0cycsUo1Y.roa
File: MlFs4xLETQBXuIyLFO0cycsUo1Y.roa (raw, json)
Hash identifier: aQwpidJB25XPgNQab2sV7Rqhmsm3CHaCLHf9DRtDwuQ=
Subject key identifier: 32:51:6C:E3:12:C4:4D:00:57:B8:8C:8B:14:ED:1C:C9:CB:14:A3:56
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018A04D3CEDED6D2A89D7C348AC63AB10116
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/MlFs4xLETQBXuIyLFO0cycsUo1Y.roa
Signing time: Thu 17 Aug 2023 18:48:24 +0000
ROA not before: Thu 17 Aug 2023 18:48:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 85.208.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:04:d3:ce:de:d6:d2:a8:9d:7c:34:8a:c6:3a:b1:01:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Aug 17 18:48:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32516ce312c44d0057b88c8b14ed1cc9cb14a356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:2d:46:6f:63:19:4d:4e:b2:d6:d2:1b:9d:
35:e1:48:7f:8a:b9:5f:ee:e5:bf:67:08:80:76:a3:
55:fe:a9:2b:20:d4:84:8d:d1:ba:3f:40:12:70:c2:
67:e4:bd:56:6d:d6:49:2c:2f:9e:61:7e:58:16:8c:
19:52:fa:1d:f2:94:e9:b0:38:9e:2b:89:9a:ea:dd:
4d:c7:5c:40:07:c4:ed:0f:6a:1d:a2:9c:99:ea:10:
01:27:83:49:64:5d:14:65:4e:4d:a0:84:2c:5c:1f:
69:3f:f7:a9:cb:0e:61:ea:7b:c6:7e:59:9f:2e:50:
fc:af:2c:21:9d:1a:fd:b1:9a:e5:8c:20:e7:fb:be:
49:e6:ea:aa:a6:9d:d3:58:f2:cf:c7:78:a3:3c:99:
fa:0d:a9:c0:95:99:fc:52:8b:43:23:97:a4:b1:5b:
bc:31:8f:45:37:77:28:42:b6:14:cc:21:20:8b:d9:
e0:59:06:6a:9d:9b:56:21:21:1e:c3:87:05:9a:b2:
e5:a2:ae:0d:4a:75:f2:9f:9f:dd:d5:e3:60:ba:6d:
98:b3:a7:dc:1e:ab:ce:79:36:20:7b:17:eb:4a:3b:
f9:9c:d3:58:eb:c8:dd:f8:86:72:02:da:9b:e4:7c:
ea:28:18:ec:1a:31:ba:fc:64:d0:24:7f:a3:2d:b7:
c4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:51:6C:E3:12:C4:4D:00:57:B8:8C:8B:14:ED:1C:C9:CB:14:A3:56
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/MlFs4xLETQBXuIyLFO0cycsUo1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.46.0/24
Signature Algorithm: sha256WithRSAEncryption
94:8b:4c:f0:37:77:77:fe:ff:b9:e3:26:77:64:70:c8:01:c6:
77:ab:d4:e9:97:f9:2e:f4:78:44:c2:08:84:8d:7b:9b:8f:80:
75:9f:20:e3:d5:de:c9:56:40:00:f3:3e:f8:33:fe:47:9b:81:
33:f7:98:a3:26:ff:58:fa:23:f7:be:1b:df:80:2b:dc:93:83:
d7:55:3e:75:9a:6b:2a:7b:f7:72:96:ef:39:22:7d:97:77:02:
bf:7e:1b:d9:36:3c:fc:70:3c:c2:e1:ea:a3:34:59:fa:42:64:
63:02:39:97:fa:ea:24:6d:0a:7b:55:d1:66:26:cf:38:3c:a8:
2d:4f:32:74:13:f8:67:ad:7e:7d:27:9b:b5:95:a3:e4:10:d4:
02:37:47:25:61:63:1e:2d:83:74:66:8e:f2:62:4b:6a:6d:c6:
32:49:37:48:fc:0f:e8:5e:e2:27:6c:2f:e7:c1:05:3e:6e:90:
4c:bd:cd:b6:5f:96:88:4f:d0:7a:ce:06:f3:07:7e:bd:49:04:
07:55:1e:fa:0b:b6:7e:0a:8b:5d:e4:37:cd:17:53:29:cc:82:
36:62:0c:71:e2:ad:3b:3a:2b:f4:fa:cb:2e:f1:1d:ce:ff:d1:
72:8c:f0:40:e7:14:ca:74:b8:da:cb:d7:53:42:04:67:81:4d:
38:60:19:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 21:03:45 2023 by rpki-client on console-ams.rpki-client.org