Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Morrf-4LvQ0uJo1KpWfVHf9TFWQ.roa
File: Morrf-4LvQ0uJo1KpWfVHf9TFWQ.roa (raw, json)
Hash identifier: WkjtuVRyTkuoSvyQfY83UhVxbEkQk4fVZU/sirHa7O0=
Subject key identifier: 32:8A:EB:7F:EE:0B:BD:0D:2E:26:8D:4A:A5:67:D5:1D:FF:53:15:64
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 01856CAF091FBD7EF36178E2D616A207C847
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Morrf-4LvQ0uJo1KpWfVHf9TFWQ.roa
Signing time: Sun 01 Jan 2023 09:34:48 +0000
ROA not before: Sun 01 Jan 2023 09:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 85.208.46.0/24 maxlen: 24
85.208.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Apr 2023 08:27:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:09:1f:bd:7e:f3:61:78:e2:d6:16:a2:07:c8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 1 09:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=328aeb7fee0bbd0d2e268d4aa567d51dff531564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:75:7c:4a:4e:97:5e:b9:ef:f0:82:a4:87:
f6:ad:54:4d:10:45:56:d2:9a:fc:37:fe:85:57:fc:
55:c7:a4:09:fd:99:a6:9b:c6:23:21:66:f8:a4:93:
5b:61:6f:f1:20:d6:c8:b3:5a:ad:33:7c:6e:35:e9:
61:25:ab:65:0f:90:7a:ef:08:7d:fa:c1:bf:16:1f:
1f:94:a2:01:07:bb:ca:36:57:2f:f0:7b:18:12:51:
ef:9b:ad:7c:27:71:f3:b6:a0:e1:ff:18:63:b5:bc:
aa:ed:6e:87:00:63:0f:fd:d2:4b:26:32:da:10:e2:
3a:bf:11:20:fc:0f:6e:b0:25:2c:98:0d:34:bb:77:
df:7c:cf:09:4a:76:72:ee:dd:8f:ff:9b:1c:d6:fa:
8a:66:a4:9d:d7:9e:5d:c6:c0:ce:39:76:42:cd:3e:
9a:7d:d2:33:2c:7c:43:41:27:d7:fc:d0:f2:d1:1e:
59:92:b4:39:70:b3:5d:86:59:a7:f7:ca:54:6e:91:
b9:4a:1f:38:e0:78:01:d2:9e:76:47:78:c0:9f:21:
cf:5e:a8:d9:61:2b:52:5a:aa:ff:e1:df:46:c4:0b:
c8:e7:02:b3:d6:68:29:49:c5:58:14:74:dc:ce:d2:
d9:1f:54:2c:62:10:25:4d:5b:f5:6f:e2:68:72:8f:
fc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8A:EB:7F:EE:0B:BD:0D:2E:26:8D:4A:A5:67:D5:1D:FF:53:15:64
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Morrf-4LvQ0uJo1KpWfVHf9TFWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.45.0-85.208.46.255
Signature Algorithm: sha256WithRSAEncryption
25:63:5d:3f:ef:8d:01:ba:66:ca:ef:5c:24:52:f7:5c:07:71:
ad:c7:3b:19:cc:be:32:b4:0c:69:da:4b:02:51:03:eb:2b:5b:
36:54:37:90:4e:2a:f1:bd:4f:aa:2b:96:e3:be:98:7e:58:97:
ce:01:97:dd:15:60:4e:04:51:66:c5:09:df:9d:a4:29:cc:91:
cd:a8:f2:20:ed:fa:4c:4b:7f:18:83:b1:c9:68:35:31:63:4a:
8b:cd:f5:43:10:43:7d:6d:10:30:6d:54:bb:83:59:0f:4d:6a:
c7:a0:94:07:d6:8b:11:e9:2d:f6:31:f8:ce:44:bf:ad:f8:2b:
6d:f3:18:cc:3a:4b:f2:22:0b:37:df:59:11:e7:1d:7e:ef:cf:
52:6d:39:0e:e4:c1:b2:9d:e3:f3:4b:39:eb:57:7c:ce:16:6d:
bf:a1:72:ba:0e:0b:45:fe:ff:9a:37:4f:be:7d:42:86:55:09:
c6:c3:58:3f:19:9f:ae:ad:4f:8b:a9:e1:93:11:92:48:3d:f9:
ad:25:d4:cb:44:3c:90:61:77:61:f6:ff:73:ad:e1:46:dd:b9:
c4:fe:83:b6:2e:e5:d8:d5:50:e7:e1:1a:46:ce:d7:42:4c:17:
e3:d0:e9:03:90:56:b3:9b:40:a5:75:8a:f2:4b:87:20:5a:c6:
6f:cb:c3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:23 2024 by rpki-client on console-ams.rpki-client.org