Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/Mbnp-ynMPq1KRdICrsWoyU7hrs8.roa
File: Mbnp-ynMPq1KRdICrsWoyU7hrs8.roa (raw, json)
Hash identifier: YZawrG0fa0C7wtgdk4haqTEChW7aDSLwjGCkZaZ5Iq4=
Subject key identifier: 31:B9:E9:FB:29:CC:3E:AD:4A:45:D2:02:AE:C5:A8:C9:4E:E1:AE:CF
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 01859ABD0EDB6B1800B413A0D0AA7B56A11D
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/Mbnp-ynMPq1KRdICrsWoyU7hrs8.roa
Signing time: Tue 10 Jan 2023 08:12:39 +0000
ROA not before: Tue 10 Jan 2023 08:12:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.87.162.0/24 maxlen: 24
45.87.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9a:bd:0e:db:6b:18:00:b4:13:a0:d0:aa:7b:56:a1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jan 10 08:12:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31b9e9fb29cc3ead4a45d202aec5a8c94ee1aecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ef:9e:0e:bd:a9:81:18:20:14:9e:c4:80:e0:
d3:85:7a:99:a2:70:41:6e:ac:d4:b0:16:f1:fb:73:
e3:e5:f3:bc:ec:af:1a:79:a0:45:38:58:8a:04:67:
9e:a1:5c:7b:b0:80:22:d6:8e:47:5d:7b:55:3c:3b:
9a:9b:98:63:54:24:39:d6:ac:62:ac:cc:cd:5a:fa:
e5:f3:55:7a:6e:af:7f:05:32:94:82:5a:b8:b9:5e:
02:14:7e:07:73:3e:35:0e:5a:a8:07:f1:21:6b:b2:
c6:a3:12:70:b4:0e:24:2d:d4:5f:0e:73:36:bd:51:
2a:44:8e:4c:a5:aa:e3:dd:3a:f7:3e:fa:1b:a7:66:
57:42:27:a3:94:48:6f:2d:77:98:45:da:de:ef:f9:
91:2b:36:3f:bf:6a:89:e0:e1:bb:fc:1e:95:a5:b0:
fa:d7:ef:b4:9a:aa:0e:70:12:d1:59:d9:78:75:07:
cd:f2:72:c0:7d:42:e3:de:7b:c6:26:96:f7:9d:f9:
d4:28:9e:d3:a9:06:40:7d:43:f3:37:55:67:bf:50:
06:3b:28:5b:25:d7:d2:8c:91:f4:f1:1e:06:98:29:
fa:c9:e5:00:36:36:74:43:4d:14:b7:bc:27:57:01:
c8:f2:00:ba:db:54:33:0e:dd:c8:3a:c6:57:f8:ba:
22:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B9:E9:FB:29:CC:3E:AD:4A:45:D2:02:AE:C5:A8:C9:4E:E1:AE:CF
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/Mbnp-ynMPq1KRdICrsWoyU7hrs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.162.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:7d:7f:fb:6e:55:45:c2:65:ce:be:da:6e:11:c9:6f:b7:76:
7e:b1:d5:64:a1:f7:1c:24:e2:f3:7c:01:c2:e1:7c:a2:2e:34:
80:6d:2d:d8:ba:00:5b:0d:74:f6:0c:54:93:7a:37:00:d3:bb:
5e:ff:f4:6e:af:0e:48:da:9a:e8:7b:d8:b9:9a:0d:59:f8:91:
75:db:0b:75:7c:f2:6b:2f:a1:86:5d:6b:44:8b:cb:fa:68:0d:
1b:0e:02:b2:e2:fc:b3:81:14:5e:f5:49:47:f2:21:da:49:d0:
fe:95:24:26:4b:c8:44:54:b3:96:c0:8b:df:81:86:0a:48:18:
ef:92:57:c0:45:82:3f:b6:8f:60:47:a1:9a:f0:98:8e:cf:2f:
9b:ed:67:03:49:e9:b5:21:20:e7:89:9d:e7:8e:75:5d:c2:c6:
21:76:2e:d8:1c:2b:b6:4c:1b:5a:fc:e7:e0:e3:ba:2e:6b:5b:
94:07:85:52:26:80:77:63:2a:d2:03:fc:4f:94:e5:a8:d1:3f:
f5:57:f6:d6:dd:13:f8:22:20:66:6f:95:d9:6d:9f:77:17:d6:
d0:70:91:37:00:f9:2c:f1:dc:d8:17:39:6f:c0:d6:d0:3f:26:
1e:d5:7c:01:c6:62:54:9f:ff:5e:90:f9:3d:34:01:59:df:61:
78:45:40:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:26 2023 by rpki-client on console-fra.rpki-client.org