Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/MLL37Fy2sTCw_sZl-dShBVpXHb8.roa
File: MLL37Fy2sTCw_sZl-dShBVpXHb8.roa (raw, json)
Hash identifier: u+RA0CllIIJ06OrHunVlb1cmkx1QQvogt+rgBP9b8RI=
Subject key identifier: 30:B2:F7:EC:5C:B6:B1:30:B0:FE:C6:65:F9:D4:A1:05:5A:57:1D:BF
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01856C5CA11E861881F65F66E5F6894482D2
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/MLL37Fy2sTCw_sZl-dShBVpXHb8.roa
Signing time: Sun 01 Jan 2023 08:04:47 +0000
ROA not before: Sun 01 Jan 2023 08:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 194.107.160.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:a1:1e:86:18:81:f6:5f:66:e5:f6:89:44:82:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Jan 1 08:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30b2f7ec5cb6b130b0fec665f9d4a1055a571dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:be:a4:a2:b4:ae:4e:8e:c0:47:b9:26:65:
3e:af:22:aa:23:e8:91:7f:24:5c:6d:1b:51:df:d8:
82:b4:1c:df:b5:77:31:d1:d9:13:a4:11:ce:54:53:
d0:8f:6a:33:9f:d6:5f:8d:7f:d4:50:6d:c6:10:c7:
eb:ea:2b:57:4f:49:14:dc:65:d0:3f:cf:cd:8a:b0:
82:00:82:ae:76:3c:26:70:08:a2:f3:06:60:8b:97:
ea:4d:86:d3:f7:cd:82:53:3d:87:ed:d7:f6:6a:87:
1f:b7:7b:a1:cd:a8:52:d2:a0:bd:da:b6:0e:53:19:
e9:6b:43:44:35:09:be:f8:89:3d:35:d5:a6:48:c3:
70:0c:34:64:fd:a4:53:ed:0d:c6:15:8c:3b:3f:1f:
fc:a5:8f:5e:19:23:0d:f4:c9:ee:b4:37:ea:e9:bb:
9a:af:a3:c9:6c:d0:dc:c6:1e:71:32:27:59:34:a2:
59:4d:1f:5a:6e:ab:42:a5:65:c0:ae:f5:00:4b:d0:
7d:a0:a5:ef:a1:6e:b3:83:3d:f4:d1:2e:a2:97:bf:
cb:dd:a2:eb:b0:c8:cd:ff:65:7c:5c:be:1e:15:95:
d0:86:00:8e:c3:41:61:2c:b8:2a:6c:ca:2a:35:43:
fb:36:34:c7:8e:bf:7c:79:92:6a:c3:76:ae:69:75:
25:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B2:F7:EC:5C:B6:B1:30:B0:FE:C6:65:F9:D4:A1:05:5A:57:1D:BF
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/MLL37Fy2sTCw_sZl-dShBVpXHb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.160.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:05:98:e3:93:d9:b8:ae:be:04:aa:ca:2c:cd:93:f5:63:9b:
69:6f:9e:e9:3f:66:56:05:ee:f7:d9:12:fc:a7:3b:52:e7:6c:
1d:df:30:38:3b:95:f6:b0:2c:d6:8e:db:31:49:ff:66:eb:08:
9a:3f:74:64:e1:1c:a1:4f:29:ab:8c:38:bb:ca:3e:8e:10:0f:
b5:78:c8:13:2f:1d:ac:ac:46:73:2e:36:43:35:54:89:42:08:
5b:9e:da:0e:0b:1b:fd:29:0b:85:e0:d7:83:db:98:6b:68:80:
de:3d:61:47:d7:06:fe:6b:bc:ab:d0:50:ea:8e:50:78:63:8d:
da:17:57:3c:c8:3c:38:b7:6c:d6:5a:b3:97:52:71:9b:d6:bd:
f9:16:8d:34:cc:0f:07:b3:12:ce:cd:c2:79:8d:0b:71:ae:fa:
68:51:71:45:f4:96:65:6b:2b:3d:d2:6b:c2:e0:83:6e:b0:d7:
8c:2f:34:db:de:79:06:79:c3:6f:ca:25:44:04:32:80:2c:05:
aa:b6:8a:42:8e:3b:2a:33:33:d3:79:16:1c:be:c0:b4:c5:51:
64:b3:7f:95:e2:66:28:a5:e3:12:e0:3b:54:29:36:41:81:45:
98:c0:a6:5a:e0:2c:e5:a3:02:02:af:cd:f1:34:32:cb:4d:7f:
f2:9b:a8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:41 2024 by rpki-client on console-ams.rpki-client.org