Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/MObDD0t-9Hn0DtEyuZmJ2UQFpIk.roa
File: MObDD0t-9Hn0DtEyuZmJ2UQFpIk.roa (raw, json)
Hash identifier: ykiCkGD6THpuNfC7mGnoMfclyN3FaUFf7a/XUnqD56E=
Subject key identifier: 30:E6:C3:0F:4B:7E:F4:79:F4:0E:D1:32:B9:99:89:D9:44:05:A4:89
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01892BCC1A1A3E7C3757FEC47AF7337168EF
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/MObDD0t-9Hn0DtEyuZmJ2UQFpIk.roa
Signing time: Thu 06 Jul 2023 15:22:23 +0000
ROA not before: Thu 06 Jul 2023 15:22:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52468
IP address blocks: 94.125.137.0/24 maxlen: 24
46.29.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2b:cc:1a:1a:3e:7c:37:57:fe:c4:7a:f7:33:71:68:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 6 15:22:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30e6c30f4b7ef479f40ed132b99989d94405a489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4c:d3:62:f2:30:ff:a5:8e:5b:a7:0e:fe:73:
3c:ee:24:1d:8d:62:23:b5:57:18:b0:28:f9:d9:70:
a3:81:c7:47:2a:87:fe:d8:fa:d1:aa:52:0a:53:54:
23:a0:b5:7f:2c:0d:de:5c:95:81:38:d0:9a:11:80:
4d:46:b3:6f:5b:db:1e:7d:0f:60:df:cd:ac:53:30:
59:fe:4f:f7:04:25:41:6d:f2:a8:ba:9b:00:ee:9d:
1d:da:fd:b6:1e:bc:19:6c:29:69:76:90:3c:ec:0c:
07:ff:58:bc:e0:03:c7:25:86:d5:56:c2:50:76:01:
af:51:fd:d3:fb:cb:c3:24:02:e1:84:47:41:b9:82:
17:31:2d:cb:0d:29:e6:b9:32:86:0b:ad:ba:b1:3e:
f6:0a:34:03:19:8a:e5:93:33:4e:e4:c0:f2:0c:25:
ba:ec:48:51:25:fa:2a:62:e8:0f:b1:64:bf:cc:8a:
ef:45:ea:0a:6a:7f:b0:af:ae:f3:dc:35:08:fa:f7:
ca:2e:d6:0c:5f:2d:95:83:02:17:b9:13:1d:1b:af:
32:93:e2:7c:31:ec:7b:cd:65:a8:e3:92:d8:d4:96:
c5:35:ad:58:87:6b:04:5e:91:9a:39:20:6d:de:f4:
1f:78:ce:f4:ec:fd:0b:da:67:e1:79:31:d8:39:1d:
d5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E6:C3:0F:4B:7E:F4:79:F4:0E:D1:32:B9:99:89:D9:44:05:A4:89
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/MObDD0t-9Hn0DtEyuZmJ2UQFpIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.28.0/24
94.125.137.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:60:ec:b2:9e:a0:7d:c7:eb:c3:8e:3d:08:95:38:3e:54:ee:
82:0d:a2:21:14:25:f6:de:3e:a3:3f:9b:63:52:5c:7d:80:6d:
1e:27:61:e5:3f:1d:b1:6f:7b:1b:dc:00:77:c6:3e:03:2b:ad:
0f:e5:97:82:5e:b9:75:31:1a:ea:02:7b:8a:2c:4c:8d:0e:73:
8d:a8:64:1d:3c:67:89:5c:d7:3a:9d:81:eb:6f:c4:f9:00:d4:
51:e9:f1:95:84:02:71:bb:5d:69:bb:02:7c:c5:88:a5:6f:53:
c2:df:f0:da:50:ab:7d:96:d3:63:a6:76:c2:88:8c:a5:e5:a6:
89:ee:09:52:01:46:40:e2:70:de:e8:71:56:49:8e:85:11:b5:
6a:0f:42:ef:1a:17:9a:1e:ed:9e:24:36:0e:09:5c:38:d7:af:
85:95:1d:ed:34:c5:66:0e:c4:7d:dd:e6:fb:6e:01:4a:9f:3b:
5a:e2:6f:85:23:c7:99:59:e2:6c:99:27:25:72:15:bc:c2:88:
16:37:f2:8b:bc:98:71:01:e5:f8:0c:66:52:e9:fe:69:a1:02:
e3:25:2a:a7:ff:b5:4d:33:39:69:7a:50:87:76:3f:8a:1b:08:
21:be:1e:8e:8b:e3:64:18:92:2c:50:68:59:ab:c3:54:4b:71:
4e:06:62:92
-----BEGIN CERTIFICATE-----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Generated at Sat Aug 26 18:14:34 2023 by rpki-client on console-ams.rpki-client.org