Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/msPsP_4U2GqIsJvKOPVM1oOYJCY.roa
File: msPsP_4U2GqIsJvKOPVM1oOYJCY.roa (raw, json)
Hash identifier: WJ2O1knhug/9DYXL/mJz5KsdrXrAIi2A+CLH8K7FWp4=
Subject key identifier: 9A:C3:EC:3F:FE:14:D8:6A:88:B0:9B:CA:38:F5:4C:D6:83:98:24:26
Certificate issuer: /CN=e9e9ad934f40594c9f1ba500495a93eeec3c6ce3
Certificate serial: 0185720C3E78904E9FE41AAAC7013BB9A966
Authority key identifier: E9:E9:AD:93:4F:40:59:4C:9F:1B:A5:00:49:5A:93:EE:EC:3C:6C:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6emtk09AWUyfG6UASVqT7uw8bOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/msPsP_4U2GqIsJvKOPVM1oOYJCY.roa
Signing time: Mon 02 Jan 2023 10:34:42 +0000
ROA not before: Mon 02 Jan 2023 10:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.253.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:3e:78:90:4e:9f:e4:1a:aa:c7:01:3b:b9:a9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e9ad934f40594c9f1ba500495a93eeec3c6ce3
Validity
Not Before: Jan 2 10:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ac3ec3ffe14d86a88b09bca38f54cd683982426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:2a:f3:c7:96:80:84:f5:97:82:e8:d2:c6:
2a:63:7c:8e:65:ed:f7:63:90:54:b5:8b:64:7a:85:
c1:0d:06:41:a7:d5:26:61:bb:b2:22:ec:e7:cc:dc:
f6:71:ab:aa:93:fb:18:74:67:f8:3c:fd:b5:ef:ac:
24:a2:b8:8e:6c:c0:cd:05:6e:7d:1c:cf:3a:42:75:
a7:b4:3f:f4:73:c2:9a:5a:15:85:f8:1e:6a:a5:70:
3f:64:39:81:2a:93:22:67:ce:c7:b4:8a:87:7a:89:
c8:2f:7d:c9:53:06:25:2c:ef:e7:f9:72:c6:ef:01:
3e:36:2b:2c:3e:80:2b:3a:c3:a9:89:99:b0:61:67:
90:a0:77:6e:f6:96:de:fc:80:90:e7:8b:49:cf:cb:
7d:95:1b:fb:ee:6c:cf:73:83:49:4a:59:98:eb:fa:
52:c3:ca:74:ea:6e:79:1b:80:68:50:ab:a5:2e:96:
59:47:c3:2e:4c:83:c7:52:d7:c9:15:63:ba:8c:1b:
46:bb:3f:26:bd:c1:dd:53:a8:1e:9f:c2:57:9a:0f:
9b:e1:44:c9:de:32:eb:9b:75:1a:e2:2b:38:e0:c9:
91:3c:02:e7:90:73:d8:57:6c:66:70:a0:10:64:24:
67:d4:64:7c:0e:56:1c:57:12:8f:40:34:89:c2:7e:
a9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C3:EC:3F:FE:14:D8:6A:88:B0:9B:CA:38:F5:4C:D6:83:98:24:26
X509v3 Authority Key Identifier:
keyid:E9:E9:AD:93:4F:40:59:4C:9F:1B:A5:00:49:5A:93:EE:EC:3C:6C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6emtk09AWUyfG6UASVqT7uw8bOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/msPsP_4U2GqIsJvKOPVM1oOYJCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/6emtk09AWUyfG6UASVqT7uw8bOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.56.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b8:9b:05:0f:bf:11:3f:96:0f:5d:a8:37:c5:04:7c:1b:a4:
d8:37:0a:34:15:21:78:46:c2:29:91:43:14:a6:2b:51:8e:ec:
8a:6a:27:85:46:fa:67:e7:b4:76:f0:85:9c:93:91:cb:4b:32:
49:91:48:c2:47:cb:b2:99:08:b9:f0:f6:2f:77:8e:22:8d:2e:
1e:72:4d:13:8c:6a:2c:68:99:4e:91:fc:e0:55:f4:52:0e:d3:
b9:d2:c6:d7:a4:80:9b:a2:08:ee:57:bc:7e:db:f5:8f:53:ec:
61:8d:44:a9:56:74:9c:ce:98:fe:ae:a0:36:60:03:db:c0:f0:
5c:6a:1f:91:ce:a1:ed:19:a4:6e:e3:f0:76:36:b6:a5:58:5c:
34:98:a4:0c:57:8a:a2:bf:51:29:3f:a8:28:4b:8d:16:bf:ee:
44:75:48:ff:17:a4:cb:10:aa:6e:35:df:4e:da:24:b3:13:a8:
28:84:62:a5:b0:65:a0:92:33:a9:24:93:34:95:8f:98:6e:e5:
3a:9f:75:95:29:a3:d6:0b:19:33:f5:63:54:1a:53:55:13:45:
20:86:f2:0b:6d:dc:3e:5c:28:15:f8:d3:0c:db:f0:8f:13:e3:
d0:65:68:eb:10:55:b7:a8:18:d7:d1:55:df:7b:57:89:2c:f7:
4e:c6:55:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:45 2023 by rpki-client on console-ams.rpki-client.org