Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/MD1S0pMMGRP-6FXzEjYpdZ89414.roa
File: MD1S0pMMGRP-6FXzEjYpdZ89414.roa (raw, json)
Hash identifier: pCDswLOLdGhi2s/TH6VRhfIiyAl7MLxPqbwqt1IpLXg=
Subject key identifier: 30:3D:52:D2:93:0C:19:13:FE:E8:55:F3:12:36:29:75:9F:3D:E3:5E
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01889B4C0BA96A9851F660AF7233FE6C558F
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/MD1S0pMMGRP-6FXzEjYpdZ89414.roa
Signing time: Thu 08 Jun 2023 13:57:12 +0000
ROA not before: Thu 08 Jun 2023 13:57:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43072
IP address blocks: 185.65.201.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9b:4c:0b:a9:6a:98:51:f6:60:af:72:33:fe:6c:55:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jun 8 13:57:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=303d52d2930c1913fee855f3123629759f3de35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:37:6a:c2:ac:f1:c8:42:82:9f:30:d2:f5:
8d:76:39:c8:38:a1:32:04:07:b4:2a:d6:80:42:92:
e9:47:13:44:e4:73:99:dc:4e:0d:23:0f:fa:e0:0e:
6f:cf:85:d0:67:37:5c:1c:f6:d3:c3:87:3b:33:91:
32:db:88:78:1e:47:81:12:b8:f6:c4:be:dc:5f:a8:
27:46:42:fd:4d:3e:2e:52:9b:76:71:f2:fb:3d:18:
b7:1b:99:1e:32:a6:6c:96:75:03:f5:b8:38:f7:92:
4c:e4:b7:9a:a1:2f:77:74:65:56:59:8b:39:06:30:
4c:ce:e0:fa:5c:29:43:1c:ac:25:c7:98:52:57:c5:
5a:ca:b9:d2:43:ca:39:64:5d:00:02:1d:c0:9e:ac:
f1:7f:f5:2b:ac:c7:fd:85:33:ac:ae:bc:fb:46:94:
68:dc:43:f9:17:0a:83:0d:dd:e8:07:84:3b:c9:5e:
2e:88:47:1a:0c:12:b8:be:db:19:06:16:b2:61:06:
59:0f:9c:34:2d:75:73:d8:44:ed:16:c5:09:5a:2c:
59:5c:41:5c:96:a9:2c:b2:48:ab:11:74:2f:3e:d0:
52:4a:81:9e:fd:0c:8e:89:c8:cd:c0:0b:c6:81:6a:
94:47:1c:dc:b3:45:f8:db:13:f9:e9:37:85:3b:cd:
9f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3D:52:D2:93:0C:19:13:FE:E8:55:F3:12:36:29:75:9F:3D:E3:5E
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/MD1S0pMMGRP-6FXzEjYpdZ89414.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.201.0/24
Signature Algorithm: sha256WithRSAEncryption
55:02:ce:52:e4:77:1c:3f:21:ac:0b:67:03:8c:08:f3:07:0a:
43:b5:83:ef:91:12:9b:1c:3b:f7:16:81:c0:42:a1:3d:06:96:
8b:b2:e4:bb:73:83:29:ec:f2:6f:13:17:af:f3:a3:20:2f:20:
1d:c5:4f:1b:fc:f9:fc:17:85:84:2a:0e:b6:79:c1:c2:21:6d:
1e:7e:ce:b0:12:a7:c3:38:27:91:cf:11:2c:7a:8f:4a:96:8c:
c6:64:75:00:ba:72:41:ce:53:e8:28:80:1a:4c:e0:3c:fa:e5:
d9:70:03:db:cc:f1:32:66:1f:c5:c9:3d:13:bb:51:e4:64:4e:
6a:ae:d2:aa:60:08:57:cc:9f:e1:c9:a1:f1:00:d6:04:c0:d8:
cd:e6:a7:45:23:6f:78:02:d5:13:fc:f6:26:25:37:77:5e:df:
0b:db:7c:92:6e:5c:25:89:5d:45:fa:a4:bd:35:49:92:24:20:
04:df:d6:aa:05:ce:05:68:62:8d:00:35:09:5b:34:a5:6f:23:
87:80:6c:8e:5b:ab:cd:7e:8b:7d:bc:d3:b0:02:4b:40:d5:a4:
3e:7b:e1:61:91:8e:54:7b:12:60:33:65:d1:86:bc:0c:f0:8e:
0e:93:b5:e1:32:d2:46:82:28:7a:b4:b4:28:70:90:92:15:6d:
6d:2f:5e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:02 2023 by rpki-client on console-fra.rpki-client.org