Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/MoX-_bGhJmB4Z5GmfGp8WQqHCck.roa
File: MoX-_bGhJmB4Z5GmfGp8WQqHCck.roa (raw, json)
Hash identifier: h1+MZu2glwXegS8YWmKnv+H0bbOO+fHSMJ0n5hrWuVY=
Subject key identifier: 32:85:FE:FD:B1:A1:26:60:78:67:91:A6:7C:6A:7C:59:0A:87:09:C9
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 018E80A81E0E242B23024DCEA7435CAD8096
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/MoX-_bGhJmB4Z5GmfGp8WQqHCck.roa
Signing time: Wed 27 Mar 2024 16:04:45 +0000
ROA not before: Wed 27 Mar 2024 16:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 77.221.136.0/22 maxlen: 22
77.221.140.0/22 maxlen: 22
77.221.148.0/24 maxlen: 24
77.221.149.0/24 maxlen: 24
77.221.152.0/23 maxlen: 23
77.221.154.0/23 maxlen: 23
77.221.156.0/23 maxlen: 23
77.221.158.0/23 maxlen: 23
109.120.176.0/23 maxlen: 23
109.120.178.0/23 maxlen: 23
109.120.184.0/23 maxlen: 23
109.120.186.0/23 maxlen: 23
109.120.186.0/24 maxlen: 24
109.120.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 11:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:a8:1e:0e:24:2b:23:02:4d:ce:a7:43:5c:ad:80:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Mar 27 16:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3285fefdb1a12660786791a67c6a7c590a8709c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a8:13:94:d7:82:2e:5f:52:f4:b7:e1:0d:ff:
ec:e2:8f:7e:8e:a6:71:95:2f:62:97:c4:10:93:bf:
1e:f0:45:75:8f:de:0f:35:c6:2b:40:59:89:cb:b3:
bc:7c:1c:b0:4a:20:af:1c:02:af:8d:3b:c9:5b:17:
62:19:fb:20:ee:f0:4f:a1:02:15:b8:6e:a8:e3:7c:
f9:ca:c1:16:81:d5:26:ee:fa:0d:93:b3:9e:92:c5:
31:53:1f:c3:c3:b3:ed:29:bc:f6:1a:f4:c2:08:22:
0a:16:1d:da:a2:ce:0e:1b:72:84:b9:12:12:35:c2:
e3:9d:a5:24:c7:09:2c:fc:4a:33:59:7d:ee:f4:a9:
0e:ba:3b:60:dd:b5:ee:df:a7:16:9d:84:c4:a9:16:
d4:60:80:ae:e5:51:71:60:88:49:69:38:75:3c:b3:
33:91:49:66:ed:a7:b7:6a:38:42:d9:8a:09:3d:8b:
9a:56:e4:cd:d9:9a:da:5b:db:a3:e3:49:26:1e:31:
28:9a:e4:89:bc:53:10:07:54:57:7d:31:48:f9:c5:
e0:cc:ae:79:3f:f4:f5:f5:16:0f:ca:d6:70:35:0d:
32:52:ca:38:25:83:30:48:ab:6b:fd:3e:16:68:52:
38:36:46:36:3a:e8:cd:dc:73:3f:d6:69:ac:94:25:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:85:FE:FD:B1:A1:26:60:78:67:91:A6:7C:6A:7C:59:0A:87:09:C9
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/MoX-_bGhJmB4Z5GmfGp8WQqHCck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.136.0/21
77.221.148.0/23
77.221.152.0/21
109.120.176.0/22
109.120.184.0/22
Signature Algorithm: sha256WithRSAEncryption
95:7c:be:d8:3b:21:ad:a1:14:01:b9:89:d7:bd:c3:16:1e:c7:
e1:20:bf:9a:52:65:36:d9:a1:c0:21:b5:59:bc:78:f6:a9:53:
2f:f0:ad:e2:63:a2:31:c0:dc:14:f7:0a:67:a8:41:cb:a1:21:
04:52:22:6c:fc:86:80:86:79:1c:93:4e:fb:0d:7a:a9:cb:34:
54:04:14:22:3a:94:1d:66:ff:79:8c:89:75:6b:32:b2:1c:2f:
1a:e2:d8:95:a2:21:a1:43:25:9e:db:3c:67:62:ee:05:e8:76:
a4:ff:8b:de:16:9f:ae:c6:38:c4:e1:bf:88:13:0a:7f:9d:d3:
99:2d:71:30:cc:94:9a:1c:84:5f:e5:e5:52:ba:5a:70:b6:22:
c0:d9:0b:00:6b:17:ea:ba:d3:a4:10:d4:ae:9f:a5:05:b3:01:
ee:c1:b4:3b:be:9e:46:fb:6c:4b:17:b7:b1:de:50:9c:f6:a5:
31:75:10:93:21:a2:55:91:b0:46:c4:fc:07:1c:44:6d:5a:81:
36:ef:f4:0e:7b:29:90:68:33:0b:de:17:a2:aa:08:79:a2:bf:
9d:03:ab:c1:6f:05:e2:91:5a:6a:89:a6:d5:3b:c9:a9:9a:06:
df:18:da:20:3f:7f:fa:1b:e7:b2:a5:e4:c5:1d:f9:b7:79:47:
14:b6:ea:5b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAY6AqB4OJCsjAk3Op0NcrYCWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl
NmRlNWUwHhcNMjQwMzI3MTYwNDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjg1ZmVmZGIxYTEyNjYwNzg2NzkxYTY3YzZhN2M1OTBhODcwOWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6gTlNeCLl9S9LfhDf/s4o9+jqZx
lS9il8QQk78e8EV1j94PNcYrQFmJy7O8fBywSiCvHAKvjTvJWxdiGfsg7vBPoQIV
uG6o43z5ysEWgdUm7voNk7OeksUxUx/Dw7PtKbz2GvTCCCIKFh3aos4OG3KEuRIS
NcLjnaUkxwks/EozWX3u9KkOujtg3bXu36cWnYTEqRbUYICu5VFxYIhJaTh1PLMz
kUlm7ae3ajhC2YoJPYuaVuTN2ZraW9uj40kmHjEomuSJvFMQB1RXfTFI+cXgzK55
P/T19RYPytZwNQ0yUso4JYMwSKtr/T4WaFI4NkY2OujN3HM/1mmslCUp8wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFDKF/v2xoSZgeGeRpnxqfFkKhwnJMB8GA1UdIwQY
MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt
OTJjODFmMjJlNzEyLzEvTW9YLV9iR2hKbUI0WjVHbWZHcDhXUXFIQ2NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy
LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDTd2IAwQB
Td2UAwQDTd2YAwQCbXiwAwQCbXi4MA0GCSqGSIb3DQEBCwUAA4IBAQCVfL7YOyGt
oRQBuYnXvcMWHsfhIL+aUmU22aHAIbVZvHj2qVMv8K3iY6IxwNwU9wpnqEHLoSEE
UiJs/IaAhnkck077DXqpyzRUBBQiOpQdZv95jIl1azKyHC8a4tiVoiGhQyWe2zxn
Yu4F6Hak/4veFp+uxjjE4b+IEwp/ndOZLXEwzJSaHIRf5eVSulpwtiLA2QsAaxfq
utOkENSun6UFswHuwbQ7vp5G+2xLF7ex3lCc9qUxdRCTIaJVkbBGxPwHHERtWoE2
7/QOeymQaDML3heiqgh5or+dA6vBbwXikVpqiabVO8mpmgbfGNogP3/6G+eypeTF
Hfm3eUcUtupb
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:22 2024 by rpki-client on console-fra.rpki-client.org