Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/MCOBspIr2iUR_1nuY9VasMbbBVM.roa
File: MCOBspIr2iUR_1nuY9VasMbbBVM.roa (raw, json)
Hash identifier: b6DqDDOezXIMjIb8E4S6mC/sA5wHcC9mVR3ZsWhUVnk=
Subject key identifier: 30:23:81:B2:92:2B:DA:25:11:FF:59:EE:63:D5:5A:B0:C6:DB:05:53
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 01856E2FA0C3A303472FF2A5EC23BF9F13B3
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/MCOBspIr2iUR_1nuY9VasMbbBVM.roa
Signing time: Sun 01 Jan 2023 16:34:53 +0000
ROA not before: Sun 01 Jan 2023 16:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61962
IP address blocks: 46.143.244.0/23 maxlen: 23
46.143.244.0/24 maxlen: 24
46.143.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:a0:c3:a3:03:47:2f:f2:a5:ec:23:bf:9f:13:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 1 16:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=302381b2922bda2511ff59ee63d55ab0c6db0553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:e2:8c:3d:e5:bf:6e:b5:49:47:c9:d5:3a:
fb:0b:f4:da:7e:4c:44:c5:8a:41:b3:3b:8c:75:77:
33:4c:ba:a1:75:df:bc:92:37:d9:8d:0c:21:78:08:
ef:85:81:14:35:9b:a8:f0:60:05:5e:23:4b:e7:47:
7c:5b:41:9f:7d:02:50:c7:f0:9e:e1:0b:94:24:c9:
6c:ad:f8:8d:30:a3:c9:41:5f:0c:8d:7b:44:af:d6:
a2:d5:15:8d:d2:40:f6:f7:b2:22:78:d4:33:98:1a:
ef:b1:79:5f:65:5b:fc:64:11:a9:3f:8d:cd:21:47:
72:43:e1:84:fa:0a:74:41:5a:47:26:39:8a:69:33:
8a:1c:49:56:63:5c:f9:b9:0e:8c:83:63:e0:19:64:
41:cb:8c:45:cf:48:16:16:c0:7c:82:80:52:7c:1d:
2b:8d:13:06:58:59:bc:06:e3:24:e2:05:f1:f0:d0:
ee:3f:a4:68:fd:c5:12:36:e0:28:62:d4:e7:17:a4:
98:32:48:94:9f:ec:8e:47:88:0d:e4:6b:a7:01:2c:
84:71:b5:41:29:34:03:8b:b4:5d:d3:f0:ff:63:01:
d4:c7:fd:3c:06:8e:53:0c:92:32:d5:af:8b:3e:0c:
85:3e:55:88:0b:0e:d6:77:3a:69:d2:de:64:d3:71:
ab:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:23:81:B2:92:2B:DA:25:11:FF:59:EE:63:D5:5A:B0:C6:DB:05:53
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/MCOBspIr2iUR_1nuY9VasMbbBVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.244.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:1f:00:00:08:e7:a1:90:07:ca:02:0c:73:8d:57:86:b2:17:
c6:13:00:cd:f6:90:58:a7:d9:28:eb:61:cd:58:b5:42:0a:b8:
f3:ac:60:de:b4:d1:4b:6f:df:ae:66:2b:6d:81:c1:10:33:7a:
c9:5a:1d:e7:d1:5e:d4:19:23:b1:d5:00:ba:b0:72:8c:a2:59:
22:36:2b:60:4f:a4:7e:dc:c0:d6:25:29:b6:36:cc:6a:c2:8a:
9b:9e:97:1d:04:00:85:08:ca:32:88:c9:8c:c8:3d:83:95:7b:
8d:4b:f2:e5:50:47:71:8d:e9:d3:d9:2c:a7:f0:c9:ae:7a:ef:
8b:96:90:9a:e7:c6:a7:11:eb:0a:07:d7:2e:63:7c:60:13:93:
53:6f:97:f3:b1:84:85:fc:a1:51:9f:41:46:33:7b:9f:59:dc:
62:fa:e5:9d:15:0c:c5:a3:65:15:c5:22:13:8e:e5:93:68:c9:
f8:ab:c4:bd:23:28:03:2e:bf:a4:f2:07:23:1e:2b:22:ef:77:
24:55:19:39:af:7b:a4:01:2c:14:00:ca:46:79:64:9d:c3:32:
2a:5e:62:9d:9d:cb:e3:38:67:56:12:73:8d:29:39:8f:cd:8a:
0d:c6:75:ee:f4:77:43:6e:b6:d9:33:aa:82:a0:fb:e1:7b:fb:
cf:81:0d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:02 2024 by rpki-client on console-ams.rpki-client.org