Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/MO7WXE1HJcP2oK7u99h0SoH9UbM.roa
File: MO7WXE1HJcP2oK7u99h0SoH9UbM.roa (raw, json)
Hash identifier: Jz3uwXUGJtLEYZB5CiapA2dp4JpbJ0zpi1P6HbdEdaA=
Subject key identifier: 30:EE:D6:5C:4D:47:25:C3:F6:A0:AE:EE:F7:D8:74:4A:81:FD:51:B3
Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial: 01894ED2481E3AA15704CE60CFED97447BC5
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/MO7WXE1HJcP2oK7u99h0SoH9UbM.roa
Signing time: Thu 13 Jul 2023 10:35:51 +0000
ROA not before: Thu 13 Jul 2023 10:35:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8258
IP address blocks: 195.64.224.0/22 maxlen: 22
195.64.228.0/24 maxlen: 24
195.64.231.0/24 maxlen: 24
195.64.254.0/23 maxlen: 23
2a02:2540::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4e:d2:48:1e:3a:a1:57:04:ce:60:cf:ed:97:44:7b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Validity
Not Before: Jul 13 10:35:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30eed65c4d4725c3f6a0aeeef7d8744a81fd51b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b4:3d:c6:18:53:8a:da:fc:5e:b9:d7:14:2a:
29:0e:28:6c:a1:1e:85:8c:a7:66:fa:5d:7b:3d:7e:
c4:7c:08:1e:4f:51:01:af:8d:30:9d:e8:c1:37:43:
1a:b0:d7:76:28:ee:07:ba:a7:d6:a8:bc:e6:b5:6a:
37:4a:45:c8:d2:82:76:94:4e:13:47:ab:8f:ae:38:
d1:46:26:18:04:99:f6:cc:1d:89:92:d7:ba:d7:3f:
30:b1:7a:04:d4:90:f2:da:73:4e:34:7a:c1:d9:89:
5f:b1:f0:f6:7f:62:f9:02:42:a7:d7:68:c2:8b:49:
7c:e3:17:60:d2:d3:e0:38:25:2d:ae:ef:86:51:28:
be:a3:3b:2b:40:54:61:6e:0a:91:3e:9b:ad:43:39:
9f:7d:48:70:b7:12:3b:9b:1b:c5:1a:d2:36:0a:4c:
74:aa:be:83:f2:05:76:55:d7:03:7c:dd:ff:26:81:
fa:d9:2f:c3:8f:c6:7f:ad:0e:db:24:da:5c:13:26:
11:a1:34:6d:73:31:67:b3:3b:48:b3:7b:35:de:31:
1a:d0:30:aa:66:8c:4d:3b:ac:0d:81:67:c8:2e:81:
ba:85:8e:27:e9:c0:7c:5b:ab:f7:7a:75:8f:eb:d9:
45:55:3f:9a:75:dd:4f:a2:d4:62:11:be:38:2f:3c:
f8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EE:D6:5C:4D:47:25:C3:F6:A0:AE:EE:F7:D8:74:4A:81:FD:51:B3
X509v3 Authority Key Identifier:
keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/MO7WXE1HJcP2oK7u99h0SoH9UbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.224.0-195.64.228.255
195.64.231.0/24
195.64.254.0/23
IPv6:
2a02:2540::/32
Signature Algorithm: sha256WithRSAEncryption
bc:f1:f0:0f:90:fc:61:3a:2c:6b:5a:f6:a4:05:e6:24:8f:5c:
bb:80:0e:57:9e:e0:a7:7e:64:9d:31:c8:be:35:f6:6b:0f:c1:
5f:fc:bc:92:e2:fa:86:ae:84:7a:2f:a8:24:15:30:2c:47:a6:
e9:c5:fe:3a:75:f1:75:62:6c:aa:29:45:a6:a6:3e:80:61:22:
b4:bf:5d:89:b6:d7:2e:89:ed:73:54:12:25:07:c3:27:6e:32:
df:8f:4f:fb:b7:90:bf:77:5b:47:de:14:9f:70:33:5a:cb:23:
27:2a:53:6a:92:2a:f3:5d:19:da:cb:d9:f6:a2:b3:1b:1d:df:
d6:3b:3b:8c:8b:58:f8:79:1b:55:a6:84:62:87:b0:93:1e:02:
30:63:4f:0d:d4:8b:5f:04:62:a9:32:29:94:30:b7:ae:46:50:
24:3c:8c:a4:d3:de:0b:6b:06:e9:4a:17:04:9d:6f:4b:ab:23:
de:ad:a9:f9:dc:5e:cd:e3:34:51:e4:2e:99:a1:66:06:29:ef:
41:c4:ca:de:ae:13:93:cc:fa:cf:f3:ef:60:97:1d:05:e3:44:
1e:6d:25:41:2f:ec:c1:d4:b6:56:25:8f:87:78:3f:5a:d5:13:
b6:c9:98:53:d5:8f:4b:e5:43:b2:92:1e:a8:45:0a:82:32:0d:
fc:a2:01:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:33 2023 by rpki-client on console-ams.rpki-client.org