Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/MR13OpK3vP5orjTVjHHL6gk_-Y8.roa
File: MR13OpK3vP5orjTVjHHL6gk_-Y8.roa (raw, json)
Hash identifier: P5I+jPZ2PM+Une5RBzSil0h3h7oQqGVXLLqqnYPLA/E=
Subject key identifier: 31:1D:77:3A:92:B7:BC:FE:68:AE:34:D5:8C:71:CB:EA:09:3F:F9:8F
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 0186EA25705ED0579D9B474A9DC49D17DB18
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/MR13OpK3vP5orjTVjHHL6gk_-Y8.roa
Signing time: Thu 16 Mar 2023 11:19:27 +0000
ROA not before: Thu 16 Mar 2023 11:19:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211057
IP address blocks: 185.71.141.0/24 maxlen: 24
185.71.140.0/24 maxlen: 24
185.71.140.0/25 maxlen: 25
185.71.140.128/25 maxlen: 25
185.71.141.0/25 maxlen: 25
185.71.141.128/25 maxlen: 25
185.71.140.0/23 maxlen: 23
185.71.140.0/22 maxlen: 22
185.71.142.0/25 maxlen: 25
185.71.142.0/24 maxlen: 24
185.71.142.128/25 maxlen: 25
185.71.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ea:25:70:5e:d0:57:9d:9b:47:4a:9d:c4:9d:17:db:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: Mar 16 11:19:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=311d773a92b7bcfe68ae34d58c71cbea093ff98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0e:3d:d7:b0:7c:ff:8a:dc:27:24:18:c6:5e:
67:14:81:c8:83:31:70:df:d3:81:84:8f:52:88:64:
9e:b1:5e:09:56:46:9e:01:55:e0:6a:99:1a:64:f1:
07:e8:1a:8d:8e:2b:6a:e3:6a:d8:7b:99:de:4f:75:
f0:96:9e:26:a1:8f:46:79:ba:e8:2b:1d:ad:d0:0a:
a6:7a:9c:5a:29:91:aa:68:6e:75:32:24:2f:31:16:
0c:de:c9:59:49:6c:0b:ba:11:0c:6a:9e:d8:37:f5:
79:1a:b6:cf:a2:49:32:ba:f3:0d:97:49:82:10:08:
41:43:0e:02:98:c8:45:a0:a5:bc:65:99:4b:db:a4:
a4:3b:f5:a7:2b:63:ec:21:b8:0d:61:b8:f2:38:e3:
36:f6:2e:ef:13:49:75:93:e4:1b:35:b9:5f:b1:76:
86:6d:40:b5:42:e8:b0:c1:62:88:66:54:44:24:9f:
e5:63:a9:33:0e:54:7a:f3:b0:0e:54:74:e5:dd:f6:
e7:f2:8c:fd:52:15:ce:f0:80:e6:17:f6:07:8b:34:
8b:62:94:ec:48:83:ce:3b:85:75:6c:d6:ae:53:ef:
fa:64:fe:bd:df:5d:c8:e1:9a:0b:97:e7:a5:06:f6:
11:9e:ff:92:78:2b:53:b4:d9:68:e4:82:77:7f:4e:
42:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1D:77:3A:92:B7:BC:FE:68:AE:34:D5:8C:71:CB:EA:09:3F:F9:8F
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/MR13OpK3vP5orjTVjHHL6gk_-Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.140.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:59:b3:ae:56:e8:95:3e:e6:65:a2:87:ee:17:14:dd:4d:f7:
9f:7a:99:66:8b:48:15:33:f9:35:40:c9:78:cf:f6:cb:ed:67:
51:8f:74:64:0c:0f:a7:51:1c:3e:d4:36:e1:4f:64:40:a2:93:
3b:ef:30:96:23:13:79:79:82:24:a1:2d:40:b6:eb:bd:e2:1f:
72:6c:af:3f:ef:69:8b:46:98:0e:eb:19:2b:43:f0:bc:62:c0:
1c:3c:e5:8b:e7:b6:16:bc:f9:28:cb:30:b9:ee:7a:74:54:ff:
6a:29:0b:d5:1e:a4:1d:a9:38:87:3d:1b:6e:95:1e:f1:14:c8:
7f:ef:a5:e4:ee:2f:ec:8b:38:99:3e:27:f8:91:7c:2d:0e:bd:
35:fd:f3:c9:47:9c:69:e5:42:10:4e:45:7d:fa:4b:c4:b4:97:
3b:6f:a7:f7:f0:c6:94:d0:93:50:44:d2:1f:58:02:ff:87:d1:
18:1e:f0:17:47:23:b0:ae:99:20:9a:e0:75:9d:3c:7c:f0:56:
d2:ca:5d:e6:f1:a6:1f:b8:b5:09:a1:7c:c4:c5:96:29:43:7e:
e6:76:ec:20:5c:b7:a6:40:86:86:a4:be:a5:7e:85:b3:64:25:
92:1b:dc:f7:aa:1a:9d:e1:dc:b5:81:27:42:ff:d5:cd:8d:f5:
a9:67:c4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 4 10:47:17 2023 by rpki-client on console-ams.rpki-client.org