Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/MEvdHyoWyeU5YDxhfwDG77boGdI.roa
File: MEvdHyoWyeU5YDxhfwDG77boGdI.roa (raw, json)
Hash identifier: dXh1Hf4pZB8O7S29bw3GipL1VxPSauUDOE9JzNdrtMI=
Subject key identifier: 30:4B:DD:1F:2A:16:C9:E5:39:60:3C:61:7F:00:C6:EF:B6:E8:19:D2
Certificate issuer: /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Certificate serial: 01856DDD52D89389AA2ADF9F3AE26A904A05
Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/MEvdHyoWyeU5YDxhfwDG77boGdI.roa
Signing time: Sun 01 Jan 2023 15:04:59 +0000
ROA not before: Sun 01 Jan 2023 15:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62094
IP address blocks: 185.48.80.0/22 maxlen: 24
5.154.244.0/22 maxlen: 24
2a01:9560::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:52:d8:93:89:aa:2a:df:9f:3a:e2:6a:90:4a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Validity
Not Before: Jan 1 15:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=304bdd1f2a16c9e539603c617f00c6efb6e819d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5e:e8:93:e3:44:41:dd:d7:b5:66:12:7a:73:
65:10:dd:93:9d:34:86:5a:c9:74:6b:5e:bd:2b:d4:
b4:49:b5:cb:af:41:f3:a6:ec:3d:24:3c:d8:7f:7b:
cd:ff:b3:51:f6:e6:2a:62:d2:e3:e2:69:70:09:ab:
e0:72:b6:ee:37:ba:de:45:33:20:ed:5c:bf:18:4d:
b0:20:58:0c:1b:6c:98:f1:c4:1a:e9:22:17:ac:f2:
80:ec:d9:8f:bb:5d:91:bb:7a:93:a3:d5:99:cc:7d:
88:f2:fa:00:52:72:44:2c:8b:d2:e6:19:1e:c9:10:
a8:59:d1:5b:b7:df:5d:08:f5:78:de:50:9a:26:2c:
65:84:5f:7e:12:ae:fa:f8:f5:89:aa:d2:2d:c6:4e:
d3:b8:6d:f4:24:17:98:6a:ac:12:f7:89:36:4a:97:
1d:dd:f7:a3:98:06:c3:1c:1c:18:58:e7:41:5f:c4:
da:c6:49:c0:1b:50:91:94:7f:4b:d6:8f:db:e0:f5:
c9:2f:e5:c1:b7:59:50:e0:f0:f2:ba:48:69:a5:e0:
cf:a7:c7:3b:83:e5:3b:a2:db:45:4b:a8:ce:3d:88:
b7:aa:c1:43:96:c8:c9:7e:a8:c8:0d:0f:6a:7f:37:
da:88:e3:0b:02:e4:7f:02:6c:9b:f7:a4:6a:a4:ff:
01:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4B:DD:1F:2A:16:C9:E5:39:60:3C:61:7F:00:C6:EF:B6:E8:19:D2
X509v3 Authority Key Identifier:
keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/MEvdHyoWyeU5YDxhfwDG77boGdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.244.0/22
185.48.80.0/22
IPv6:
2a01:9560::/32
Signature Algorithm: sha256WithRSAEncryption
ba:33:c5:92:1d:43:bf:b7:6a:b4:b8:bd:58:8e:e5:65:18:8e:
de:15:f1:25:b5:1b:a5:a6:e7:24:ed:7c:b4:a7:73:bf:a8:c2:
db:96:52:8e:b1:4a:cf:a7:8d:6b:95:4b:9b:46:32:58:25:d2:
0b:0f:1c:9c:69:c8:5c:fa:26:99:22:e7:12:e5:b4:a3:5a:f1:
0b:e7:8a:e9:75:43:3b:f3:db:11:60:b0:f6:15:e2:8c:c7:26:
a1:e4:0a:72:7b:d6:3a:40:0d:25:fe:a7:0d:b6:ef:16:1e:a0:
90:2c:49:c9:01:73:ac:1d:40:cb:c9:a0:68:05:b7:9b:ca:90:
c3:33:8c:98:63:f9:bc:33:35:3b:0b:66:0e:6f:88:9d:a3:2f:
e0:9e:6b:3b:aa:05:0a:b2:19:eb:37:42:99:af:1c:04:24:1b:
a8:e9:8b:1c:e3:64:a0:24:22:ce:e8:fd:69:f4:f4:b6:74:aa:
03:02:6c:5a:06:06:65:4a:a1:35:f5:be:4f:a6:bb:86:6e:3c:
95:09:81:e2:46:26:91:3d:29:6b:32:89:3f:e7:89:d5:ec:ad:
1f:07:21:21:bf:61:24:55:74:10:f8:ac:d7:c6:d1:ad:30:37:
e6:5a:23:7e:fc:73:f2:b2:af:5b:c9:c6:2c:6b:9e:3a:79:4e:
04:47:9a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:00 2024 by rpki-client on console-fra.rpki-client.org