Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/Muc7eAjKJJ-Ft-6I_rYBen1OhOE.roa
File: Muc7eAjKJJ-Ft-6I_rYBen1OhOE.roa (raw, json)
Hash identifier: hiK+L+oxSwAuMJBBBcgwTQ05lznEVDJwY1t7Qtw6QHQ=
Subject key identifier: 32:E7:3B:78:08:CA:24:9F:85:B7:EE:88:FE:B6:01:7A:7D:4E:84:E1
Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Certificate serial: 01860B7BDCE727AE9344B7A404214C5C322C
Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/Muc7eAjKJJ-Ft-6I_rYBen1OhOE.roa
Signing time: Wed 01 Feb 2023 05:38:32 +0000
ROA not before: Wed 01 Feb 2023 05:38:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47237
IP address blocks: 195.216.237.0/24 maxlen: 24
95.87.64.0/21 maxlen: 24
185.117.148.0/22 maxlen: 24
194.152.36.0/23 maxlen: 24
2a0b:d7c0::/30 maxlen: 31
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0b:7b:dc:e7:27:ae:93:44:b7:a4:04:21:4c:5c:32:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Validity
Not Before: Feb 1 05:38:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32e73b7808ca249f85b7ee88feb6017a7d4e84e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:4e:06:15:88:5a:f7:d1:41:47:6c:dd:49:
7c:ee:17:8a:34:75:71:9d:f8:89:0b:7c:b4:b6:61:
d3:7b:3b:42:8c:b8:28:33:be:69:fe:04:fb:7e:65:
80:0d:5a:f2:00:f5:58:e9:bc:44:26:0d:f7:d0:0b:
ef:3a:27:4c:a4:d6:eb:6e:b1:49:29:34:c5:76:5d:
71:e6:8c:f2:06:6f:ea:39:c6:a4:b4:52:4f:e7:60:
aa:f7:3f:56:a0:a4:69:e3:b2:b8:ee:50:68:5b:05:
e6:9c:e1:2a:94:89:db:86:2c:77:f8:76:00:b7:15:
84:00:07:6c:cd:0e:1a:0b:cf:4b:f2:e5:89:d1:02:
62:0d:c2:a0:5a:6c:1c:62:d1:c3:4e:06:b9:fd:a1:
e8:a7:0b:44:12:d9:1c:30:b1:e9:38:c3:be:02:12:
2a:af:79:22:93:6a:e9:22:c9:97:68:52:ad:eb:7d:
77:74:a3:e3:76:84:a4:0b:57:d5:95:9d:1c:86:a2:
99:ed:5a:01:62:11:08:6d:6f:eb:f0:50:d5:f2:ee:
03:7d:d8:d0:8d:63:54:fe:12:29:1c:96:4b:fb:4e:
cf:63:c1:75:b7:f1:56:93:3d:b0:d5:68:45:42:0c:
4a:0c:29:c4:46:3d:83:d6:08:cc:6c:58:98:6a:56:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E7:3B:78:08:CA:24:9F:85:B7:EE:88:FE:B6:01:7A:7D:4E:84:E1
X509v3 Authority Key Identifier:
keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/Muc7eAjKJJ-Ft-6I_rYBen1OhOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.87.64.0/21
185.117.148.0/22
194.152.36.0/23
195.216.237.0/24
IPv6:
2a0b:d7c0::/30
Signature Algorithm: sha256WithRSAEncryption
3b:dd:23:9c:71:fc:55:b5:39:e8:aa:c0:6b:4f:d9:03:d1:54:
17:9a:74:34:ba:c5:71:54:d2:78:6f:5f:01:9d:05:f3:c0:dd:
20:6d:ff:9b:64:73:ae:9d:08:c5:76:b3:dd:70:c3:81:d6:34:
cc:ac:f2:bd:3d:0a:cc:46:b8:6d:50:5d:19:10:2e:ab:e6:bc:
0d:3f:7c:04:48:59:62:81:5f:f1:95:24:92:ac:5f:8d:4d:3b:
c3:4f:76:c6:40:92:71:1f:e6:ce:21:a2:4d:e6:2d:ba:c0:66:
9a:03:54:72:29:1d:ff:60:55:5b:a6:ed:18:2b:8f:fb:c9:17:
20:5d:61:76:71:26:f6:87:66:91:56:5d:f8:cc:14:a7:95:60:
1d:e3:25:bf:45:eb:7f:ea:b5:bf:d8:c9:d4:6c:8b:fe:1b:6e:
1f:94:ac:76:be:81:c9:4b:a9:2e:c5:25:6d:79:2c:68:a9:88:
01:c2:6b:3d:68:5f:97:96:dd:c0:ff:df:aa:cb:e2:5f:a3:b8:
f1:dc:48:fd:09:bb:cc:19:e4:6e:a3:1e:f5:50:1e:6a:f7:7c:
cd:ca:3f:48:68:2d:5d:53:f4:40:37:99:c8:85:94:ce:8d:82:
01:2a:82:4e:5e:b5:59:17:7f:25:84:57:56:6e:54:65:d5:36:
6a:86:3e:58
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYYLe9znJ66TRLekBCFMXDIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZWRhNGY4ZDllNDgyOTUyYTExMmIyZWY1YTRmMjM5Yjdm
NjI1NTEwHhcNMjMwMjAxMDUzODMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmU3M2I3ODA4Y2EyNDlmODViN2VlODhmZWI2MDE3YTdkNGU4NGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMBOBhWIWvfRQUds3Ul87heKNHVx
nfiJC3y0tmHTeztCjLgoM75p/gT7fmWADVryAPVY6bxEJg330AvvOidMpNbrbrFJ
KTTFdl1x5ozyBm/qOcaktFJP52Cq9z9WoKRp47K47lBoWwXmnOEqlInbhix3+HYA
txWEAAdszQ4aC89L8uWJ0QJiDcKgWmwcYtHDTga5/aHopwtEEtkcMLHpOMO+AhIq
r3kik2rpIsmXaFKt6313dKPjdoSkC1fVlZ0chqKZ7VoBYhEIbW/r8FDV8u4DfdjQ
jWNU/hIpHJZL+07PY8F1t/FWkz2w1WhFQgxKDCnERj2D1gjMbFiYalZh+wIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFDLnO3gIyiSfhbfuiP62AXp9ToThMB8GA1UdIwQY
MBaAFNLtpPjZ5IKVKhErLvWk8jm39iVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHUyay1ObmtncFVxRVNzdTlhVHlPYmYySlZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9kZTM0YjUtMDMyMC00Y2Q5LTllZTMt
YzRjZTNlODA3M2RiLzEvTXVjN2VBaktKSi1GdC02SV9yWUJlbjFPaE9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9kZTM0YjUtMDMyMC00Y2Q5LTllZTMtYzRjZTNlODA3M2Ri
LzEvMHUyay1ObmtncFVxRVNzdTlhVHlPYmYySlZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDX1dAAwQC
uXWUAwQBwpgkAwQAw9jtMA0EAgACMAcDBQIqC9fAMA0GCSqGSIb3DQEBCwUAA4IB
AQA73SOccfxVtTnoqsBrT9kD0VQXmnQ0usVxVNJ4b18BnQXzwN0gbf+bZHOunQjF
drPdcMOB1jTMrPK9PQrMRrhtUF0ZEC6r5rwNP3wESFligV/xlSSSrF+NTTvDT3bG
QJJxH+bOIaJN5i26wGaaA1RyKR3/YFVbpu0YK4/7yRcgXWF2cSb2h2aRVl34zBSn
lWAd4yW/Ret/6rW/2MnUbIv+G24flKx2voHJS6kuxSVteSxoqYgBwms9aF+Xlt3A
/9+qy+Jfo7jx3Ej9CbvMGeRuox71UB5q93zNyj9IaC1dU/RAN5nIhZTOjYIBKoJO
XrVZF38lhFdWblRl1TZqhj5Y
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:10 2024 by rpki-client on console-ams.rpki-client.org