Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/MUjZfCi1yzQ7y-e-9rceBVJzs3I.roa
File: MUjZfCi1yzQ7y-e-9rceBVJzs3I.roa (raw, json)
Hash identifier: monCocuo7Sh77FkrOM+aZoLC6t65TwZJfg4NCnGBFkk=
Subject key identifier: 31:48:D9:7C:28:B5:CB:34:3B:CB:E7:BE:F6:B7:1E:05:52:73:B3:72
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01856F1DCD4B5F3C24B0F527DE1C9B638B84
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/MUjZfCi1yzQ7y-e-9rceBVJzs3I.roa
Signing time: Sun 01 Jan 2023 20:55:02 +0000
ROA not before: Sun 01 Jan 2023 20:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34549
IP address blocks: 185.222.218.0/24 maxlen: 24
2a09:0:13::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:cd:4b:5f:3c:24:b0:f5:27:de:1c:9b:63:8b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 20:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3148d97c28b5cb343bcbe7bef6b71e055273b372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:08:9c:95:9c:f7:eb:b7:88:bc:03:ab:4b:
ed:c7:38:d4:e1:a2:7c:83:01:81:ca:52:94:88:10:
e6:3d:69:97:1f:eb:80:ec:f7:ad:c9:5b:ef:ea:7e:
47:72:66:b5:e2:da:80:f6:bb:cc:97:fa:a6:ad:1e:
90:78:f3:e1:86:bd:87:b3:7f:bf:5b:7e:b1:87:9a:
bf:f2:48:ff:ba:57:0f:b7:7e:2c:c8:f2:50:3a:3c:
c5:ac:39:e5:1a:54:0a:fd:6d:20:48:91:a4:01:60:
cc:6e:8b:e6:3e:e3:6d:ea:e4:2b:80:94:66:e0:aa:
33:c1:1e:df:69:99:e2:ff:13:30:54:aa:49:28:54:
04:48:e6:df:c8:fa:cd:29:d0:ca:9d:3f:70:87:9f:
5f:00:89:bc:f4:cd:87:c9:e7:d2:b6:8e:46:70:9d:
e4:bf:a0:23:2d:74:91:c1:bb:4f:63:29:43:bb:ea:
99:ed:a7:66:c4:ad:31:76:28:a6:a8:5f:f3:9f:89:
b7:85:8e:08:26:a4:66:ca:fb:1e:4a:64:db:06:24:
c0:3e:3f:ec:71:e2:70:8f:f5:c3:60:94:9e:bc:4a:
99:e6:d0:09:e8:0f:0e:55:63:05:e9:23:28:4c:05:
9a:19:53:b6:32:3f:18:38:ae:ba:7b:d5:25:47:fb:
64:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:48:D9:7C:28:B5:CB:34:3B:CB:E7:BE:F6:B7:1E:05:52:73:B3:72
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/MUjZfCi1yzQ7y-e-9rceBVJzs3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.218.0/24
IPv6:
2a09:0:13::/48
Signature Algorithm: sha256WithRSAEncryption
57:1c:80:ae:ac:94:84:9e:90:5b:1a:c9:88:f0:14:6f:9b:a8:
02:5a:8d:b1:a0:40:2c:89:96:f8:09:35:b2:4f:c9:6e:21:ac:
f6:bd:2d:2e:35:d2:e4:5e:e3:eb:3b:f4:09:b1:77:43:8f:61:
e5:c8:03:b3:79:0b:c8:f0:1b:35:2c:6c:14:23:a8:cd:c1:c0:
ac:bc:72:85:3d:37:aa:82:7e:0e:34:9a:74:23:5c:87:43:76:
94:8e:8f:74:d3:35:94:2d:a1:80:c2:fd:16:b3:1d:66:38:cd:
0b:4b:25:79:6e:42:62:40:db:95:c5:bd:64:4c:b1:ac:d9:26:
c5:98:97:06:5d:03:f9:88:a5:47:f0:46:93:30:c0:41:c3:68:
70:1f:d8:c0:20:ad:32:55:62:a6:bd:92:cc:6d:f6:37:3c:77:
28:71:95:79:ac:c7:92:8e:87:8d:20:37:fe:49:f7:8b:99:ff:
85:44:d2:72:7d:92:7d:10:0a:7f:cb:98:9c:da:36:e8:0e:73:
d4:75:35:67:81:84:a7:99:be:9c:21:93:7b:7d:d8:d6:2a:f7:
af:1a:a7:11:c0:4c:4a:38:99:a6:f6:04:d5:a9:0b:b1:59:8e:
4a:fe:ff:b3:b8:a4:f5:82:d8:d9:b3:5d:8b:40:bb:19:52:6c:
24:87:6c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:34 2024 by rpki-client on console-fra.rpki-client.org