Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/MNzNRpJji-uojUk3SYL35AScD0Y.roa
File: MNzNRpJji-uojUk3SYL35AScD0Y.roa (raw, json)
Hash identifier: tFpVqnIhpU2XwGCjVN8FNYGu05bBtFXqfgV5jtGLbNo=
Subject key identifier: 30:DC:CD:46:92:63:8B:EB:A8:8D:49:37:49:82:F7:E4:04:9C:0F:46
Certificate issuer: /CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Certificate serial: 01856E78E438266278782132E9DA2046DAEB
Authority key identifier: 15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/MNzNRpJji-uojUk3SYL35AScD0Y.roa
Signing time: Sun 01 Jan 2023 17:54:54 +0000
ROA not before: Sun 01 Jan 2023 17:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205393
IP address blocks: 194.147.160.0/22 maxlen: 22
194.147.168.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:e4:38:26:62:78:78:21:32:e9:da:20:46:da:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Validity
Not Before: Jan 1 17:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30dccd4692638beba88d49374982f7e4049c0f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7f:26:3b:53:d6:df:4e:5f:29:fb:06:c1:58:
46:0b:a4:61:29:9b:c2:58:3e:23:8f:55:6e:58:6e:
4c:1a:0d:52:e9:35:42:0c:63:77:2e:60:68:4c:f1:
a1:c2:24:94:3a:ed:ba:49:cd:1f:6e:cf:1b:98:02:
00:1d:30:fb:18:c4:e3:9b:64:ef:b6:ec:db:80:80:
66:46:45:67:1c:f6:3d:21:e1:8e:6e:93:30:57:6f:
9a:db:c8:9b:87:f3:fb:e6:1b:7e:bf:44:f2:15:53:
5e:09:f3:ea:a7:b6:89:7a:23:fc:a0:30:8a:e9:ca:
a9:b9:74:3e:5e:12:30:01:d1:82:a6:a6:0f:d3:9b:
e1:01:b5:b9:ae:1c:ce:1a:5e:f5:64:e1:57:28:49:
8a:d7:26:bc:25:eb:41:8f:c4:ae:d3:89:7f:80:7d:
b4:b6:28:5e:24:46:eb:8d:fd:60:05:98:49:cf:2c:
0d:88:5a:df:4d:36:e8:94:f2:02:42:be:be:00:de:
4e:0b:d0:f5:f0:69:7e:a3:6f:2c:84:8b:1b:db:f2:
d7:1d:52:22:a7:17:d0:22:1b:d5:4f:b0:66:53:bb:
2a:8b:cb:b4:45:8c:c9:55:fc:74:6b:0b:41:57:92:
4f:cd:d2:0b:48:ae:7b:d4:d7:cd:2c:ea:ee:57:5f:
1f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DC:CD:46:92:63:8B:EB:A8:8D:49:37:49:82:F7:E4:04:9C:0F:46
X509v3 Authority Key Identifier:
keyid:15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/MNzNRpJji-uojUk3SYL35AScD0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.160.0/22
194.147.168.0/23
Signature Algorithm: sha256WithRSAEncryption
84:74:08:1f:5d:23:b1:8f:9f:01:9a:5c:7e:9f:e0:13:c2:7e:
dd:f4:a1:30:52:99:1b:6e:d6:5d:c6:e6:c4:02:09:48:3f:a5:
ad:63:07:cb:7c:56:39:01:fc:fa:be:9d:e3:22:25:8b:ad:3e:
35:ac:93:d5:ba:f5:67:9d:59:70:01:c5:d4:6a:71:f3:3e:8a:
83:40:a5:32:d8:a2:70:f0:39:fd:71:ab:70:3c:62:3a:48:29:
43:f2:b9:ac:42:43:12:75:9b:b3:27:93:bf:37:a4:6e:82:20:
e2:fc:7b:34:cc:98:ea:54:bc:84:6a:5f:f2:6e:86:79:56:91:
5e:29:90:00:ed:80:63:23:f8:72:79:86:cc:2b:5e:78:5e:86:
48:e5:0c:f5:4e:f2:c9:52:46:79:08:0f:bb:1c:9d:fd:55:36:
21:ea:2e:8e:0e:f8:1a:57:db:2e:8d:70:76:4c:15:d8:ec:27:
b6:9b:55:81:4e:dc:cf:82:31:e8:2e:81:55:f3:74:77:20:bf:
d7:6a:3d:c8:f4:15:00:6a:37:d8:f1:c4:67:84:0c:af:f8:aa:
37:01:67:cd:1b:0f:e7:0a:fc:00:2b:cb:0e:6c:ec:f3:cf:19:
15:78:8c:3d:f1:16:40:8a:6b:77:32:99:5d:a4:38:5b:65:42:
e9:cc:4d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:59 2024 by rpki-client on console-fra.rpki-client.org