Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/MOgUZOq4P74tfrRMfP8whIUWf1s.roa
File: MOgUZOq4P74tfrRMfP8whIUWf1s.roa (raw, json)
Hash identifier: E7Cxw86Zt7Wl6hL9a2GRh25RezURELn6H9hiKXdCjOQ=
Subject key identifier: 30:E8:14:64:EA:B8:3F:BE:2D:7E:B4:4C:7C:FF:30:84:85:16:7F:5B
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 018573588F8E76AC44A364A4224371997772
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/MOgUZOq4P74tfrRMfP8whIUWf1s.roa
Signing time: Mon 02 Jan 2023 16:37:41 +0000
ROA not before: Mon 02 Jan 2023 16:37:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35450
IP address blocks: 93.113.154.0/24 maxlen: 24
89.35.225.0/24 maxlen: 24
89.35.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:58:8f:8e:76:ac:44:a3:64:a4:22:43:71:99:77:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Jan 2 16:37:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30e81464eab83fbe2d7eb44c7cff308485167f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:61:84:05:5f:23:d4:a8:db:55:57:00:7b:92:
ce:11:0f:fd:eb:91:78:ae:27:54:9f:b9:83:1f:4c:
cd:68:1b:e0:5f:19:f8:5f:ce:3e:fb:98:82:e6:21:
1d:2f:a8:5f:50:aa:8a:67:0b:c6:0f:26:5f:34:25:
39:94:38:4b:b3:be:47:dc:a1:5d:ae:5f:84:27:a5:
eb:9f:8d:81:29:9d:a8:9a:47:a5:2b:2c:a2:87:db:
80:e1:9d:2f:be:34:58:69:33:e1:ab:b8:43:3d:e7:
c1:f5:7f:99:17:fd:6c:65:8c:82:09:2e:55:b5:2e:
da:5e:57:c8:e6:52:41:19:6b:4d:91:ec:af:4a:f4:
be:51:fd:5f:3e:8d:a9:47:80:0f:35:9e:b9:7e:16:
a8:ba:aa:fa:e4:18:46:0d:dc:cf:d9:c0:3b:77:ad:
91:de:dd:23:3a:d3:38:20:49:e3:d2:f0:6f:9f:51:
57:19:72:19:7f:5d:ed:3c:36:2b:07:dd:4f:6f:34:
26:28:fc:66:a4:e3:d8:6a:0c:a9:b4:36:21:f5:72:
02:d6:18:32:c6:97:2d:9a:7a:8f:cb:0f:03:0f:f5:
ef:c7:27:b8:c7:dc:b5:6c:85:e4:f4:0c:f8:9f:37:
6f:4a:90:bf:30:ef:37:07:84:9f:8d:95:3e:64:79:
37:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E8:14:64:EA:B8:3F:BE:2D:7E:B4:4C:7C:FF:30:84:85:16:7F:5B
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/MOgUZOq4P74tfrRMfP8whIUWf1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.225.0/24
89.35.230.0/24
93.113.154.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:3a:35:5e:53:d3:7a:c7:1c:37:9b:4f:c4:14:09:3a:2e:90:
4d:1e:63:93:fb:23:ee:93:b1:89:01:4a:dc:08:a9:53:60:1a:
f3:5b:5d:52:f9:fb:f1:d5:ba:13:c7:63:53:46:70:d5:b9:c6:
85:96:bb:93:36:29:f2:a4:17:e0:40:a1:94:44:d9:70:b3:f7:
85:a0:2f:3b:2e:d0:c3:9f:7f:f1:ad:26:5b:54:f2:40:6e:26:
78:ab:85:7d:7a:9b:98:21:44:7d:6e:85:cc:e8:89:e8:5c:24:
a1:ae:2c:fc:27:0e:70:f6:ad:77:5f:fe:d9:75:1e:2b:16:28:
32:c1:a7:a5:4d:5d:12:61:1d:d4:4f:c5:59:86:db:af:11:f9:
10:e6:d2:c7:2e:e0:99:42:5d:f2:3c:32:7f:8a:e8:08:4b:a0:
5d:a8:ae:4a:6a:51:75:e4:72:68:fe:34:a3:e2:7a:80:b2:b8:
9a:9f:75:5c:39:d1:e8:c6:8f:37:85:95:77:c6:d9:53:c7:41:
2e:69:5c:e3:d3:6c:39:e2:00:9d:2b:9a:28:de:e9:27:4f:cd:
08:0a:a7:00:7a:05:9e:a0:dc:1b:b2:bb:29:c5:f6:5b:0c:86:
ff:ee:e8:60:e7:67:29:2a:9b:b3:ed:a1:2a:26:ca:4e:7b:8a:
d0:d3:ca:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:20 2024 by rpki-client on console-ams.rpki-client.org