Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5176f6-bbd4-46e6-9c74-1543943aab73/1/MMh4yY-9WefRf75tnyLz4Jc_5ok.roa
File: MMh4yY-9WefRf75tnyLz4Jc_5ok.roa (raw, json)
Hash identifier: GzL2Z06wpGHXIVp+GVXMXDJp4Oh6E6JVh/EHvYaiHLA=
Subject key identifier: 30:C8:78:C9:8F:BD:59:E7:D1:7F:BE:6D:9F:22:F3:E0:97:3F:E6:89
Certificate issuer: /CN=1d8bca2abce4beaeaba98656168846df0c46a3f3
Certificate serial: 0185735F1AE39C8C5BEA07F5E9BE118520EC
Authority key identifier: 1D:8B:CA:2A:BC:E4:BE:AE:AB:A9:86:56:16:88:46:DF:0C:46:A3:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYvKKrzkvq6rqYZWFohG3wxGo_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5176f6-bbd4-46e6-9c74-1543943aab73/1/MMh4yY-9WefRf75tnyLz4Jc_5ok.roa
Signing time: Mon 02 Jan 2023 16:44:50 +0000
ROA not before: Mon 02 Jan 2023 16:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 89.248.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:5f:1a:e3:9c:8c:5b:ea:07:f5:e9:be:11:85:20:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8bca2abce4beaeaba98656168846df0c46a3f3
Validity
Not Before: Jan 2 16:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30c878c98fbd59e7d17fbe6d9f22f3e0973fe689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:39:ff:e6:6d:67:6a:43:cf:42:77:f4:b1:d7:
97:fd:02:98:17:19:98:e9:a4:c3:26:4d:1b:c8:d3:
11:3f:24:b6:16:bb:a9:f5:42:bc:35:04:05:95:bc:
03:69:f6:76:4f:e9:de:3a:45:22:cf:dc:93:b5:0b:
49:a0:a0:a8:bc:fe:f1:93:70:cb:72:de:c3:41:5c:
26:43:35:ff:02:1b:0f:8a:ab:55:4b:46:11:ff:56:
4f:0b:07:4b:de:99:6e:eb:d2:c3:c6:d0:ca:da:0b:
a0:d7:f8:33:a2:70:47:54:2d:8d:8c:82:2d:89:d9:
ce:31:af:d0:3d:59:66:70:ce:a7:3d:37:0a:e5:10:
26:53:50:67:f9:75:7b:d3:a8:8f:8f:36:2f:75:93:
83:34:30:ea:91:64:b2:5b:bd:68:70:16:62:9a:1a:
86:a7:2d:4e:e5:86:8c:3a:2b:ae:2c:6f:3a:c1:6e:
5e:f7:56:52:a9:e5:b7:d3:3c:93:c6:80:e8:59:d6:
24:32:6c:ee:a2:d0:0a:7f:a0:aa:8a:f3:bb:cc:e4:
40:87:19:e9:8a:64:40:4e:cf:c9:a9:cd:f5:fb:f1:
8b:f3:2e:83:31:27:c3:c2:6d:73:70:dc:26:bd:53:
27:93:20:86:89:ea:2b:89:4f:40:60:b4:45:5c:1b:
db:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C8:78:C9:8F:BD:59:E7:D1:7F:BE:6D:9F:22:F3:E0:97:3F:E6:89
X509v3 Authority Key Identifier:
keyid:1D:8B:CA:2A:BC:E4:BE:AE:AB:A9:86:56:16:88:46:DF:0C:46:A3:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYvKKrzkvq6rqYZWFohG3wxGo_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5176f6-bbd4-46e6-9c74-1543943aab73/1/MMh4yY-9WefRf75tnyLz4Jc_5ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5176f6-bbd4-46e6-9c74-1543943aab73/1/HYvKKrzkvq6rqYZWFohG3wxGo_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.248.64.0/24
Signature Algorithm: sha256WithRSAEncryption
31:d3:3b:1d:85:bc:5c:d8:da:d4:56:f3:aa:aa:55:ad:d4:d6:
7e:17:f1:0c:ce:69:13:9a:a5:04:6f:f4:fa:b0:f9:05:22:7b:
f2:83:38:ce:7f:d0:4f:9a:1d:22:70:74:6d:13:57:c5:b0:06:
20:73:f2:a2:30:15:63:22:9d:bf:7a:61:e4:79:9f:7f:8e:f1:
e0:41:a8:5f:71:71:7a:25:b2:2c:91:9b:b6:2d:39:d2:43:05:
c1:d6:b0:17:4a:2f:4e:77:07:b5:3a:24:25:39:83:de:a4:87:
6f:e0:49:72:b3:f8:cd:41:d4:bd:00:de:47:79:42:cd:78:6b:
7b:96:2d:8e:d5:0f:9e:68:b9:22:1b:9a:36:14:c0:e6:bc:a5:
04:c7:8f:5d:2e:cd:e5:2c:0d:e3:2a:6c:8a:08:c7:66:71:54:
4c:82:68:6f:f7:1e:1a:d6:28:b9:ab:ec:ac:d7:51:6a:4c:14:
49:23:0a:48:9a:bf:0b:ec:2e:76:b7:35:26:01:40:f5:2f:5b:
f6:85:4a:50:1c:94:f2:a8:90:ab:37:6c:8c:b2:67:85:2c:12:
be:41:02:86:c7:17:46:fd:93:f5:aa:92:95:e6:d4:2c:e8:bb:
d8:df:75:de:62:1b:0e:55:1e:25:64:bc:fd:3b:cf:80:ce:19:
38:c3:d2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:22 2023 by rpki-client on console-ams.rpki-client.org