Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Moe96C84doAhDI_-_e1nnIf4CbQ.roa
File: Moe96C84doAhDI_-_e1nnIf4CbQ.roa (raw, json)
Hash identifier: TlLaje54WFbHBlS1d7LXF5os3bzFqeRUBTlcJt/xByc=
Subject key identifier: 32:87:BD:E8:2F:38:76:80:21:0C:8F:FE:FD:ED:67:9C:87:F8:09:B4
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018CC727763048F2678ED0CA77BBDBA13F64
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Moe96C84doAhDI_-_e1nnIf4CbQ.roa
Signing time: Mon 01 Jan 2024 22:31:41 +0000
ROA not before: Mon 01 Jan 2024 22:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 85.142.242.0/24 maxlen: 24
85.143.40.0/21 maxlen: 24
85.143.48.0/20 maxlen: 24
85.142.212.0/22 maxlen: 24
85.142.240.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 10:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:76:30:48:f2:67:8e:d0:ca:77:bb:db:a1:3f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 22:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3287bde82f387680210c8ffefded679c87f809b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5e:48:4f:e2:55:30:b4:8f:f6:1e:5e:43:56:
f1:d1:a2:cb:e9:c8:b7:8f:4d:fb:3a:4d:da:ea:69:
21:2d:fa:15:b3:75:96:3f:0f:8a:3f:6f:3d:e0:eb:
43:ec:55:ee:74:f3:51:92:f6:23:f8:d9:c2:75:34:
78:c7:7a:fa:ee:bc:62:75:cb:9c:29:8c:95:22:c5:
97:8a:2c:6d:38:be:5f:c3:b9:ee:75:b9:b6:25:39:
13:1f:21:72:28:11:67:6e:1e:4f:75:54:2c:59:a4:
93:3c:68:3f:e0:b3:ed:d3:cd:68:4f:36:ff:ab:27:
56:1e:3b:28:b2:18:29:ec:07:85:a0:5b:2d:0c:be:
7a:01:bd:0a:5c:dd:1d:5e:da:fe:18:4d:f9:7f:18:
36:f5:ef:ba:fc:fb:9d:2a:a7:6d:dc:25:76:35:74:
22:c6:56:36:98:81:b1:12:02:aa:13:ec:49:2f:8f:
2c:af:d9:07:3a:e3:0a:99:94:a3:c0:d1:cf:96:0c:
2c:0a:b7:d5:15:64:91:fc:70:03:58:77:b2:61:f0:
00:1b:c9:8e:9f:56:20:81:fa:66:3d:3c:20:9c:ea:
8f:b0:8c:8c:2f:af:63:11:09:a2:ad:44:26:ea:f0:
98:e4:33:56:e7:07:09:30:8f:b9:23:d5:7e:3b:be:
fe:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:87:BD:E8:2F:38:76:80:21:0C:8F:FE:FD:ED:67:9C:87:F8:09:B4
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Moe96C84doAhDI_-_e1nnIf4CbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.212.0/22
85.142.240.0-85.142.242.255
85.143.40.0-85.143.63.255
Signature Algorithm: sha256WithRSAEncryption
01:7a:99:ec:ae:ff:45:0d:eb:6d:18:74:c4:ac:b9:d3:8c:f0:
94:92:7b:50:bc:ba:66:9b:f9:11:fd:55:e4:91:04:17:29:0d:
3a:9c:32:04:ed:5e:7e:a3:1f:60:21:97:f9:79:ff:68:9a:83:
f0:51:1b:ad:34:8f:bb:df:af:f8:2d:d3:7d:1a:fe:27:3e:cf:
82:79:77:1e:4a:d0:b5:fc:77:7c:ca:79:83:5f:9f:81:09:15:
a6:12:ca:05:61:9d:65:75:be:27:35:c4:a3:e8:df:92:38:e4:
91:11:ad:74:c5:bd:34:81:0f:a6:49:ed:87:b5:0a:fd:d7:61:
ed:52:8b:8a:fa:8c:ff:9a:62:a6:1c:62:58:73:06:68:24:db:
99:b0:01:06:01:3d:ac:7f:d9:4b:4f:c4:63:f0:70:31:c6:68:
dc:48:8a:b0:f7:1e:8a:4d:b2:51:09:00:00:68:81:cc:89:71:
f2:71:47:7c:b2:4d:9b:d9:9a:cc:09:29:67:7e:c4:0f:bf:f6:
7e:2d:d2:b7:37:16:99:05:88:22:d0:ba:ac:ed:ca:06:38:f1:
8a:a2:d0:05:fd:c0:a1:38:c6:19:bd:7c:c9:64:f1:93:ea:27:
5f:b5:3b:95:d3:ec:6d:65:25:cf:dc:1d:58:86:b4:9a:05:24:
ac:34:ee:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org