Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/mKsoBde9MKy6-d5t8Iz6jt5w3_M.roa
File: mKsoBde9MKy6-d5t8Iz6jt5w3_M.roa (raw, json)
Hash identifier: pcz0HS+IhQJhqMXA6G4g7YefEqOf0OksI59N7NGCe8k=
Subject key identifier: 98:AB:28:05:D7:BD:30:AC:BA:F9:DE:6D:F0:8C:FA:8E:DE:70:DF:F3
Certificate issuer: /CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Certificate serial: 018BB9389E280AC81956EA107C8235CACE12
Authority key identifier: 05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/mKsoBde9MKy6-d5t8Iz6jt5w3_M.roa
Signing time: Fri 10 Nov 2023 12:32:57 +0000
ROA not before: Fri 10 Nov 2023 12:32:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216172
IP address blocks: 185.30.108.0/24 maxlen: 24
185.30.109.0/24 maxlen: 24
185.30.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:38:9e:28:0a:c8:19:56:ea:10:7c:82:35:ca:ce:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Validity
Not Before: Nov 10 12:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98ab2805d7bd30acbaf9de6df08cfa8ede70dff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c1:6f:10:01:79:44:51:42:03:6e:ec:ec:e8:
59:09:d2:a7:21:4a:42:eb:5b:a7:8d:78:36:91:f1:
dd:1e:b8:a6:0b:ff:cd:87:46:cb:24:38:1f:bc:17:
59:7d:41:55:43:5f:cb:ff:91:a3:e2:7a:2a:6e:09:
9e:cb:a3:5d:85:64:20:1c:85:0a:35:c9:c3:41:2b:
47:ca:e4:0f:c1:8f:75:c2:a3:fc:5d:99:fb:6e:fc:
c3:94:9e:7f:41:e2:39:01:ba:1b:e7:66:3c:59:32:
09:76:fa:fd:76:9e:70:12:3e:86:2b:9f:b6:6f:96:
9f:d8:88:d9:26:d5:cb:01:0f:7a:b6:0a:ba:75:68:
cc:e9:6b:e3:15:dd:31:7b:8a:04:40:2c:e9:dd:62:
06:e6:b4:da:bc:de:c5:17:f4:6e:94:51:a2:3d:c3:
bb:84:f8:ae:0c:4b:5f:78:dd:a6:84:d0:94:09:78:
bf:d2:15:38:b9:0f:bf:ba:20:25:a8:67:2a:e4:0b:
4b:a2:9b:6e:92:e8:9e:15:16:03:82:db:e3:ca:5e:
f1:b9:de:30:a3:fc:ec:85:bd:b4:79:21:af:4f:b0:
f2:c1:4d:4c:b9:1d:d7:9d:2e:3f:1a:36:7d:a3:d0:
60:78:a4:43:68:35:54:30:13:5e:54:44:99:04:08:
5b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AB:28:05:D7:BD:30:AC:BA:F9:DE:6D:F0:8C:FA:8E:DE:70:DF:F3
X509v3 Authority Key Identifier:
keyid:05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/mKsoBde9MKy6-d5t8Iz6jt5w3_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.108.0-185.30.110.255
Signature Algorithm: sha256WithRSAEncryption
3a:42:f7:b5:a8:be:7d:18:c0:a9:00:53:2b:50:00:6c:26:48:
60:4d:1c:f4:2f:9b:56:92:77:2e:09:4f:7d:ac:b6:42:d5:83:
19:0a:cc:21:c2:18:21:f3:2b:d2:2e:a5:c3:56:9a:44:f1:0a:
56:16:21:bf:3a:b8:8a:eb:15:e7:1c:51:eb:99:84:7b:da:fa:
04:fb:52:6a:00:0c:03:d1:4b:49:7d:99:a0:5a:48:a1:42:f6:
b0:86:1a:43:18:51:62:16:62:f8:29:4b:3a:e8:c2:cb:25:73:
90:c4:f4:16:11:ac:d1:c1:7d:bb:66:3f:cb:40:db:f3:32:83:
f6:ad:d5:02:a0:ce:a3:e8:0f:56:65:3a:ea:f3:25:f2:4f:5f:
a4:89:7b:8e:a9:4b:cd:ff:b6:c3:92:2c:82:d8:87:ff:cc:20:
15:56:2f:ef:c2:d9:68:c6:e1:7d:b6:a1:d1:63:9c:e0:36:dc:
f4:7b:ce:41:92:b3:0a:99:2f:be:f4:43:df:6f:c5:24:7f:7c:
71:00:42:09:44:a9:00:1c:9f:2d:10:c3:e0:be:3a:ab:26:81:
8f:fb:e4:38:08:e3:64:ae:6d:02:39:12:9b:c4:29:8d:2d:fe:
c0:5e:ef:21:58:63:8e:c3:2d:59:1a:87:a6:e1:b6:eb:7f:71:
6e:7c:5b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 17 16:04:38 2023 by rpki-client on console-ams.rpki-client.org