Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/MBb1RaQpCXb6tiGVtYEr0lkWknU.roa
File: MBb1RaQpCXb6tiGVtYEr0lkWknU.roa (raw, json)
Hash identifier: 4B9KtacusE706WZ9Jd7igUQW3P25CyfoPkXlwBtZlpA=
Subject key identifier: 30:16:F5:45:A4:29:09:76:FA:B6:21:95:B5:81:2B:D2:59:16:92:75
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 0188C37CA133A708A5FA8FE054CE8F105C4A
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/MBb1RaQpCXb6tiGVtYEr0lkWknU.roa
Signing time: Fri 16 Jun 2023 09:15:04 +0000
ROA not before: Fri 16 Jun 2023 09:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 85.28.48.0/22 maxlen: 22
85.28.57.0/24 maxlen: 24
85.28.58.0/24 maxlen: 24
85.28.56.0/24 maxlen: 24
85.28.54.0/23 maxlen: 23
85.28.52.0/23 maxlen: 23
85.28.59.0/24 maxlen: 24
85.28.60.0/24 maxlen: 24
85.28.60.0/22 maxlen: 22
109.238.205.0/24 maxlen: 24
109.238.200.0/24 maxlen: 24
109.238.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:7c:a1:33:a7:08:a5:fa:8f:e0:54:ce:8f:10:5c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Jun 16 09:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3016f545a4290976fab62195b5812bd259169275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:65:6e:79:fd:c2:83:4a:2e:81:72:c5:cb:
73:37:9e:83:f6:14:2c:69:60:97:64:99:6a:b1:49:
72:f1:37:51:16:a2:10:d6:a6:39:c4:32:1a:0b:e6:
a5:25:f4:46:49:ae:37:21:1c:66:95:db:34:13:a1:
12:60:ec:66:f4:31:0a:cd:45:10:72:4d:83:3a:76:
d8:38:39:51:5d:55:ce:94:e4:78:2a:cf:74:c2:0b:
cc:34:da:bf:5e:65:cd:b0:90:0f:cd:01:91:81:a4:
c5:45:e1:f8:44:41:4e:ff:2d:f4:2b:17:e2:dd:0b:
35:57:6e:50:ed:3c:f6:37:61:15:f0:b0:e3:27:f5:
fc:66:24:f9:45:00:b8:a0:e5:e9:e3:73:22:95:ac:
02:d7:9c:49:4b:36:b8:b4:1b:3e:96:bb:81:3d:e8:
4b:39:c5:4f:b3:e2:ec:ca:f8:c8:05:25:c6:a7:e6:
74:2c:66:f8:ff:04:87:ac:87:38:c2:fc:48:39:e2:
c5:df:e2:2b:a0:97:95:ef:6f:66:a1:10:3a:e4:47:
8d:65:76:ce:1e:12:58:be:25:87:73:7e:16:8a:1a:
82:b2:d9:97:a7:ad:42:39:12:a2:c0:1c:ad:f6:60:
d6:3a:08:a9:bf:b8:4a:f3:96:d9:70:47:e4:3f:fc:
19:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:16:F5:45:A4:29:09:76:FA:B6:21:95:B5:81:2B:D2:59:16:92:75
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/MBb1RaQpCXb6tiGVtYEr0lkWknU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.48.0/20
109.238.200.0/24
109.238.203.0/24
109.238.205.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:c8:fe:b5:29:f2:25:10:9e:ab:61:c4:5d:6a:2a:00:a8:96:
48:2d:13:15:21:b2:ef:dd:45:d5:ee:81:ea:98:da:b2:63:a4:
af:48:23:3b:a2:dc:29:c3:30:00:91:48:80:4e:96:7a:8a:88:
12:ad:4e:68:9d:65:65:35:fe:9a:a7:03:dc:26:b8:74:89:30:
ac:24:64:f1:a1:52:e5:9c:89:ac:9d:68:c1:3c:f9:e1:a6:79:
80:64:49:14:10:23:e9:78:25:aa:30:7a:9d:3c:c7:52:af:37:
3a:64:f5:86:02:7c:05:51:93:7c:f6:b7:ea:56:f9:04:31:78:
60:9f:5c:d6:98:86:4a:da:1c:f3:0e:47:fc:52:5d:c6:d6:6a:
21:7e:09:38:d0:fc:c5:96:98:d5:e2:7d:64:36:6f:21:8e:b4:
f6:48:52:be:c6:05:3f:f0:b3:63:9b:69:55:36:c3:03:3d:09:
7d:20:df:98:bd:f7:36:46:ec:53:7d:e0:f3:ce:1d:6a:c0:d5:
a3:48:8d:11:0c:a3:e8:f1:3b:eb:28:3e:6a:57:a8:77:81:e2:
96:b7:e4:b7:a0:fd:80:52:52:ea:cd:65:c1:a9:8e:f9:61:67:
09:ea:7e:f4:1d:b5:f5:74:aa:e3:0b:6c:4d:b5:a6:59:4a:d3:
6b:0a:5b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:19 2024 by rpki-client on console-fra.rpki-client.org