Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/mNfW4eL9LO80DFshaamkTnV5lDE.roa
File: mNfW4eL9LO80DFshaamkTnV5lDE.roa (raw, json)
Hash identifier: VUaepQyqLqUe2IQgrWUFcJJPM5PNBAPB7aupJyt5j6Q=
Subject key identifier: 98:D7:D6:E1:E2:FD:2C:EF:34:0C:5B:21:69:A9:A4:4E:75:79:94:31
Certificate issuer: /CN=a548aed90a5e23b4a73695608f3b6578bfdec615
Certificate serial: 018BF6D785D3AA8DEED795C805CBAFAE7008
Authority key identifier: A5:48:AE:D9:0A:5E:23:B4:A7:36:95:60:8F:3B:65:78:BF:DE:C6:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/mNfW4eL9LO80DFshaamkTnV5lDE.roa
Signing time: Wed 22 Nov 2023 11:43:21 +0000
ROA not before: Wed 22 Nov 2023 11:43:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35486
IP address blocks: 185.79.29.0/24 maxlen: 26
185.79.28.0/24 maxlen: 24
185.79.31.0/24 maxlen: 26
185.79.30.0/24 maxlen: 26
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:d7:85:d3:aa:8d:ee:d7:95:c8:05:cb:af:ae:70:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a548aed90a5e23b4a73695608f3b6578bfdec615
Validity
Not Before: Nov 22 11:43:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98d7d6e1e2fd2cef340c5b2169a9a44e75799431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b6:22:20:23:d2:a3:9f:bd:23:8a:3f:4e:dd:
b7:bd:37:76:6b:b9:2b:bd:2c:01:f3:b8:dd:62:70:
05:49:38:4e:85:04:96:d7:4d:5a:41:cc:35:a7:39:
7d:b4:27:ef:64:66:03:1f:b8:9f:ca:74:bb:5a:35:
3e:bd:f4:3f:a5:61:85:22:b2:d3:f3:0a:0c:cc:04:
1b:e2:39:d9:f7:19:2f:19:aa:f1:8c:e0:90:bc:ce:
dd:eb:34:85:aa:06:13:f2:16:1e:b2:39:7e:24:7a:
7a:23:ab:2d:75:a1:c0:f2:5a:42:08:63:24:49:f1:
cf:0d:99:94:df:06:93:4f:03:ac:eb:26:86:ed:dd:
e7:bf:0a:1b:83:01:b2:17:95:e7:5e:a0:51:8b:e7:
33:48:c1:a6:48:dc:7c:cd:27:36:07:b1:f9:21:80:
65:78:ed:1e:57:b3:f2:d1:15:a1:d1:97:2d:ea:cf:
f4:f4:6e:bf:ed:ab:05:d9:49:4f:e8:b6:08:18:d7:
86:f6:ef:1f:eb:ac:6a:46:35:ea:1b:22:43:d3:2d:
c6:59:ab:fb:a5:3e:71:36:96:3b:ab:17:b9:ff:02:
a0:15:5c:71:ba:a9:09:3c:3d:77:c4:55:ae:d4:d2:
46:73:45:63:8c:a8:90:2c:d3:88:79:62:ff:1e:da:
61:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D7:D6:E1:E2:FD:2C:EF:34:0C:5B:21:69:A9:A4:4E:75:79:94:31
X509v3 Authority Key Identifier:
keyid:A5:48:AE:D9:0A:5E:23:B4:A7:36:95:60:8F:3B:65:78:BF:DE:C6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/mNfW4eL9LO80DFshaamkTnV5lDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.28.0/22
Signature Algorithm: sha256WithRSAEncryption
78:f5:90:ce:94:ac:83:5d:aa:95:e9:44:b2:73:f0:4a:d7:87:
52:26:ee:40:b9:79:e1:3b:2b:ea:7d:aa:78:ad:9e:fb:1d:ea:
8a:34:23:dc:c1:9c:b4:5b:39:95:c1:35:b0:4c:dd:3c:44:86:
81:94:78:f5:6f:48:82:ba:b7:ca:64:6d:33:e2:10:a0:94:49:
c7:0e:0e:4b:59:27:66:ac:7c:24:11:bb:39:e5:7c:93:13:22:
70:77:37:75:c6:60:c6:09:f1:65:01:56:ea:41:b9:a0:ae:74:
3c:06:0f:34:5f:40:61:d4:73:c1:f5:56:8b:30:6f:98:c1:e5:
d6:2f:79:01:18:9f:68:7d:70:4f:68:92:7d:6b:bb:16:2f:35:
4b:09:61:93:59:d7:cd:6a:a1:38:f7:42:47:1b:a0:d1:b5:d9:
1f:ce:c3:aa:25:05:83:e3:82:0c:d6:55:e4:c1:4c:db:a3:25:
eb:e4:ca:90:c8:9e:ed:34:07:96:3d:bb:39:5f:58:cd:2e:26:
79:90:2d:4b:54:1c:96:1c:2b:62:f0:e0:b8:b6:85:0f:40:cb:
2e:8b:43:ae:7a:47:f8:4a:9d:aa:20:db:2e:92:6a:05:d7:5e:
9b:e0:ba:f7:c6:29:ac:17:46:9d:97:e7:cd:ef:84:72:31:3f:
0a:1f:fa:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYv214XTqo3u15XIBcuvrnAIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NDhhZWQ5MGE1ZTIzYjRhNzM2OTU2MDhmM2I2NTc4YmZk
ZWM2MTUwHhcNMjMxMTIyMTE0MzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGQ3ZDZlMWUyZmQyY2VmMzQwYzViMjE2OWE5YTQ0ZTc1Nzk5NDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrYiICPSo5+9I4o/Tt23vTd2a7kr
vSwB87jdYnAFSThOhQSW101aQcw1pzl9tCfvZGYDH7ifynS7WjU+vfQ/pWGFIrLT
8woMzAQb4jnZ9xkvGarxjOCQvM7d6zSFqgYT8hYesjl+JHp6I6stdaHA8lpCCGMk
SfHPDZmU3waTTwOs6yaG7d3nvwobgwGyF5XnXqBRi+czSMGmSNx8zSc2B7H5IYBl
eO0eV7Py0RWh0Zct6s/09G6/7asF2UlP6LYIGNeG9u8f66xqRjXqGyJD0y3GWav7
pT5xNpY7qxe5/wKgFVxxuqkJPD13xFWu1NJGc0VjjKiQLNOIeWL/HtphtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJjX1uHi/SzvNAxbIWmppE51eZQxMB8GA1UdIwQY
MBaAFKVIrtkKXiO0pzaVYI87ZXi/3sYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFVpdTJRcGVJN1NuTnBWZ2p6dGxlTF9leGhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83NDY2YzItNTZkNC00OTRhLWIyNjct
NTQ2M2I3MWUyNmRlLzEvbU5mVzRlTDlMTzgwREZzaGFhbWtUblY1bERFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83NDY2YzItNTZkNC00OTRhLWIyNjctNTQ2M2I3MWUyNmRl
LzEvcFVpdTJRcGVJN1NuTnBWZ2p6dGxlTF9leGhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuU8cMA0G
CSqGSIb3DQEBCwUAA4IBAQB49ZDOlKyDXaqV6USyc/BK14dSJu5AuXnhOyvqfap4
rZ77HeqKNCPcwZy0WzmVwTWwTN08RIaBlHj1b0iCurfKZG0z4hCglEnHDg5LWSdm
rHwkEbs55XyTEyJwdzd1xmDGCfFlAVbqQbmgrnQ8Bg80X0Bh1HPB9VaLMG+YweXW
L3kBGJ9ofXBPaJJ9a7sWLzVLCWGTWdfNaqE490JHG6DRtdkfzsOqJQWD44IM1lXk
wUzboyXr5MqQyJ7tNAeWPbs5X1jNLiZ5kC1LVByWHCti8OC4toUPQMsui0Ouekf4
Sp2qINsukmoF116b4Lr3ximsF0adl+fN74RyMT8KH/pB
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:06 2024 by rpki-client on console-ams.rpki-client.org