Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/6_M--MhON1hhxHTEOnjSw30MeZY.roa
File: 6_M--MhON1hhxHTEOnjSw30MeZY.roa (raw, json)
Hash identifier: Gzny85d+5UjgndjDo5/wstIlYgrUcvFpeIE+C+Ghudo=
Subject key identifier: EB:F3:3E:F8:C8:4E:37:58:61:C4:74:C4:3A:78:D2:C3:7D:0C:79:96
Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial: 01857039998C714B9E33D4260F77A24A5FCA
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/6_M--MhON1hhxHTEOnjSw30MeZY.roa
Signing time: Mon 02 Jan 2023 02:05:01 +0000
ROA not before: Mon 02 Jan 2023 02:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56782
IP address blocks: 95.107.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:99:8c:71:4b:9e:33:d4:26:0f:77:a2:4a:5f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
Validity
Not Before: Jan 2 02:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebf33ef8c84e375861c474c43a78d2c37d0c7996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3e:a5:e5:c8:10:11:e0:63:e9:06:0c:34:1c:
b5:e2:80:47:59:5e:07:61:27:49:6f:f8:fa:88:78:
20:1e:8f:1f:42:28:73:af:60:2b:87:12:4e:0e:62:
f0:43:a1:42:58:bc:5f:b6:ac:a1:de:b0:e3:d9:9b:
85:d3:6a:7d:a0:6d:ae:a6:2f:13:cf:cb:be:15:3b:
f1:62:17:10:2d:fb:1a:a9:7b:bc:71:26:4d:d6:77:
3c:e7:81:bd:a0:bf:66:7a:fb:86:8f:ea:4b:e4:40:
be:91:3f:93:cf:53:a1:f1:5e:92:59:77:9b:e0:3b:
f4:a1:99:b7:63:3d:02:62:19:71:13:b0:de:39:62:
79:07:ec:17:73:31:f2:d3:ce:13:dc:40:96:19:36:
97:ce:c9:b8:a0:15:fb:fe:b7:cf:f1:e8:c4:59:3c:
e1:80:bf:d0:47:e1:d1:2b:00:e8:e6:27:ac:32:2c:
fb:44:ec:bf:a8:5f:e4:28:69:f8:7e:28:21:af:ba:
a2:fa:c4:28:9b:36:cf:0b:39:11:00:45:7a:99:a1:
1b:87:5d:59:f6:0d:18:46:37:47:68:9e:76:8c:dd:
18:ef:5e:4c:74:a4:d6:9d:07:53:9e:e7:bd:a8:49:
9b:28:38:8b:de:2c:0a:9b:14:14:e4:99:b3:de:d2:
65:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F3:3E:F8:C8:4E:37:58:61:C4:74:C4:3A:78:D2:C3:7D:0C:79:96
X509v3 Authority Key Identifier:
keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/6_M--MhON1hhxHTEOnjSw30MeZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.107.175.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:58:bb:b5:35:55:6f:85:53:91:a8:bf:e9:8b:21:57:ce:42:
fe:e7:e7:49:2f:80:44:bd:ac:1c:18:30:55:5e:23:14:3f:3b:
28:06:ab:a4:d8:df:30:08:6b:51:95:26:3d:c3:f5:61:4e:57:
a7:93:a8:49:68:87:a7:c5:34:e1:6b:38:65:40:be:db:1b:1f:
9f:b2:25:c1:8b:86:fb:88:86:90:66:04:b2:4f:46:03:6b:78:
db:91:b2:22:2c:d8:0b:78:71:79:84:21:85:44:62:f2:c5:bb:
1e:38:2f:3c:e7:61:79:70:e7:d0:83:d6:01:53:3a:5b:22:1e:
9d:f7:78:0d:d6:e0:b6:96:55:60:70:96:29:da:c5:57:0c:3b:
00:84:35:54:67:0d:6c:13:0b:e6:fe:ca:d6:0b:12:4c:52:a9:
81:22:f7:47:dc:17:f8:f5:27:94:4a:77:7a:d5:1b:41:dc:c9:
69:f1:03:d5:a8:01:92:bc:f7:20:5e:c2:fb:8e:4b:a3:f6:9a:
e3:78:b9:11:e0:3c:6e:a2:5d:b6:19:e5:7e:79:55:33:bd:cc:
c2:85:9b:dc:b8:0d:46:68:4e:a7:f3:c5:7d:1f:f8:76:05:70:
95:99:8e:af:b4:0d:af:8f:4c:ac:9a:40:24:7f:99:a3:f4:b7:
7a:9d:84:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:32 2024 by rpki-client on console-fra.rpki-client.org