Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/MAsIjkWIsS4SpsabsaH-nshLoqY.roa
File: MAsIjkWIsS4SpsabsaH-nshLoqY.roa (raw, json)
Hash identifier: SGqjTbpiCip74tpCXweAlBA92wckN1aZwck52JGmGVI=
Subject key identifier: 30:0B:08:8E:45:88:B1:2E:12:A6:C6:9B:B1:A1:FE:9E:C8:4B:A2:A6
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01856FB11B086EF7F41EBA092F716F909123
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/MAsIjkWIsS4SpsabsaH-nshLoqY.roa
Signing time: Sun 01 Jan 2023 23:35:55 +0000
ROA not before: Sun 01 Jan 2023 23:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31400
IP address blocks: 5.183.95.0/24 maxlen: 24
45.86.163.0/24 maxlen: 24
46.30.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:1b:08:6e:f7:f4:1e:ba:09:2f:71:6f:90:91:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 1 23:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=300b088e4588b12e12a6c69bb1a1fe9ec84ba2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a8:90:84:ab:fb:3d:89:fe:7a:f9:11:52:43:
3d:52:3e:2e:cf:21:5b:56:90:9b:df:fe:33:61:b8:
52:2d:9e:01:8d:7a:d4:18:36:fc:f0:b7:fb:d9:8f:
fd:7a:06:e0:78:5b:b6:5e:6a:e2:42:dd:b5:b2:16:
a8:1c:0d:e6:05:0d:d6:6e:72:87:66:d1:e6:d1:86:
21:e8:e5:e7:ae:92:75:f6:8b:1e:e3:c2:d6:c1:4f:
c7:b9:69:64:7b:70:ed:25:03:f8:c2:63:6f:9a:90:
6e:8f:26:0b:61:05:54:79:e6:72:08:29:f7:ca:8f:
85:0f:1b:0d:fe:c2:89:f1:4a:9e:6c:4f:a1:b7:76:
fe:b6:07:1e:e7:cd:b9:3c:5e:a4:73:5f:22:e4:e6:
cb:4e:ce:de:85:20:22:33:7f:06:bb:92:0a:1f:d6:
c5:05:4e:bb:91:ac:d9:d5:b5:d4:59:95:6a:ec:a4:
01:83:6d:e0:1c:56:28:98:eb:be:ff:29:60:87:81:
f9:29:6d:9a:31:ca:b4:6f:83:5a:1f:e9:47:58:fb:
98:93:2a:d4:84:5d:a8:53:e9:88:5d:a9:8c:bd:bd:
b4:3e:e1:8e:82:72:8a:9f:ff:76:69:4c:d4:2f:23:
ed:27:30:75:0a:02:c2:14:0e:46:50:12:35:1e:95:
4d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0B:08:8E:45:88:B1:2E:12:A6:C6:9B:B1:A1:FE:9E:C8:4B:A2:A6
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/MAsIjkWIsS4SpsabsaH-nshLoqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.95.0/24
45.86.163.0/24
46.30.189.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:34:55:50:3b:31:2d:e9:4f:2b:73:cd:a1:59:a7:b4:54:42:
97:af:e3:6b:ad:e7:86:d3:13:39:87:36:ba:4c:b0:af:34:a5:
fd:cd:7c:dd:d3:aa:b7:ba:23:35:2a:82:15:cf:6e:45:8f:f6:
67:65:d4:f0:94:fd:cd:03:69:ce:86:de:e4:c7:5e:c9:92:61:
b1:e1:e3:27:6c:01:6d:6d:05:8b:2a:a8:51:87:b4:08:a5:a3:
9c:a2:71:b8:e9:4d:c5:a8:f4:79:b0:fb:83:0b:98:ae:e8:25:
c8:e9:a5:2a:ac:a3:59:75:1d:18:d0:d2:0c:b4:27:60:58:0b:
1d:4f:0d:8e:73:68:22:c5:49:df:e9:71:fb:eb:79:15:f0:bc:
68:28:26:29:ba:70:bd:0d:59:99:ff:7b:26:90:73:69:df:cf:
42:b0:09:0a:77:7a:7a:6f:a6:7c:fc:5c:ec:64:30:17:a2:b0:
a6:2b:91:d2:4f:9d:38:8b:ff:5f:49:a0:60:b8:cb:6d:6b:4b:
62:68:2c:c4:a8:eb:0d:1b:0a:98:b0:e8:5c:7f:cb:38:32:70:
f8:c5:be:96:a7:e0:83:12:3f:ad:6f:ba:d5:7f:53:99:5a:dd:
39:f5:48:c2:35:79:03:59:f6:90:32:e4:53:1f:07:ee:85:5a:
7c:16:c1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:31 2024 by rpki-client on console-fra.rpki-client.org