Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/MWR9FCeCfWf8NFT2y5fl0lZI0gM.roa
File: MWR9FCeCfWf8NFT2y5fl0lZI0gM.roa (raw, json)
Hash identifier: DAC3XstWLnFfXBvuch9aYoYPrM2XWUqzRSFwZmh1+Rc=
Subject key identifier: 31:64:7D:14:27:82:7D:67:FC:34:54:F6:CB:97:E5:D2:56:48:D2:03
Certificate issuer: /CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a
Certificate serial: 01857094FEE91A2DAC8251C81907E76817A3
Authority key identifier: 57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/MWR9FCeCfWf8NFT2y5fl0lZI0gM.roa
Signing time: Mon 02 Jan 2023 03:44:50 +0000
ROA not before: Mon 02 Jan 2023 03:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44735
IP address blocks: 185.45.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:fe:e9:1a:2d:ac:82:51:c8:19:07:e7:68:17:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a
Validity
Not Before: Jan 2 03:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31647d1427827d67fc3454f6cb97e5d25648d203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:d8:b9:d7:ed:1b:f2:e8:c3:c0:33:61:61:
c1:70:3a:68:48:6c:3d:a4:21:91:e1:ac:aa:dd:f1:
3f:46:7a:21:a9:9d:a2:68:83:5d:67:9b:fa:21:a6:
15:f8:e5:a3:b6:c4:f9:a9:b7:d1:57:ac:9f:9a:ba:
f9:c5:aa:4d:2d:49:2b:c6:2f:ae:9a:dd:09:cc:6a:
e2:f4:19:60:d8:2e:5f:16:69:ff:55:c3:dd:c5:14:
66:02:44:9d:29:43:74:17:4a:01:ac:1f:39:eb:22:
71:77:ee:01:1c:55:6e:5a:d8:9f:68:e1:4f:6b:37:
46:b9:26:51:c3:ff:ca:22:03:ee:98:39:09:5f:9c:
36:b6:53:f9:74:97:f1:77:9d:9e:51:9c:78:3e:bb:
98:c8:ce:84:db:d1:fe:d9:5a:ae:92:f2:2b:8b:1a:
89:db:eb:61:11:14:d9:62:8a:42:c1:dd:a0:2c:aa:
41:75:fa:85:be:5e:b7:8e:a5:3b:77:da:d2:de:eb:
e2:78:59:7a:47:91:4f:9e:46:54:2b:e0:41:44:53:
6a:a9:81:eb:28:99:40:c4:8f:37:6f:3a:ea:0d:28:
76:f6:48:18:7e:6c:4a:01:95:70:bd:0a:af:d2:c0:
8c:5c:b5:49:92:60:ef:1d:42:67:e9:18:87:c1:62:
4c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:64:7D:14:27:82:7D:67:FC:34:54:F6:CB:97:E5:D2:56:48:D2:03
X509v3 Authority Key Identifier:
keyid:57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/MWR9FCeCfWf8NFT2y5fl0lZI0gM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.76.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e3:81:ed:92:db:69:61:19:90:bf:0d:97:da:5b:0c:0f:18:
de:dd:a4:72:4e:9c:53:f6:39:52:4d:54:25:c3:4b:eb:f3:f6:
29:65:bb:41:83:35:a0:38:20:7d:0a:b5:71:fb:08:93:67:bd:
31:0f:f8:64:92:44:f7:f5:2d:15:fe:e3:a2:dd:ab:62:3d:d0:
17:f9:78:ed:8d:f5:20:20:93:4b:74:2b:7e:37:cd:f1:c9:05:
b3:5c:79:b1:19:e6:0b:64:1e:d8:f6:2c:59:0f:10:28:eb:96:
53:9d:49:e3:74:4e:a8:01:4e:cf:fc:a4:0c:d1:9c:76:1a:53:
3d:86:c0:a1:84:c4:72:fa:e7:76:5f:f4:e0:ff:d5:ba:15:af:
45:a7:38:71:eb:67:1d:a5:cf:3e:4d:09:bd:d1:05:bc:3c:9d:
69:21:d8:0e:9e:a5:3b:1e:28:61:d5:76:d5:df:3f:d1:38:36:
ce:db:59:a7:a3:d8:64:22:b1:ae:b8:cb:76:c4:b1:86:c5:da:
c2:17:23:02:3d:cf:e8:cd:03:e7:f0:72:fb:99:be:f6:03:ca:
c5:95:a1:0e:22:9f:a8:ef:27:50:51:93:07:71:0f:c5:f2:92:
0f:08:95:6d:f7:4a:e2:bb:c1:0a:88:af:d0:29:8d:52:20:89:
ae:21:e3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:56 2024 by rpki-client on console-fra.rpki-client.org