Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/MMVtRTMWrx1K8Blp1ebHDRwCwDE.roa
File: MMVtRTMWrx1K8Blp1ebHDRwCwDE.roa (raw, json)
Hash identifier: X9E/ip3bhUTFJP04r57CIxKXP64JlUsD2lcJNQm3qWc=
Subject key identifier: 30:C5:6D:45:33:16:AF:1D:4A:F0:19:69:D5:E6:C7:0D:1C:02:C0:31
Certificate issuer: /CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Certificate serial: 01856F2FD7997BC312BDD13619ECC8E75E41
Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/MMVtRTMWrx1K8Blp1ebHDRwCwDE.roa
Signing time: Sun 01 Jan 2023 21:14:44 +0000
ROA not before: Sun 01 Jan 2023 21:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201102
IP address blocks: 195.184.75.0/24 maxlen: 24
185.194.4.0/22 maxlen: 22
185.82.224.0/22 maxlen: 22
2a05:9540::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:d7:99:7b:c3:12:bd:d1:36:19:ec:c8:e7:5e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Validity
Not Before: Jan 1 21:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30c56d453316af1d4af01969d5e6c70d1c02c031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:60:b4:7a:52:39:94:54:e4:a4:45:6b:04:b1:
62:dc:38:8f:76:db:6e:dc:6e:9e:43:9e:52:8c:bf:
3b:1f:78:e3:de:6f:b6:70:1d:50:11:84:a2:cc:a9:
6c:69:9a:fe:29:d0:b7:30:cf:ac:53:1b:1f:ec:3b:
33:bb:e3:30:68:10:a3:72:af:5b:dc:b4:8c:c4:23:
86:5e:9f:50:d0:34:07:3d:7b:25:68:05:54:ec:2b:
d9:78:50:c3:96:be:7f:4b:ee:2d:ad:c5:a0:44:22:
5d:ff:0d:b9:56:b7:26:2b:85:6f:df:d9:fd:a5:fe:
c5:3b:f2:a6:c3:ea:d2:a7:c7:2d:fb:a7:87:90:0d:
e4:82:90:1c:2d:03:56:fb:72:88:2e:ca:a3:b3:42:
8b:bb:bb:6c:f3:47:95:ca:b9:a0:55:72:3f:a8:32:
01:69:0c:50:40:9b:c0:19:30:02:84:c6:23:c6:5f:
b9:18:b6:8b:67:93:70:bb:33:e0:0c:bb:ae:ed:6c:
80:9c:b4:ed:f8:db:87:13:fb:68:1f:b6:85:8a:5b:
c9:4f:44:34:b3:44:6b:f6:4c:9c:a2:c5:78:d3:19:
7d:b6:2d:b1:dd:8c:5d:2d:6d:f4:8a:24:14:cd:ad:
cd:e4:03:3f:ea:45:bb:56:73:22:f0:e7:4f:fd:04:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C5:6D:45:33:16:AF:1D:4A:F0:19:69:D5:E6:C7:0D:1C:02:C0:31
X509v3 Authority Key Identifier:
keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/MMVtRTMWrx1K8Blp1ebHDRwCwDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.224.0/22
185.194.4.0/22
195.184.75.0/24
IPv6:
2a05:9540::/29
Signature Algorithm: sha256WithRSAEncryption
8e:96:b7:2b:6a:e7:78:2b:fd:c7:30:fb:29:8d:71:71:53:9d:
63:3c:65:23:c6:6d:a4:aa:66:74:36:ac:b7:f2:e6:49:ac:f5:
03:39:87:e0:7a:86:af:d4:9d:60:52:43:8e:c0:88:38:f3:66:
ea:a6:11:f1:3f:b1:fb:c1:9e:45:44:e2:4b:3d:e9:3e:5d:53:
e3:08:51:44:5b:66:94:ef:fe:ff:3c:3d:30:52:8c:b0:71:07:
be:71:c2:cf:65:c4:f7:7e:81:16:f3:f1:91:29:99:42:70:7b:
b7:95:56:40:0c:d3:5f:2c:3b:e2:6a:42:ab:a1:b1:0f:0d:b6:
df:0d:c8:0f:10:d7:6a:09:b6:08:b5:77:ce:a2:21:04:68:8c:
87:3e:89:a9:0f:22:07:58:7d:a2:4e:a2:bc:2d:84:35:76:8f:
98:47:d4:5f:89:25:38:ac:18:e2:e8:e4:20:f5:1b:7c:0e:15:
46:00:ab:03:f8:66:4e:2b:ea:58:5a:dd:d5:1a:9f:17:d4:b2:
d0:95:d0:7e:04:6a:fc:0e:c3:c4:63:11:6c:67:20:a1:ae:7c:
df:64:68:b0:82:a1:0f:0a:5e:49:76:de:64:53:8b:8e:a9:4b:
da:ce:14:f7:16:8b:93:e2:70:34:46:19:5a:d6:de:cb:b2:4e:
15:62:d5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:44 2024 by rpki-client on console-fra.rpki-client.org