Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/MCc3yR6l5s2ZciG6Rn0upKLV5eU.roa
File: MCc3yR6l5s2ZciG6Rn0upKLV5eU.roa (raw, json)
Hash identifier: 7IZeOAqZnZYl5WfYEPyZ0WrAfWefUx0hvQpVrryQyLU=
Subject key identifier: 30:27:37:C9:1E:A5:E6:CD:99:72:21:BA:46:7D:2E:A4:A2:D5:E5:E5
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0185DDEB349F8FA18EEFF1ADD5F151541AE7
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/MCc3yR6l5s2ZciG6Rn0upKLV5eU.roa
Signing time: Mon 23 Jan 2023 09:17:37 +0000
ROA not before: Mon 23 Jan 2023 09:17:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44313
IP address blocks: 185.43.58.0/24 maxlen: 24
109.160.100.0/22 maxlen: 22
109.160.113.0/24 maxlen: 24
109.160.122.0/23 maxlen: 23
109.160.124.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:dd:eb:34:9f:8f:a1:8e:ef:f1:ad:d5:f1:51:54:1a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 23 09:17:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=302737c91ea5e6cd997221ba467d2ea4a2d5e5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c0:12:1a:28:35:6a:5d:79:70:a1:b2:4c:f9:
1b:13:9d:60:41:9f:46:49:9b:f6:79:9a:cc:5f:9e:
d2:a8:d6:37:75:e1:ad:93:81:8d:e1:e2:37:ce:a2:
52:dc:f4:49:0c:ce:c9:63:f6:05:f5:fb:85:b5:af:
78:75:23:55:85:3a:04:86:fd:7a:65:7a:14:94:cf:
ff:da:61:e3:be:92:72:c4:bf:49:c3:5c:30:0c:65:
0a:31:9b:14:98:e5:05:e2:98:33:2e:d7:48:5e:27:
45:22:f2:52:52:a2:bc:25:dd:49:4d:e1:2a:f2:99:
2f:a0:11:f0:67:fb:3f:cd:4f:0a:e6:a3:ec:89:56:
b4:74:9a:4d:d8:ef:7b:14:2d:db:73:db:d9:5c:c6:
2e:9f:3c:6b:f6:cd:a4:51:3a:d9:47:51:e4:fe:b3:
54:9b:f1:cc:8a:02:56:ba:4c:5d:80:9a:74:21:23:
60:70:89:7c:34:8c:e0:aa:0c:5a:50:ba:7b:31:6f:
10:9d:b3:60:34:8b:b9:25:c3:8a:75:d8:b4:38:d3:
7f:28:94:7b:cf:76:ec:49:8b:8c:32:31:3c:df:07:
55:c9:3f:fb:ac:f6:8e:2f:68:09:7f:d1:bf:28:6c:
7d:39:64:68:64:b8:34:d7:bb:9b:84:1b:e0:37:82:
d9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:27:37:C9:1E:A5:E6:CD:99:72:21:BA:46:7D:2E:A4:A2:D5:E5:E5
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/MCc3yR6l5s2ZciG6Rn0upKLV5eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.100.0/22
109.160.113.0/24
109.160.122.0-109.160.127.255
185.43.58.0/24
Signature Algorithm: sha256WithRSAEncryption
96:91:70:76:84:a7:02:d2:aa:13:9d:25:e3:a5:f6:db:09:a5:
c3:8e:18:48:56:78:61:63:fd:74:94:d6:02:cb:9f:6a:f0:e8:
fb:04:c3:8a:eb:a2:8f:c3:6e:1c:87:22:c3:56:c3:07:9d:54:
a7:d8:a8:22:76:c1:c0:65:1d:28:f5:fa:d3:b7:cd:79:c6:f5:
e2:f4:f1:9f:2e:39:c1:23:11:e3:83:a4:50:44:19:e4:82:54:
9f:46:03:b7:49:b4:c9:c4:0e:d3:e1:c7:81:4e:af:bd:25:6b:
9f:d8:2d:b4:f2:62:b3:90:a4:d3:d3:9a:5d:2a:51:c9:aa:c9:
87:d6:62:ca:16:56:1d:6f:19:e5:2d:13:d8:9b:88:51:8f:8c:
64:20:79:ae:b2:97:ef:c6:c7:66:8e:ea:43:af:af:69:b3:b3:
5d:68:49:d3:de:d7:d0:69:18:f0:3f:b7:cb:69:72:36:ea:9f:
7e:f9:85:0d:ad:70:09:9f:2d:e3:02:84:f8:0b:58:bc:fb:1c:
8c:ea:72:9a:9a:09:a7:a6:71:e5:8f:11:6f:20:4d:a7:d5:86:
bc:d7:83:66:d6:ed:cb:4d:d2:32:2b:fa:1f:b8:85:31:8d:c0:
0e:1b:2c:0b:52:fe:1c:8a:af:15:ce:d4:71:20:cc:3a:7e:bc:
4d:85:76:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:42 2024 by rpki-client on console-fra.rpki-client.org