Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/moaPsj-JPfyMs7V69zB0iM1OrFM.roa
File: moaPsj-JPfyMs7V69zB0iM1OrFM.roa (raw, json)
Hash identifier: +R04qFi/z5IGrwawLao4xgC5/yWeiLOL17hShG7FDKE=
Subject key identifier: 9A:86:8F:B2:3F:89:3D:FC:8C:B3:B5:7A:F7:30:74:88:CD:4E:AC:53
Certificate issuer: /CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Certificate serial: 0185720C54608A1954634A1135EF505BD098
Authority key identifier: D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/moaPsj-JPfyMs7V69zB0iM1OrFM.roa
Signing time: Mon 02 Jan 2023 10:34:48 +0000
ROA not before: Mon 02 Jan 2023 10:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 185.69.250.0/24 maxlen: 24
185.69.249.0/24 maxlen: 24
185.69.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:54:60:8a:19:54:63:4a:11:35:ef:50:5b:d0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Validity
Not Before: Jan 2 10:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a868fb23f893dfc8cb3b57af7307488cd4eac53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bf:35:ba:2b:dc:9b:a1:37:48:ce:99:aa:a0:
c2:75:c1:81:f4:b2:ec:a8:18:cb:c0:2c:29:42:25:
6e:1f:ff:02:9a:68:a2:61:92:97:c0:45:5a:6b:65:
25:56:0b:8a:49:26:b0:b9:96:47:0d:2d:13:c0:1f:
ed:6c:d4:e1:5a:e1:aa:1c:40:a1:f8:b0:6c:04:27:
44:1c:c6:a6:33:a0:b1:2c:22:ba:1e:1f:51:2a:2b:
f1:20:a9:ce:b4:97:4f:4c:fc:76:dd:a7:19:a1:62:
5d:cc:b1:94:76:f1:d0:d7:1e:68:85:52:22:48:bc:
86:ee:bb:50:99:22:86:1d:e4:86:42:f4:92:59:08:
3a:be:be:e0:d4:4b:13:fa:a0:9e:8b:d4:93:c4:27:
81:8f:ee:ab:82:24:c7:f0:99:90:1d:05:be:a6:ba:
e7:ea:0b:b9:86:19:6c:f2:d2:63:d0:19:09:0c:82:
71:cb:47:fc:47:82:ab:73:99:9f:d7:5e:51:e7:6b:
85:9c:e6:cd:91:4e:01:ef:e6:e5:53:6d:44:2b:ef:
0d:a5:77:2e:48:99:da:b5:28:32:c3:24:dd:e6:a0:
5b:87:d9:05:65:51:17:ed:4b:35:56:77:69:25:be:
76:7b:cd:a4:e7:8b:2c:b7:c4:fa:95:05:a0:24:1b:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:86:8F:B2:3F:89:3D:FC:8C:B3:B5:7A:F7:30:74:88:CD:4E:AC:53
X509v3 Authority Key Identifier:
keyid:D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/moaPsj-JPfyMs7V69zB0iM1OrFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.248.0-185.69.250.255
Signature Algorithm: sha256WithRSAEncryption
76:63:2a:a0:dd:58:b7:92:4e:97:f8:41:07:da:10:ed:e5:03:
9b:92:f0:6e:86:4a:be:43:46:aa:48:4b:9b:fc:95:b8:14:74:
86:e4:06:f1:cd:02:f3:31:09:f2:94:d1:a7:d0:fa:df:a7:c0:
3e:1e:27:b3:f4:4c:03:9d:d2:52:59:96:47:fa:d9:9a:f8:b0:
0a:5b:92:98:dc:93:5e:16:1f:fb:c8:24:83:9e:c2:84:14:ee:
26:9b:59:41:db:37:e6:10:ad:7b:92:fc:d0:44:d5:76:24:cf:
b3:c1:62:ec:b9:1e:58:e5:e8:34:8f:70:67:b4:b5:21:47:be:
6c:33:3c:fc:ff:b3:2f:b8:cc:d3:38:fa:60:53:9b:c5:96:c6:
a9:57:a1:50:f4:c2:bd:53:f8:79:60:1c:b0:27:a4:1c:de:85:
55:c8:72:68:eb:06:f2:a2:c2:18:ed:d1:d1:ab:18:99:45:ef:
63:e1:aa:67:f7:f7:03:79:3d:4d:cd:43:0f:6c:06:09:88:02:
4b:5c:9a:b3:ad:7b:52:71:72:32:80:33:c7:75:1f:92:b3:57:
24:6f:60:1f:5b:0e:1c:95:82:df:67:7f:89:91:66:05:06:e2:
fc:d8:62:66:6e:71:09:e3:09:07:6e:e4:14:75:e0:e8:ab:70:
e8:9b:47:de
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVyDFRgihlUY0oRNe9QW9CYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOWE3ZjdmZGQ1NGExN2NlNWUxMmE0MTgyZWI2NTI0Nzlm
OWQ3NTgwHhcNMjMwMTAyMTAzNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTg2OGZiMjNmODkzZGZjOGNiM2I1N2FmNzMwNzQ4OGNkNGVhYzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw781uivcm6E3SM6ZqqDCdcGB9LLs
qBjLwCwpQiVuH/8CmmiiYZKXwEVaa2UlVguKSSawuZZHDS0TwB/tbNThWuGqHECh
+LBsBCdEHMamM6CxLCK6Hh9RKivxIKnOtJdPTPx23acZoWJdzLGUdvHQ1x5ohVIi
SLyG7rtQmSKGHeSGQvSSWQg6vr7g1EsT+qCei9STxCeBj+6rgiTH8JmQHQW+prrn
6gu5hhls8tJj0BkJDIJxy0f8R4Krc5mf115R52uFnObNkU4B7+blU21EK+8NpXcu
SJnatSgywyTd5qBbh9kFZVEX7Us1VndpJb52e82k54sst8T6lQWgJBvBUQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJqGj7I/iT38jLO1evcwdIjNTqxTMB8GA1UdIwQY
MBaAFNCaf3/dVKF85eEqQYLrZSR5+ddYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpwX2Y5MVVvWHpsNFNwQmd1dGxKSG41MTFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iM2Q5N2UtNWNjMi00NjY5LWIzNzgt
NTg3NWE0NDg5ZGJhLzEvbW9hUHNqLUpQZnlNczdWNjl6QjBpTTFPckZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iM2Q5N2UtNWNjMi00NjY5LWIzNzgtNTg3NWE0NDg5ZGJh
LzEvMEpwX2Y5MVVvWHpsNFNwQmd1dGxKSG41MTFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAO5RfgD
BAC5RfowDQYJKoZIhvcNAQELBQADggEBAHZjKqDdWLeSTpf4QQfaEO3lA5uS8G6G
Sr5DRqpIS5v8lbgUdIbkBvHNAvMxCfKU0afQ+t+nwD4eJ7P0TAOd0lJZlkf62Zr4
sApbkpjck14WH/vIJIOewoQU7iabWUHbN+YQrXuS/NBE1XYkz7PBYuy5Hljl6DSP
cGe0tSFHvmwzPPz/sy+4zNM4+mBTm8WWxqlXoVD0wr1T+HlgHLAnpBzehVXIcmjr
BvKiwhjt0dGrGJlF72Phqmf39wN5PU3NQw9sBgmIAktcmrOte1JxcjKAM8d1H5Kz
VyRvYB9bDhyVgt9nf4mRZgUG4vzYYmZucQnjCQdu5BR14OircOibR94=
-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:07 2024 by rpki-client on console.sobornost.net