Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/mcvLkERsHAMo9Vm2-sYJidzAzOg.roa
File: mcvLkERsHAMo9Vm2-sYJidzAzOg.roa (raw, json)
Hash identifier: VKixf1ti4all3LwbezR98M7iLRB/O9w5gN5XiG/j1FE=
Subject key identifier: 99:CB:CB:90:44:6C:1C:03:28:F5:59:B6:FA:C6:09:89:DC:C0:CC:E8
Certificate issuer: /CN=e964d2705a9b26fd482a9c10e926eae7bda41e9b
Certificate serial: 018747704B472B8F8E239D13A617821BA836
Authority key identifier: E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/mcvLkERsHAMo9Vm2-sYJidzAzOg.roa
Signing time: Mon 03 Apr 2023 14:05:54 +0000
ROA not before: Mon 03 Apr 2023 14:05:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200976
IP address blocks: 185.198.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:47:70:4b:47:2b:8f:8e:23:9d:13:a6:17:82:1b:a8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e964d2705a9b26fd482a9c10e926eae7bda41e9b
Validity
Not Before: Apr 3 14:05:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99cbcb90446c1c0328f559b6fac60989dcc0cce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b9:30:ce:2b:ca:c7:03:bf:6f:21:c1:44:56:
ac:01:d9:11:cd:49:6d:67:e4:7d:c1:e2:a4:d0:31:
0f:54:a7:7e:11:ea:9b:6b:77:32:b8:b9:4f:00:ff:
ce:04:8f:db:e0:c6:77:58:2b:a7:88:cc:c6:e6:50:
eb:47:64:ab:c8:5b:1f:55:eb:d2:93:0b:46:04:2a:
71:49:bf:b8:4a:a9:ca:ba:b2:c8:31:68:7d:af:d2:
8d:ba:84:dc:27:a7:e9:77:68:9b:10:db:82:aa:c2:
2a:01:97:f3:05:15:0c:fc:87:77:62:25:09:17:a7:
89:d4:4a:39:d8:6e:d9:77:da:49:4e:3d:d3:d7:96:
ca:4d:02:54:a1:5a:86:70:86:c2:4d:57:4b:b6:05:
2f:82:4e:1a:b4:c3:c4:66:c2:a8:1d:cd:32:00:5a:
9f:ee:dc:a2:8a:13:22:64:51:b1:28:4a:78:17:ca:
15:89:41:1e:ca:ed:23:b0:0e:c4:ab:49:5c:fa:03:
67:3b:6a:20:f9:e9:61:88:f4:7a:e1:c4:97:4a:7d:
f1:29:6c:0a:c7:13:0e:54:fd:98:0b:8b:89:ca:1f:
b0:d8:e5:ad:3f:10:b0:ae:3b:95:77:08:e9:c1:ae:
b6:b8:fd:54:b6:0f:51:12:4b:bf:65:1c:b7:61:9a:
1d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CB:CB:90:44:6C:1C:03:28:F5:59:B6:FA:C6:09:89:DC:C0:CC:E8
X509v3 Authority Key Identifier:
keyid:E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/mcvLkERsHAMo9Vm2-sYJidzAzOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.113.0/24
Signature Algorithm: sha256WithRSAEncryption
90:2f:e5:40:e1:2a:56:a2:38:ec:cc:36:f6:d7:54:64:b5:f5:
8e:69:87:9b:f1:e2:b1:dd:d5:e6:d2:b5:fc:c7:91:f4:0c:d9:
25:d4:fb:d1:3a:05:b1:3c:70:ba:fa:ef:3c:9e:7c:74:3a:0b:
92:d8:58:03:c0:1f:e1:cc:74:3d:d3:3e:2d:e3:75:02:75:f1:
f9:e1:bc:c7:70:d0:96:03:f1:61:b8:1c:ad:cc:63:11:f8:13:
25:82:60:b6:60:80:55:d1:19:11:e8:cd:f9:1d:83:7f:04:68:
4d:02:15:8b:28:a7:c7:8f:68:06:26:54:e1:03:f6:00:88:6a:
cf:ae:27:99:30:87:0f:51:3f:ba:7e:82:05:00:33:5e:6c:41:
28:b0:82:c5:53:20:8c:a1:4d:25:19:49:fa:cb:6b:8e:2f:b6:
25:3c:2c:91:fd:b8:42:14:81:16:eb:3c:2c:2a:56:78:5f:9a:
1f:dd:4d:4b:fc:85:9f:0c:3a:2f:76:9d:89:14:a7:ec:f6:2b:
d2:ec:20:57:30:cc:53:68:c6:40:fd:18:15:b2:d6:c5:49:76:
28:d8:7e:4a:31:e1:a8:69:c0:09:dc:10:fb:75:d7:c0:f8:5c:
ac:7e:fc:9d:87:92:b4:7e:6c:70:c7:cf:6c:c7:27:82:84:aa:
13:50:c9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net