Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/msd74VPgKkRBY0mBL9-salMq7AU.roa
File: msd74VPgKkRBY0mBL9-salMq7AU.roa (raw, json)
Hash identifier: 97SuOin+ssInQ879jhm0PRU370hewfRh0+ICb/Fl0JI=
Subject key identifier: 9A:C7:7B:E1:53:E0:2A:44:41:63:49:81:2F:DF:AC:6A:53:2A:EC:05
Certificate issuer: /CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Certificate serial: 0188BA20AC07F1457C6B5F2BB18919692600
Authority key identifier: 08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/msd74VPgKkRBY0mBL9-salMq7AU.roa
Signing time: Wed 14 Jun 2023 13:38:03 +0000
ROA not before: Wed 14 Jun 2023 13:38:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199102
IP address blocks: 93.189.224.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ba:20:ac:07:f1:45:7c:6b:5f:2b:b1:89:19:69:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Validity
Not Before: Jun 14 13:38:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ac77be153e02a44416349812fdfac6a532aec05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c9:7c:38:41:e4:6f:1f:ac:96:09:2a:c9:2f:
91:a7:6c:68:be:d7:89:85:88:55:b3:c3:81:f9:73:
40:ca:81:b0:16:87:85:63:d4:27:59:29:61:e1:16:
d8:7c:db:7f:ba:29:02:8b:5f:43:00:56:c2:ff:55:
27:4c:ee:f9:49:19:1a:ca:72:6a:04:5f:aa:72:5a:
b2:98:c4:e5:75:3c:75:c1:86:95:aa:29:c2:4d:df:
97:73:30:ff:e6:1d:d1:f8:ab:d3:1d:44:42:a6:9b:
80:21:5e:07:85:74:02:81:4e:c3:43:4e:d5:10:49:
a7:79:ab:bd:55:93:f7:20:c1:a8:95:d2:ce:0b:18:
fa:d8:1d:0a:66:0b:fe:cd:15:d7:43:66:76:77:c2:
a6:38:4f:04:47:b2:9b:e1:54:22:d8:3d:79:e9:5d:
db:fd:95:ca:fd:71:ca:d5:63:77:67:61:a6:ba:80:
a2:6e:22:45:cf:d6:60:d5:8c:4e:b2:dc:0e:11:5a:
b7:18:44:a4:74:89:a0:f6:bc:46:ff:0b:a7:16:89:
bf:1b:6e:f6:27:8b:76:bd:7a:ba:64:68:a6:a5:ba:
c7:d1:1c:cf:45:2e:ad:a0:ed:70:c6:7e:6d:82:c7:
a6:22:b4:a0:61:34:0b:a1:2c:c7:28:8b:3e:39:ea:
4c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C7:7B:E1:53:E0:2A:44:41:63:49:81:2F:DF:AC:6A:53:2A:EC:05
X509v3 Authority Key Identifier:
keyid:08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/msd74VPgKkRBY0mBL9-salMq7AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.189.224.0/22
Signature Algorithm: sha256WithRSAEncryption
24:42:f4:dd:ed:3c:e8:1c:58:a7:be:49:ea:49:c5:1f:3f:84:
8b:0c:4c:1f:a1:d9:90:9b:20:fe:21:4a:b8:b5:76:b1:f3:ea:
35:91:6e:53:6a:be:09:dd:da:b9:48:25:8a:af:3e:68:66:00:
5e:ce:d0:c8:19:e3:18:a5:f3:70:35:1d:4c:7b:fe:28:7b:43:
cb:29:c4:66:4c:40:e3:43:86:49:7f:7c:c7:45:fe:87:55:c4:
51:81:2d:18:55:4d:40:66:90:0c:5f:1e:21:fe:be:e6:46:8a:
c3:e3:7c:a6:cf:60:99:27:c3:c7:82:50:f1:c9:cd:00:32:5d:
1d:bb:ee:cd:48:08:03:3d:ba:51:3b:88:24:c5:d7:e9:e8:2c:
38:c5:b4:a6:78:56:30:e9:f7:42:87:02:c8:d4:4b:24:8c:de:
57:9f:8d:30:d1:11:bd:d8:91:2f:76:ab:4c:53:48:f5:5f:11:
3d:4c:2e:5b:c7:b1:b3:9a:80:53:c9:6b:0a:b1:4e:37:d8:30:
c0:f1:2a:85:01:32:ab:cc:99:78:bc:a9:30:68:d4:c6:95:dd:
69:06:4c:6e:fe:3d:a8:3d:3e:5d:56:85:40:07:e2:fd:9b:df:
32:f1:72:d1:45:05:16:4a:2e:99:0f:eb:23:0e:48:02:82:a5:
f6:4e:6f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:16 2024 by rpki-client on console.sobornost.net