Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/mfJWWYWJ8zNHwECedwyOlcQbCX8.roa
File: mfJWWYWJ8zNHwECedwyOlcQbCX8.roa (raw, json)
Hash identifier: PCB774KPycLnXa3DZlVqW2U/Vp/NQSJ3041Jwfrd32E=
Subject key identifier: 99:F2:56:59:85:89:F3:33:47:C0:40:9E:77:0C:8E:95:C4:1B:09:7F
Certificate issuer: /CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Certificate serial: 018B390E165778E132BA16AE1E9739F52BAE
Authority key identifier: A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/mfJWWYWJ8zNHwECedwyOlcQbCX8.roa
Signing time: Mon 16 Oct 2023 15:15:06 +0000
ROA not before: Mon 16 Oct 2023 15:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48846
IP address blocks: 85.8.180.0/23 maxlen: 24
185.190.111.0/24 maxlen: 24
2a05:5c80::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:39:0e:16:57:78:e1:32:ba:16:ae:1e:97:39:f5:2b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Validity
Not Before: Oct 16 15:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99f256598589f33347c0409e770c8e95c41b097f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a8:20:f6:8e:4c:09:c2:bd:20:0e:91:fb:cb:
ff:76:b9:35:1a:79:37:16:1e:3b:6a:a9:8e:b9:77:
64:91:29:b5:06:33:e4:5f:9b:0f:5b:33:84:20:7c:
5e:79:b7:7f:8e:eb:0b:35:97:e1:43:e2:1c:b8:9d:
f7:51:76:e4:e1:ea:01:67:66:64:85:12:c7:ee:e3:
be:bc:97:5d:2a:9a:07:95:bc:ce:6b:86:32:f4:ae:
4a:b8:21:71:e9:3e:5a:84:af:67:ea:96:92:b2:75:
4c:b3:73:1c:85:09:1d:0c:d0:e1:0b:47:e4:fc:36:
16:32:3f:4d:1b:b6:e6:9b:2f:d2:31:70:52:31:db:
0e:4b:d3:31:dc:8b:25:22:b7:34:e4:ab:97:35:71:
66:63:ca:07:0f:01:95:73:7b:5d:eb:7a:39:a0:e5:
8d:dc:11:f2:f6:15:62:d2:49:86:0a:a1:0d:9b:bc:
54:e3:c4:19:3f:e0:86:7e:a2:74:43:c8:e4:61:50:
dd:a7:0d:a3:d9:a9:b6:4c:0d:b8:51:6c:8c:aa:2a:
56:5b:7d:d0:25:48:c8:af:06:28:2d:a8:47:7c:4e:
a8:6c:77:c5:3e:e0:0b:3d:85:14:f2:2e:94:4b:13:
23:fd:46:75:8e:42:de:dc:5a:a4:77:dd:ed:32:3e:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F2:56:59:85:89:F3:33:47:C0:40:9E:77:0C:8E:95:C4:1B:09:7F
X509v3 Authority Key Identifier:
keyid:A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/mfJWWYWJ8zNHwECedwyOlcQbCX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.180.0/23
185.190.111.0/24
IPv6:
2a05:5c80::/29
Signature Algorithm: sha256WithRSAEncryption
71:32:7c:46:7c:fc:a5:02:74:80:b8:5a:7f:f3:d1:99:4c:7c:
58:b3:09:0b:30:54:69:2f:f7:7d:55:15:67:b7:6c:91:84:d2:
5e:ad:d6:22:3a:7b:36:7f:1b:1e:01:9a:35:8a:5e:58:29:1c:
a4:43:03:a9:00:1f:4a:b5:dc:ca:ca:f0:09:c4:dc:ce:54:27:
a4:de:a5:e1:5e:e2:6c:c6:2e:fc:35:bf:3d:48:02:6e:0b:fd:
3a:38:89:b2:58:4d:bc:b1:a9:33:fd:ca:3a:aa:92:70:52:82:
15:c0:76:5b:7b:57:a8:51:d7:b5:91:2b:eb:f2:9e:0f:4c:ea:
42:86:ee:7f:6e:8f:bb:60:08:eb:7a:94:40:5f:a9:b4:85:a7:
12:65:bd:f5:ff:42:4b:5a:c9:f4:f6:37:92:8d:07:ca:8a:c1:
7d:bf:c0:c2:93:71:f8:72:ec:e9:77:43:e1:3f:8d:a7:7f:29:
1a:f1:c9:0a:4d:a6:92:9a:98:4a:ba:dc:13:4a:14:a2:c6:79:
36:68:61:5c:6a:24:a7:64:f2:f5:e8:ba:4d:65:e3:4b:05:78:
d1:3d:62:84:6c:df:dc:cf:e9:51:83:07:31:55:97:0d:b9:01:
2f:a1:71:df:3f:18:b3:94:fd:25:42:ea:4e:41:49:5e:74:25:
cc:9c:c0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:45 2023 by rpki-client on console.sobornost.net