Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/mdfRrQHjFueBx8UsP35qcKcfNnA.roa
File: mdfRrQHjFueBx8UsP35qcKcfNnA.roa (raw, json)
Hash identifier: Jnobn8pnWE4mq/uZmbpEmZcZVucTzKGkg8kBqSSvu5c=
Subject key identifier: 99:D7:D1:AD:01:E3:16:E7:81:C7:C5:2C:3F:7E:6A:70:A7:1F:36:70
Certificate issuer: /CN=bf42b84baeedc2c463de37fa4d146247f3e14ba1
Certificate serial: 01890CDE8A1BEE5BCD35020A96C5E5B57C84
Authority key identifier: BF:42:B8:4B:AE:ED:C2:C4:63:DE:37:FA:4D:14:62:47:F3:E1:4B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0K4S67twsRj3jf6TRRiR_PhS6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/mdfRrQHjFueBx8UsP35qcKcfNnA.roa
Signing time: Fri 30 Jun 2023 15:14:18 +0000
ROA not before: Fri 30 Jun 2023 15:14:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57990
IP address blocks: 176.112.160.0/21 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0c:de:8a:1b:ee:5b:cd:35:02:0a:96:c5:e5:b5:7c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf42b84baeedc2c463de37fa4d146247f3e14ba1
Validity
Not Before: Jun 30 15:14:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99d7d1ad01e316e781c7c52c3f7e6a70a71f3670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c9:ca:10:ac:23:15:8f:61:2d:d7:b5:0e:11:
f0:6c:16:c7:69:80:de:47:91:69:bb:a0:6d:6f:c6:
4a:83:b0:14:0b:75:cc:91:44:13:5c:93:d3:a7:95:
39:1d:94:cc:82:5a:09:90:0f:cd:4a:93:57:80:fe:
68:4f:da:25:14:45:20:c8:7a:bb:b3:95:69:91:4a:
7c:ae:c7:07:1f:9b:a7:d2:2b:61:5d:ed:38:28:1a:
66:c5:a2:d3:b1:95:e8:f4:63:03:42:82:e8:dc:47:
34:5b:f5:d6:a0:4a:19:03:40:3c:dc:51:6a:fb:5d:
27:d4:2f:b9:31:fc:0e:bf:04:c1:53:74:2d:31:8f:
35:bc:06:7b:87:54:68:2b:ef:04:33:4f:ac:c4:55:
fe:59:35:4b:8b:ba:b1:06:5d:a5:38:88:1d:4c:ef:
b1:3c:d3:b4:d5:ad:69:77:25:02:e9:1e:ff:61:12:
ec:0a:0f:dc:7e:a1:a4:12:57:6d:ef:c3:58:10:5e:
af:8e:16:20:e5:94:a1:41:0d:6d:b2:65:31:a0:2e:
fd:bc:49:5f:a1:5a:f0:97:45:8b:ae:02:21:ea:b6:
d5:7b:6c:5a:bd:95:0f:02:b9:2d:c8:8d:55:4d:41:
11:de:85:56:49:8c:fc:c9:a8:69:8c:15:d7:c2:ae:
14:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D7:D1:AD:01:E3:16:E7:81:C7:C5:2C:3F:7E:6A:70:A7:1F:36:70
X509v3 Authority Key Identifier:
keyid:BF:42:B8:4B:AE:ED:C2:C4:63:DE:37:FA:4D:14:62:47:F3:E1:4B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0K4S67twsRj3jf6TRRiR_PhS6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/mdfRrQHjFueBx8UsP35qcKcfNnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/v0K4S67twsRj3jf6TRRiR_PhS6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.112.160.0/21
Signature Algorithm: sha256WithRSAEncryption
16:26:dd:80:b3:06:0b:1d:25:43:df:86:81:b5:6e:64:4a:d0:
3e:1d:32:5f:e3:42:20:67:6e:f4:d3:c2:58:7c:b1:96:6d:e4:
91:2d:99:76:3c:8c:fd:f4:36:8f:3d:82:ab:6d:9d:84:95:a4:
17:ab:96:f8:37:ad:72:f2:7a:91:c5:d4:35:30:af:e9:10:7d:
e1:3c:81:9a:59:5a:f6:d4:05:b7:c7:2f:c6:37:e3:7a:a2:69:
a6:14:ae:02:60:45:8d:23:9d:a3:01:64:36:d6:c1:bf:66:93:
5b:ac:1c:63:a8:77:66:b6:78:55:e0:0f:d9:1c:e5:c4:0a:0a:
b8:ba:fb:dc:2c:42:39:89:0d:65:19:e4:a0:9c:11:21:80:96:
73:b5:8a:dc:c6:23:ba:eb:30:96:fc:83:26:20:b6:f6:d1:e9:
6e:3b:62:50:c1:5a:da:63:47:9e:a2:96:d3:a7:dc:d1:d6:fc:
59:c1:8c:75:da:f4:2c:d8:e0:5d:6e:7c:38:56:1b:78:d7:bc:
d3:9a:39:57:e8:23:5e:e6:ff:75:b2:5b:b2:02:88:c8:ac:6b:
32:b5:e7:c0:92:88:89:61:b9:90:c1:24:66:88:23:39:c3:52:
e0:3c:a0:d2:93:69:5f:d0:fc:6e:8d:aa:81:e7:15:e9:39:cb:
17:65:f7:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkM3oob7lvNNQIKlsXltXyEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNDJiODRiYWVlZGMyYzQ2M2RlMzdmYTRkMTQ2MjQ3ZjNl
MTRiYTEwHhcNMjMwNjMwMTUxNDE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWQ3ZDFhZDAxZTMxNmU3ODFjN2M1MmMzZjdlNmE3MGE3MWYzNjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8nKEKwjFY9hLde1DhHwbBbHaYDe
R5Fpu6Btb8ZKg7AUC3XMkUQTXJPTp5U5HZTMgloJkA/NSpNXgP5oT9olFEUgyHq7
s5VpkUp8rscHH5un0ithXe04KBpmxaLTsZXo9GMDQoLo3Ec0W/XWoEoZA0A83FFq
+10n1C+5MfwOvwTBU3QtMY81vAZ7h1RoK+8EM0+sxFX+WTVLi7qxBl2lOIgdTO+x
PNO01a1pdyUC6R7/YRLsCg/cfqGkEldt78NYEF6vjhYg5ZShQQ1tsmUxoC79vElf
oVrwl0WLrgIh6rbVe2xavZUPArktyI1VTUER3oVWSYz8yahpjBXXwq4UPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJnX0a0B4xbngcfFLD9+anCnHzZwMB8GA1UdIwQY
MBaAFL9CuEuu7cLEY943+k0UYkfz4UuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjBLNFM2N3R3c1JqM2pmNlRSUmlSX1BoUzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jZGE3YzItODA3Zi00MzIzLWIzZDct
OTYyZmUwOTdmNGIxLzEvbWRmUnJRSGpGdWVCeDhVc1AzNXFjS2NmTm5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9jZGE3YzItODA3Zi00MzIzLWIzZDctOTYyZmUwOTdmNGIx
LzEvdjBLNFM2N3R3c1JqM2pmNlRSUmlSX1BoUzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsHCgMA0G
CSqGSIb3DQEBCwUAA4IBAQAWJt2AswYLHSVD34aBtW5kStA+HTJf40IgZ27008JY
fLGWbeSRLZl2PIz99DaPPYKrbZ2ElaQXq5b4N61y8nqRxdQ1MK/pEH3hPIGaWVr2
1AW3xy/GN+N6ommmFK4CYEWNI52jAWQ21sG/ZpNbrBxjqHdmtnhV4A/ZHOXECgq4
uvvcLEI5iQ1lGeSgnBEhgJZztYrcxiO66zCW/IMmILb20eluO2JQwVraY0eeopbT
p9zR1vxZwYx12vQs2OBdbnw4Vht417zTmjlX6CNe5v91sluyAojIrGsytefAkoiJ
YbmQwSRmiCM5w1LgPKDSk2lf0PxujaqB5xXpOcsXZfff
-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:48 2024 by rpki-client on console.sobornost.net