Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/MpMDylWffxj_I8gBGScsIPAYhA4.roa
File: MpMDylWffxj_I8gBGScsIPAYhA4.roa (raw, json)
Hash identifier: wcdcFw8ZUA3SE5nkmS36lboVW8xD8HhzEc5ZPlgbEnQ=
Subject key identifier: 32:93:03:CA:55:9F:7F:18:FF:23:C8:01:19:27:2C:20:F0:18:84:0E
Certificate issuer: /CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
Certificate serial: 01856D661962AA47815ED91C30D221248103
Authority key identifier: 98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/MpMDylWffxj_I8gBGScsIPAYhA4.roa
Signing time: Sun 01 Jan 2023 12:54:45 +0000
ROA not before: Sun 01 Jan 2023 12:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2116
IP address blocks: 194.146.244.0/23 maxlen: 23
194.146.246.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:19:62:aa:47:81:5e:d9:1c:30:d2:21:24:81:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
Validity
Not Before: Jan 1 12:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=329303ca559f7f18ff23c80119272c20f018840e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:2d:f1:3d:1a:86:83:9c:76:fa:9e:61:ef:
a4:1f:db:3c:b3:61:52:c5:d3:8a:6f:ca:e3:4f:aa:
37:96:51:05:61:24:33:35:18:79:c2:a2:7a:1e:64:
a1:ed:08:9d:c6:dc:2d:2c:6e:43:ec:31:7c:6b:76:
b9:e4:69:31:83:78:6b:62:4a:92:fe:d6:5f:e8:af:
1c:03:44:08:5c:61:d4:a6:f9:c6:fa:ed:f6:57:7e:
1c:dc:4d:e0:88:f9:15:3c:57:93:5e:d1:62:64:63:
21:0c:83:3a:f6:6b:bc:c9:f9:66:ac:fb:7e:56:09:
2c:3a:af:f6:8e:09:a4:5a:57:66:a3:04:a9:0a:db:
4d:d6:34:c6:a4:6e:89:6b:b9:7f:e3:40:8a:24:17:
c5:b5:78:76:8f:44:0a:3a:f3:f1:6e:35:ae:76:ad:
47:5a:0f:87:41:24:db:97:72:5a:34:42:c6:35:22:
24:8a:99:47:eb:e0:6c:5e:fa:f4:90:d3:e2:50:07:
f3:0c:2c:bd:f9:26:aa:7f:b5:c2:75:e4:f9:93:ea:
7a:98:7e:60:11:56:d0:a4:99:ac:c7:b5:be:7a:92:
b3:5b:b4:6a:61:3d:6a:ff:c9:d1:7e:42:b2:12:22:
7e:57:44:09:0b:0e:4c:8f:48:b7:31:95:5d:07:26:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:93:03:CA:55:9F:7F:18:FF:23:C8:01:19:27:2C:20:F0:18:84:0E
X509v3 Authority Key Identifier:
keyid:98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/MpMDylWffxj_I8gBGScsIPAYhA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.244.0/22
Signature Algorithm: sha256WithRSAEncryption
28:de:9a:ac:8b:1b:91:6c:34:16:2d:ef:5e:35:01:f9:03:e5:
80:b8:d0:af:96:58:79:78:15:59:8c:17:7c:c2:9a:b5:c5:69:
ed:e1:e9:0e:f7:de:44:60:03:67:95:b9:ef:62:e3:6c:d0:6c:
dd:f3:f4:24:00:24:64:85:1a:7e:08:ec:d6:65:62:5f:21:89:
03:3a:8e:7b:92:aa:42:fc:c0:cd:61:6a:a0:99:0d:78:b3:c8:
82:41:8a:98:69:46:e6:45:25:62:da:0d:1d:e4:e3:ca:fd:19:
ae:23:9b:4e:f1:1d:6e:57:4d:2d:11:ac:c7:af:52:d3:5a:cb:
d3:f7:21:5c:0c:09:b7:f3:2e:50:7f:03:4a:01:de:86:a7:a1:
cf:60:50:9a:a3:a1:be:4f:c2:44:ba:cc:c9:d3:35:bd:ea:36:
fa:17:21:96:81:9c:0d:81:2e:fa:34:3c:46:73:7b:02:ee:97:
ca:76:f5:24:4d:04:82:5b:d9:59:da:c8:d8:7c:a7:c0:d2:6d:
cd:58:aa:48:19:32:e8:e1:68:ec:67:0c:ec:7e:cf:1c:a4:31:
90:90:6a:55:3b:51:81:7c:27:05:d9:da:12:65:c5:cb:6b:5b:
4d:4e:ed:05:a3:58:f6:6d:ff:af:27:f6:e5:58:c4:c4:09:f0:
8f:c4:3f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:52 2024 by rpki-client on console.sobornost.net