Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/1-MFz_iozv1e7Z-2IlphDCs0fEp0.roa
File: 1-MFz_iozv1e7Z-2IlphDCs0fEp0.roa (raw, json)
Hash identifier: Ipa5Dq+e29wX8uTPJCuc6Ie29w4jBxabJ9aW/7lJAzc=
Subject key identifier: F8:C1:73:FE:2A:33:BF:57:BB:67:ED:88:96:98:43:0A:CD:1F:12:9D
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 018A27BB48C994850F3495276092036E3919
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/1-MFz_iozv1e7Z-2IlphDCs0fEp0.roa
Signing time: Thu 24 Aug 2023 13:28:19 +0000
ROA not before: Thu 24 Aug 2023 13:28:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197695
IP address blocks: 89.104.64.0/21 maxlen: 24
79.174.88.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:27:bb:48:c9:94:85:0f:34:95:27:60:92:03:6e:39:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Aug 24 13:28:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8c173fe2a33bf57bb67ed889698430acd1f129d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1f:77:94:f0:25:2a:73:60:4c:2b:a9:09:a4:
f3:23:ba:fd:be:67:cd:6e:12:03:26:f5:40:65:56:
cb:f4:67:31:d7:ab:1b:26:98:47:ff:13:8d:f7:07:
45:cf:0c:90:07:26:46:3b:13:b9:73:c7:e5:31:a4:
db:b8:fd:67:ff:92:60:d2:fa:bb:2b:5e:fc:f2:3d:
65:ef:cc:35:37:5d:40:95:42:fb:99:ea:fa:9f:6e:
64:70:1a:27:d0:8b:41:9a:33:fd:c3:f2:c7:17:bb:
8d:00:44:a0:c7:d1:40:bf:4f:40:5a:59:be:84:a6:
16:f6:cc:6d:4b:b7:d7:a6:65:8d:fd:f4:57:0d:ea:
a7:5f:4b:cb:77:28:b8:fd:b8:01:7b:b8:a0:d4:ba:
5c:6d:3c:40:5e:3d:bb:d2:c2:09:87:7f:da:85:ee:
ae:d9:e8:2f:e2:fb:c2:68:c2:f8:1a:8b:0c:f0:fc:
3e:ec:bc:37:fc:f6:4b:86:a9:e0:88:ed:b9:2b:79:
72:70:9a:58:7a:08:6d:96:cf:03:31:7e:c1:3e:51:
36:d8:7c:8d:d9:dc:39:d0:f3:28:bd:cf:e1:e7:bf:
8e:7e:dc:f8:0a:b4:d4:98:75:5c:9e:65:47:6b:12:
f4:53:3b:a9:ac:31:32:d1:c9:a3:10:88:34:73:d7:
65:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C1:73:FE:2A:33:BF:57:BB:67:ED:88:96:98:43:0A:CD:1F:12:9D
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/1-MFz_iozv1e7Z-2IlphDCs0fEp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.88.0/21
89.104.64.0/21
Signature Algorithm: sha256WithRSAEncryption
77:50:ba:d4:a0:13:d7:7b:8d:0c:a1:ec:21:fb:ba:16:81:ec:
a6:0a:c4:73:bc:90:37:27:59:2f:75:94:e8:4d:90:73:15:ae:
a9:56:46:2e:b1:d5:a8:8c:4c:63:d9:6d:15:4c:79:1d:e3:b3:
43:22:41:d5:e5:a0:50:93:10:9e:10:ca:1f:a3:7b:b9:d7:f1:
00:b5:71:a8:da:3d:82:e4:ba:ac:7b:2b:ff:e7:60:fd:2e:2f:
51:a8:64:32:38:f5:64:d6:b0:7f:9a:3d:73:6b:3f:dc:76:aa:
84:d9:6c:b9:3e:4d:33:0c:be:13:1d:fb:c9:d9:39:2b:98:76:
8c:40:1e:e5:ec:0c:50:5f:38:23:73:89:ee:b7:11:39:95:21:
86:f6:8c:cb:c1:68:22:70:9b:30:86:17:ab:9a:be:c0:35:a1:
d1:b3:ea:cd:ba:a7:5d:82:1a:d3:2f:bb:39:de:5e:b3:6e:03:
b9:03:7a:6e:31:3c:e8:97:1f:5d:71:97:f0:31:81:fd:d3:0d:
6e:7e:fe:21:55:91:b6:23:8a:94:be:1c:aa:59:f1:21:5a:f0:
dd:a1:6f:d4:5d:15:7c:1f:7f:37:10:97:91:63:ea:dd:dd:50:
b4:89:06:af:f8:08:cb:c5:76:73:92:72:e8:d5:11:f6:a5:86:
7f:60:05:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:23 2023 by rpki-client on console.sobornost.net