Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/MNbMQYnEE5wMFQsGw5WfM86NQ5Q.roa
File: MNbMQYnEE5wMFQsGw5WfM86NQ5Q.roa (raw, json)
Hash identifier: BKAYFLxaasBjzYYR0XsN6QGCo42St+eFu4FyjSkX/mo=
Subject key identifier: 30:D6:CC:41:89:C4:13:9C:0C:15:0B:06:C3:95:9F:33:CE:8D:43:94
Certificate issuer: /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Certificate serial: 018570706F50C347FC5702FFB80552895AAE
Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/MNbMQYnEE5wMFQsGw5WfM86NQ5Q.roa
Signing time: Mon 02 Jan 2023 03:04:54 +0000
ROA not before: Mon 02 Jan 2023 03:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205869
IP address blocks: 185.179.140.0/24 maxlen: 24
185.179.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:6f:50:c3:47:fc:57:02:ff:b8:05:52:89:5a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Validity
Not Before: Jan 2 03:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30d6cc4189c4139c0c150b06c3959f33ce8d4394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:cf:e4:55:2b:46:e7:f6:6c:34:b6:07:4c:
d5:75:51:a0:28:ff:f1:4d:4a:f2:af:19:8b:41:d8:
ca:9b:2d:7c:fc:e3:88:bd:19:3b:6c:4a:c0:26:90:
c6:5b:31:f6:52:41:4a:4e:33:35:04:d2:5d:cd:95:
e4:62:f3:1e:63:73:78:5c:ae:d9:0c:3b:2a:f1:39:
f1:95:c6:a3:37:65:27:d9:21:52:b7:3e:2b:e6:a0:
f1:54:67:71:97:3b:5d:4b:52:85:6b:60:80:c3:b0:
84:f1:c7:03:df:fe:80:8d:26:c5:db:6d:02:ea:bf:
58:21:e6:a0:a7:66:d9:d9:95:51:56:3d:14:60:6a:
f9:ac:8c:7c:10:45:17:14:8e:e1:49:dc:ad:61:95:
43:ad:ca:f5:c8:40:bf:56:e1:96:ef:89:9d:30:f8:
82:ff:6b:67:17:35:1e:6d:d6:41:83:3f:fa:f3:fa:
b5:d2:c1:46:94:be:43:0a:e8:04:d5:61:34:e3:a4:
7b:49:8c:77:26:50:27:ac:a0:c1:fa:d7:3a:10:6d:
1d:49:ad:7f:07:6d:ed:ac:08:ce:f5:4e:ab:ff:fa:
77:bc:2f:17:4b:6a:54:5e:13:af:23:16:0a:60:5f:
26:54:45:df:97:00:86:b1:e1:ec:4a:de:8f:53:1e:
bf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D6:CC:41:89:C4:13:9C:0C:15:0B:06:C3:95:9F:33:CE:8D:43:94
X509v3 Authority Key Identifier:
keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/MNbMQYnEE5wMFQsGw5WfM86NQ5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.140.0/24
185.179.143.0/24
Signature Algorithm: sha256WithRSAEncryption
47:7d:77:07:8e:5c:34:3a:23:45:6e:b2:4d:85:56:3d:8a:75:
08:be:f8:bd:3d:31:5c:86:10:81:90:44:32:1f:ca:1c:7c:3a:
3f:cf:8b:28:f0:54:cb:78:20:7b:18:10:45:79:fc:ba:ae:57:
08:17:3e:f3:ea:07:90:99:66:85:96:50:85:ad:87:b9:46:64:
23:57:0a:17:a1:25:e7:f5:97:45:7f:37:90:4d:97:cc:cf:16:
cb:c6:ab:14:37:f2:db:eb:0f:3e:b9:6a:92:55:47:a2:ce:a3:
13:73:37:9f:00:5a:aa:a6:12:8a:78:d9:3b:ab:0d:90:18:8e:
2d:74:0f:a2:26:af:7b:b1:f5:7a:fd:2e:0f:46:b2:2f:b1:54:
01:53:d5:ab:a9:0f:d1:86:cf:40:e6:b4:bd:28:3e:d5:84:42:
49:4f:9c:3b:e5:e1:26:7a:6b:ee:6b:c9:db:aa:c7:d9:d8:79:
f3:e2:6c:ad:c2:61:b5:48:1c:b9:04:4e:d9:e1:03:ce:ef:bd:
80:a8:39:5a:92:3f:3f:82:aa:9b:09:a3:1d:95:3e:9b:f9:8a:
e0:d1:cc:70:90:50:5e:24:4d:9e:c7:57:34:1f:08:6d:d1:28:
5c:e6:16:c5:01:8f:2d:9a:33:fa:fd:77:ea:d8:06:5f:67:84:
11:58:e2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:08 2024 by rpki-client on console.sobornost.net