Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/ms7-8tMorpCrMMSubIUuvrl0ApM.roa
File: ms7-8tMorpCrMMSubIUuvrl0ApM.roa (raw, json)
Hash identifier: gpWQVqCYziVKAtMrZwxj2DTTI6iQuwSuZbq/59sF0zc=
Subject key identifier: 9A:CE:FE:F2:D3:28:AE:90:AB:30:C4:AE:6C:85:2E:BE:B9:74:02:93
Certificate issuer: /CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Certificate serial: 0185737AA95901022F1012329E5AC2A11806
Authority key identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/ms7-8tMorpCrMMSubIUuvrl0ApM.roa
Signing time: Mon 02 Jan 2023 17:14:56 +0000
ROA not before: Mon 02 Jan 2023 17:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8447
IP address blocks: 157.247.0.0/16 maxlen: 24
192.102.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:a9:59:01:02:2f:10:12:32:9e:5a:c2:a1:18:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Validity
Not Before: Jan 2 17:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9acefef2d328ae90ab30c4ae6c852ebeb9740293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ca:0f:ae:46:16:8e:eb:8a:87:cb:d5:24:b0:
87:64:5c:4d:84:fe:74:58:3d:9b:93:cf:71:52:bc:
72:ca:fd:bc:b6:e5:fd:94:4f:e0:18:e4:fe:19:ed:
48:10:4d:a0:e3:07:d2:45:16:cc:00:90:05:63:e4:
e6:ee:39:ff:a3:bb:8b:09:eb:5a:f1:3a:38:39:31:
fe:36:85:dd:05:fa:e7:75:ad:97:4d:e3:76:26:ba:
35:5b:df:ee:bf:9d:57:cf:b1:7e:14:0a:fb:07:db:
62:1f:e2:54:c8:c9:bb:e6:ce:4c:b1:28:76:2c:01:
4f:67:7e:13:27:d5:76:3c:0c:ee:42:bb:1b:bb:7e:
12:cf:2a:e3:36:22:d3:c6:6a:6e:5d:a4:72:b1:99:
68:c8:d9:16:79:49:e0:09:07:42:cf:62:e4:e7:9b:
2f:16:c9:be:91:f5:0d:67:0c:1e:5b:96:35:0c:75:
70:fa:83:15:d8:22:fa:e1:3a:a1:bc:9e:5b:43:88:
ad:77:c5:b4:61:eb:03:9d:2d:5d:b5:d8:5d:2e:f0:
35:6c:7a:d3:27:c7:78:9b:6d:14:f7:90:70:ad:30:
da:da:93:95:a0:37:a7:bb:5d:2d:f9:ab:46:eb:80:
f7:4e:60:33:7b:36:02:37:90:65:c7:06:61:2c:a4:
8c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CE:FE:F2:D3:28:AE:90:AB:30:C4:AE:6C:85:2E:BE:B9:74:02:93
X509v3 Authority Key Identifier:
keyid:44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/ms7-8tMorpCrMMSubIUuvrl0ApM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.247.0.0/16
192.102.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:1e:30:e0:a8:7d:71:7d:61:75:4d:7d:56:b8:0c:b6:fa:23:
68:bd:1d:5c:d0:39:35:ce:c3:54:f3:e0:7a:3d:5b:1a:dc:7d:
2d:d0:10:89:29:7e:3e:b0:d1:87:15:3f:51:e9:60:0b:fd:d3:
58:91:d1:9c:aa:aa:3e:6c:6c:68:25:00:2a:b4:20:bd:5b:1d:
19:cd:b7:e8:2b:0e:fb:4f:2a:52:09:66:45:51:fa:0b:58:36:
fd:15:df:1a:43:81:8c:9c:50:ae:b6:3c:d6:5f:aa:42:38:19:
20:f4:18:f4:75:05:36:0b:93:81:2f:e7:0a:9a:c5:c8:00:01:
38:a2:c6:6e:d7:fd:16:94:cc:b4:ae:df:97:7f:b8:25:05:a8:
51:6f:e1:7d:fe:5a:09:7d:60:96:d9:a8:8b:63:22:f8:72:12:
f1:94:1c:b6:88:ad:ee:4f:17:f7:97:8b:6c:5a:5b:04:c1:64:
d6:22:6e:03:67:39:30:53:66:b0:39:7a:42:cc:f1:33:2a:c9:
18:ef:dc:27:38:db:44:32:5e:04:53:24:be:e6:b3:40:e5:fa:
35:21:27:62:9d:ed:4b:8c:89:7a:16:3e:28:74:86:bc:b9:55:
02:7c:66:e7:5c:42:3d:ed:d6:3f:ff:ab:49:86:b6:dd:0e:79:
d9:b9:06:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:41 2024 by rpki-client on console.sobornost.net