Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/mzlzmwWYKD1gGRFXVTVNXDAuAvw.roa
File: mzlzmwWYKD1gGRFXVTVNXDAuAvw.roa (raw, json)
Hash identifier: aP+vjwTI/0WvK0WVeYNjPvjxA+85R2f1fN84yT4NWA4=
Subject key identifier: 9B:39:73:9B:05:98:28:3D:60:19:11:57:55:35:4D:5C:30:2E:02:FC
Certificate issuer: /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial: 01856F5DF7118E14AEEC1C286D5AEB5F50DD
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/mzlzmwWYKD1gGRFXVTVNXDAuAvw.roa
Signing time: Sun 01 Jan 2023 22:05:07 +0000
ROA not before: Sun 01 Jan 2023 22:05:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61154
IP address blocks: 77.87.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:f7:11:8e:14:ae:ec:1c:28:6d:5a:eb:5f:50:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Validity
Not Before: Jan 1 22:05:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b39739b0598283d6019115755354d5c302e02fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:58:0c:32:61:a7:5c:76:68:1b:d5:b8:32:
f5:44:19:68:2b:32:10:e9:8a:2d:23:28:67:52:43:
09:3a:cb:6e:c9:07:cb:c4:a2:c4:26:e1:ac:46:65:
9c:89:6b:57:0c:1c:8d:04:03:96:09:18:49:d7:d1:
4c:78:5c:8f:37:4e:6e:98:fe:c2:cf:fe:56:99:81:
22:9a:52:f2:fb:09:3a:c4:b7:ac:4c:0f:70:1e:73:
54:e7:d9:67:59:64:52:d3:a0:70:71:8e:c1:7b:95:
b9:f1:39:42:79:7b:a7:be:cf:12:34:5e:0b:06:f5:
51:4d:cb:c7:df:1e:cb:7a:0c:1c:ab:86:73:80:fa:
03:0a:f0:1d:01:96:25:f8:f4:1d:dd:f0:94:be:c5:
05:ae:8c:b1:17:c6:6a:4d:8e:74:3b:b3:f5:93:59:
bb:00:63:9e:89:ff:4b:27:df:ce:94:ca:54:7b:37:
8c:30:7d:5b:72:07:06:05:a5:44:cd:55:d8:f1:0b:
ff:16:b4:ff:cf:67:7f:20:f9:d5:3a:3f:96:7c:c6:
b8:60:e4:f4:4c:4c:18:06:9c:f6:e3:71:89:55:c2:
06:78:98:87:14:57:05:13:be:6d:ad:26:c2:6f:80:
79:73:f4:c2:9e:15:67:1d:f4:bf:ba:96:ad:d5:5a:
7a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:39:73:9B:05:98:28:3D:60:19:11:57:55:35:4D:5C:30:2E:02:FC
X509v3 Authority Key Identifier:
keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/mzlzmwWYKD1gGRFXVTVNXDAuAvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.78.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:0a:54:cb:20:f5:ce:4a:04:25:79:fe:5a:30:72:85:44:58:
5e:be:1d:4f:a5:a1:35:76:dd:b0:f9:cf:a2:b5:4c:c3:6c:65:
c0:20:93:c8:9c:70:8e:ec:b5:68:62:e8:9c:d5:9b:f2:40:c5:
7c:58:cf:71:48:87:b9:f3:0a:00:b2:88:6c:6c:3c:a6:3d:87:
7a:21:66:ed:aa:ec:63:14:47:2b:9e:3b:ff:94:0d:73:12:f9:
d9:d8:d7:67:0e:61:92:21:4a:55:f9:0f:3e:dd:b0:e3:a5:2e:
53:1e:bb:7b:25:b1:47:a1:f2:e2:37:43:0a:fe:57:cb:4d:2a:
73:86:6c:bf:e3:15:a2:63:4a:fc:77:9c:a0:9e:bc:eb:49:08:
91:21:19:4c:17:ae:a2:5d:6a:21:08:d3:4a:c6:1c:21:49:7c:
a1:9b:c4:53:90:91:98:de:07:5f:e3:73:13:04:9b:fc:01:4d:
72:99:8b:a3:7c:81:b9:21:8b:ec:b5:a4:14:0a:f2:ae:43:9b:
1c:27:17:37:d5:a4:64:e7:64:b3:92:fc:16:c7:bb:4b:27:0e:
ca:4e:45:d7:75:2b:b9:ad:f4:44:bf:c7:a6:11:42:89:a4:ca:
4c:83:29:a5:a5:37:32:71:66:b5:6f:7a:4f:bb:55:b9:52:33:
87:f9:23:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:48 2024 by rpki-client on console-fra.rpki-client.org