Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/Mzj9RpyVSoe3Ht9-q3OQTv4-HJQ.roa
File: Mzj9RpyVSoe3Ht9-q3OQTv4-HJQ.roa (raw, json)
Hash identifier: y8BMvSpccJpo4O6TkgIiDLbGWD3aUxNmBSxQLddF8OE=
Subject key identifier: 33:38:FD:46:9C:95:4A:87:B7:1E:DF:7E:AB:73:90:4E:FE:3E:1C:94
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 01872C1F1D7EF4C844FA72A5B10F6A02C469
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/Mzj9RpyVSoe3Ht9-q3OQTv4-HJQ.roa
Signing time: Wed 29 Mar 2023 06:47:29 +0000
ROA not before: Wed 29 Mar 2023 06:47:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44585
IP address blocks: 195.55.205.0/24 maxlen: 24
195.55.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2c:1f:1d:7e:f4:c8:44:fa:72:a5:b1:0f:6a:02:c4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Mar 29 06:47:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3338fd469c954a87b71edf7eab73904efe3e1c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:47:4d:aa:08:ba:73:b1:09:5b:70:fc:64:5d:
06:bf:4a:5c:74:ca:b5:0c:1f:b4:b0:28:a0:96:7b:
4f:08:66:b2:10:60:02:58:ad:46:5a:ee:71:b3:91:
25:d5:0b:bb:c7:c2:cb:61:23:27:0b:4b:c4:cd:16:
54:bd:86:48:fd:71:ba:cc:c0:ed:e2:4a:6b:41:4b:
66:24:28:b4:e2:ec:50:46:fb:e6:64:bf:ba:e6:29:
ea:0c:49:e4:2e:22:3c:7d:9d:7c:57:e5:85:fb:1c:
ba:c4:49:d1:c5:90:c6:3b:ba:97:ca:24:f2:5b:ba:
f7:81:bb:7c:8c:89:ef:b6:f9:b0:00:33:9a:7b:77:
e4:7d:69:bb:7d:57:57:50:95:2a:a4:79:ba:ef:ef:
00:04:5b:eb:a6:19:2d:d5:ea:01:b9:48:de:23:2d:
e8:20:9d:cc:a6:0a:66:b9:0f:36:14:aa:1e:69:69:
8d:54:08:ee:30:68:a5:c8:b2:e4:39:50:0c:24:eb:
8e:91:01:03:6e:59:7d:cc:f6:a4:43:23:e0:21:0f:
1b:b1:31:01:33:b4:4f:de:b9:24:f1:14:e7:11:b1:
5c:5a:3f:49:a8:12:a0:3a:3e:2b:50:85:01:97:82:
a3:b8:88:39:57:04:5a:a4:a9:56:dc:3b:06:e8:b6:
9f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:38:FD:46:9C:95:4A:87:B7:1E:DF:7E:AB:73:90:4E:FE:3E:1C:94
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/Mzj9RpyVSoe3Ht9-q3OQTv4-HJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.55.174.0/24
195.55.205.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b9:e9:b2:66:ff:fc:d0:51:66:cd:87:a4:4f:01:62:21:7c:
70:85:46:d5:50:4c:d9:67:f7:d9:28:94:91:ff:ca:1c:d5:6f:
44:d0:40:9e:c8:6f:35:6c:0b:b2:fa:67:1b:df:77:33:43:ce:
ff:d7:d9:00:ab:e9:90:c1:21:f5:61:f9:98:97:4c:90:5c:dc:
8d:62:6e:0d:7a:3e:39:4c:69:47:ed:01:5f:0f:e3:58:f3:7d:
90:66:af:ab:3f:f6:33:97:51:b8:b9:2f:3d:b5:4d:03:58:99:
17:19:56:c3:18:a8:1f:a4:ad:d5:89:8b:82:ad:34:4e:15:29:
b1:04:ee:16:9c:1c:cc:a1:64:14:1c:80:47:b9:c3:32:09:39:
90:6d:c8:95:76:f8:4b:c4:96:ce:02:e7:ca:46:f1:08:a6:1b:
fc:a3:49:f4:6c:52:3e:5e:58:2e:45:09:d5:29:cd:7f:6c:2c:
78:e8:ed:3f:98:13:5c:aa:6f:e9:c0:64:8b:db:6a:16:29:d0:
ff:72:72:61:85:8a:dd:26:be:7c:a6:c7:23:7f:23:ed:2f:35:
6f:1d:80:27:42:0e:af:5e:f8:ee:28:b5:63:44:ae:78:a7:57:
7b:73:66:db:ff:a1:b6:56:72:87:fb:3a:76:bd:c5:28:d6:5e:
32:8a:40:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:05 2024 by rpki-client on console-fra.rpki-client.org