Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mzfyCSJRoTx_-PkuzlgJBAb0iOY.roa
File: mzfyCSJRoTx_-PkuzlgJBAb0iOY.roa (raw, json)
Hash identifier: 9X7IfcCLgiGnLty+3QglhGCZ7buBF0d8SDeqNKTy/tQ=
Subject key identifier: 9B:37:F2:09:22:51:A1:3C:7F:F8:F9:2E:CE:58:09:04:06:F4:88:E6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01865FDD822598295AC449AF5DAB5607E0BB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mzfyCSJRoTx_-PkuzlgJBAb0iOY.roa
Signing time: Fri 17 Feb 2023 14:53:17 +0000
ROA not before: Fri 17 Feb 2023 14:53:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199854
IP address blocks: 45.8.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5f:dd:82:25:98:29:5a:c4:49:af:5d:ab:56:07:e0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 17 14:53:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b37f2092251a13c7ff8f92ece58090406f488e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e8:11:1b:c8:bb:ce:78:6c:78:3a:1e:75:db:
72:ba:30:31:1a:2a:5b:06:25:e4:a1:ed:d2:64:ad:
34:35:9a:51:c1:22:04:5d:8c:fc:22:ee:b1:8b:7d:
3b:ed:0e:73:08:5f:20:3c:0b:12:2a:55:cb:21:a3:
02:7d:cd:a3:f0:0c:59:99:7a:9c:23:36:49:a6:c3:
ef:0a:b6:f1:52:f0:4b:68:ba:e8:b6:21:29:e0:c6:
2c:2c:aa:f7:ac:f9:20:53:9c:7e:fe:8c:1e:fa:df:
45:f0:4f:fe:49:f5:ab:1c:d5:5b:17:f2:10:d1:e3:
fd:24:74:99:ce:48:37:92:7c:13:ce:6f:8b:25:cf:
61:29:f3:ad:42:3a:41:84:49:a0:42:eb:de:f0:8b:
34:98:fb:b3:d2:2f:2b:92:80:2e:00:ad:64:2b:0e:
8b:5d:9d:57:80:ef:7c:6c:ec:9c:de:32:f7:5a:40:
65:f4:1b:9b:0c:c1:61:76:be:91:54:a6:47:50:b9:
92:7a:28:9f:6c:0a:7c:30:0e:10:66:55:2b:3e:d8:
0d:fc:65:05:f5:f9:c5:fb:81:b9:ac:38:de:fc:db:
99:f1:aa:3f:41:28:1c:54:1d:c9:c8:92:4d:90:39:
64:cd:c4:8c:8a:39:f8:ac:3d:28:07:61:12:77:1e:
2d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:37:F2:09:22:51:A1:3C:7F:F8:F9:2E:CE:58:09:04:06:F4:88:E6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mzfyCSJRoTx_-PkuzlgJBAb0iOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:29:3f:21:5b:2d:c4:11:b6:98:37:48:03:2a:24:26:b1:7c:
36:e3:c9:95:39:17:e9:ec:56:87:49:fe:57:fc:00:33:34:4e:
84:79:e8:78:bc:1f:63:c0:2f:04:58:20:cc:d0:ec:1b:06:e9:
3a:62:a2:76:d3:45:b7:28:c2:1a:8a:ac:ae:cd:10:00:bf:42:
98:37:a1:5b:61:c8:bd:84:e4:30:89:c7:dd:8e:e0:fa:b7:77:
c2:fd:13:e3:6a:c2:3f:2e:c4:ff:aa:74:8d:c7:87:48:3d:69:
96:f3:5a:ef:77:9a:47:3d:0b:b9:ab:d5:b0:b6:43:fc:08:dd:
03:d5:75:77:98:a8:61:c4:ed:91:d9:a5:e6:2a:25:88:06:ad:
89:23:e7:3a:d1:95:4c:93:db:c4:d8:5e:eb:ec:c8:c2:e6:8c:
54:89:3b:8d:6a:17:1d:3a:9e:5e:1a:11:4f:1f:a6:6a:b3:a4:
a7:2b:64:2e:7b:13:e0:35:3b:eb:27:a1:d9:95:60:69:9e:b7:
be:9f:7c:3e:96:d9:a6:d4:8b:f5:72:75:53:a6:e5:dd:ac:ba:
99:45:94:76:ca:7b:fb:2e:8d:6e:49:08:a7:a9:0b:f6:1b:e6:
fe:1c:0c:87:c4:91:8a:d4:21:8d:bb:a6:ac:0c:15:0e:91:17:
5a:76:48:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org