Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/mzIT05xPlWvHlqIdg1D8oRfEI9I.roa
File: mzIT05xPlWvHlqIdg1D8oRfEI9I.roa (raw, json)
Hash identifier: s2HTR0nJga7vQggj1fdqdyc4LRtk5yAzrm5Qf0nvHAI=
Subject key identifier: 9B:32:13:D3:9C:4F:95:6B:C7:96:A2:1D:83:50:FC:A1:17:C4:23:D2
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0193ACC799D2560CBE4F72471220E72DB6B1
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/mzIT05xPlWvHlqIdg1D8oRfEI9I.roa
Signing time: Mon 09 Dec 2024 18:56:22 +0000
ROA not before: Mon 09 Dec 2024 18:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 45.88.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 12 Dec 2024 23:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ac:c7:99:d2:56:0c:be:4f:72:47:12:20:e7:2d:b6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Dec 9 18:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b3213d39c4f956bc796a21d8350fca117c423d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:ea:4f:af:b8:8f:ff:d5:6f:3c:aa:51:e0:
94:e7:8d:f1:63:51:b7:11:94:a8:d4:db:a1:74:29:
a2:ca:c5:f3:4a:92:f5:b8:c5:0c:85:12:79:7f:d1:
bd:0d:6e:4d:a5:c0:de:ae:41:e9:a2:41:aa:e0:e0:
f5:4b:f3:4f:41:97:72:99:a4:7d:13:ed:42:82:08:
cf:63:02:88:ec:50:d9:f5:ba:df:fe:76:09:51:b3:
7c:9f:d4:d6:87:ed:4b:d1:3b:2c:cc:30:9b:f9:5b:
64:0b:87:c2:89:31:89:04:1c:10:a3:7d:0b:95:63:
93:89:48:cf:96:49:58:f2:7c:ec:d2:4d:ee:69:0d:
27:08:65:05:dd:d0:02:7d:63:c6:c0:32:78:77:b4:
a0:b0:16:23:9e:9d:dd:81:e3:47:85:25:4c:72:6d:
d8:f6:7d:de:45:96:3e:7c:fa:68:ef:c7:8a:c5:ab:
a1:3f:b9:93:4f:ab:0c:cc:1f:31:7e:2e:a1:0d:32:
46:37:e1:5b:b9:80:1a:de:30:9b:5e:20:d9:76:4b:
03:b6:8e:f7:15:c6:ba:3f:34:88:c3:fc:9e:c6:2e:
94:d8:1b:4c:0c:9a:27:ad:16:d7:ea:40:db:3e:11:
d2:b3:0e:2b:f1:3b:8c:da:20:bf:8b:3f:99:90:f2:
b5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:32:13:D3:9C:4F:95:6B:C7:96:A2:1D:83:50:FC:A1:17:C4:23:D2
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/mzIT05xPlWvHlqIdg1D8oRfEI9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.144.0/22
Signature Algorithm: sha256WithRSAEncryption
28:06:1b:aa:4e:6a:60:d0:6f:49:5e:dc:0f:bc:e6:8d:07:b1:
0c:1e:0c:44:a2:f8:0f:8d:78:22:40:24:71:27:5e:3d:a5:4f:
60:dc:e2:87:78:ed:ff:47:0e:7b:68:ad:0c:8f:0f:58:0e:82:
a5:24:f2:a2:2e:ea:dc:69:42:79:fc:7a:7f:e5:c6:9a:fa:34:
b2:9d:a3:59:6e:01:f4:39:54:56:ac:25:e9:04:99:41:b9:58:
7a:8f:af:28:ae:64:4f:87:af:a9:1d:54:c8:bd:fc:7c:83:62:
62:0a:72:34:c5:a2:33:af:e9:30:1f:1a:0b:61:32:8e:3d:6c:
9b:ba:5c:80:5f:9c:f2:d1:9a:cd:f8:0a:cd:a7:84:e5:f1:9e:
2d:6f:11:c0:4a:57:ce:df:c4:5a:05:69:cb:6e:4d:7c:40:bb:
42:36:f7:25:7d:52:e0:91:bd:9f:0c:11:00:e2:7d:3c:d7:44:
fd:8a:fa:49:a8:fa:c0:b0:51:c9:20:fc:5a:cd:ca:a3:d9:23:
d9:b4:7c:c0:9f:96:23:37:a1:8b:81:ef:ab:04:85:48:ee:cf:
a6:d0:7f:af:07:34:8d:78:d7:7b:1c:2f:27:59:2d:15:3c:33:
d5:da:83:3c:4c:b4:e3:b9:aa:c8:a2:fd:09:cc:1f:65:30:25:
8e:15:cf:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:44:41 2025 by rpki-client