Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/mMkt255_WcXgAFewxB2ITF1RmfU.roa
File: mMkt255_WcXgAFewxB2ITF1RmfU.roa (raw, json)
Hash identifier: 9Ll9me8Ghfjsuv0qQizfyKoWXv58NRAqpLDgAh4sSes=
Subject key identifier: 98:C9:2D:DB:9E:7F:59:C5:E0:00:57:B0:C4:1D:88:4C:5D:51:99:F5
Certificate issuer: /CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
Certificate serial: 018570B08F7246DDE29953ADD57685F96C77
Authority key identifier: B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/mMkt255_WcXgAFewxB2ITF1RmfU.roa
Signing time: Mon 02 Jan 2023 04:14:57 +0000
ROA not before: Mon 02 Jan 2023 04:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25459
IP address blocks: 94.124.120.0/21 maxlen: 21
2a02:9e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:8f:72:46:dd:e2:99:53:ad:d5:76:85:f9:6c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
Validity
Not Before: Jan 2 04:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98c92ddb9e7f59c5e00057b0c41d884c5d5199f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:71:4e:65:67:06:1c:ab:c4:be:3b:56:3c:12:
d3:6c:55:1f:c3:6d:c1:80:9d:c0:24:6e:1c:7e:59:
d9:74:02:63:1b:2e:87:03:cf:a4:eb:65:27:80:0e:
ee:34:e8:aa:3b:ef:79:ea:02:91:2b:89:7d:25:48:
fa:03:b6:d0:d5:9a:76:a6:58:eb:da:41:aa:b0:c8:
48:ac:e2:85:ae:5c:bb:c2:e0:52:e7:d6:bc:45:5f:
ce:dc:09:99:f4:50:80:dc:3e:d4:6b:e0:80:46:e6:
0a:46:81:57:e1:b2:7f:99:54:53:9a:1b:8c:b7:26:
06:04:f4:16:24:61:48:92:76:13:9a:0e:96:43:f1:
3b:0e:0e:bb:d6:3d:81:4b:45:45:2c:64:c6:95:7f:
96:f5:f6:b5:46:99:10:ba:fb:1a:9f:65:d2:f0:82:
45:9b:6a:63:87:bd:04:e3:96:5e:c9:91:64:e9:04:
57:00:65:ed:6b:73:32:2c:b3:49:ac:08:38:55:25:
f8:35:88:a3:82:ea:15:ff:c0:01:c5:5d:cc:d0:0c:
a2:30:20:d0:2f:d3:4a:39:6f:c8:9f:63:cd:ed:2f:
86:be:08:7f:8d:4e:8b:14:e5:bb:c6:61:fc:01:25:
0e:61:78:42:9c:34:71:71:d7:ef:03:f5:05:37:97:
7e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C9:2D:DB:9E:7F:59:C5:E0:00:57:B0:C4:1D:88:4C:5D:51:99:F5
X509v3 Authority Key Identifier:
keyid:B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/mMkt255_WcXgAFewxB2ITF1RmfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.120.0/21
IPv6:
2a02:9e0::/32
Signature Algorithm: sha256WithRSAEncryption
51:8d:d2:4b:8b:ce:42:0b:3a:27:b4:4e:f5:9f:2c:76:19:09:
c3:13:c0:a9:6e:de:b8:29:fe:09:f3:de:88:23:f8:d3:25:9f:
86:c7:d8:3a:57:ee:40:85:14:d7:78:25:2b:bf:95:33:f8:1b:
55:6e:51:a1:67:4d:d4:9f:cf:d6:ae:dc:c9:d3:30:cb:ec:3a:
79:d6:6a:1e:4f:1a:56:21:01:05:1e:b0:31:45:76:7b:e4:37:
2a:da:18:d9:a6:df:0c:d1:ae:ec:03:6a:49:b5:f3:75:24:c2:
f5:2f:fc:7d:1c:5b:fb:86:56:ae:41:bf:83:80:4e:38:ea:6b:
92:15:b7:1a:0b:df:5f:07:99:1f:90:7f:a1:e7:94:a2:6e:b2:
d6:25:48:85:f0:43:5e:89:ec:eb:0e:7f:d5:e1:14:22:6f:52:
b2:06:36:3b:02:40:29:6e:14:00:f0:44:70:a3:da:d5:df:8b:
d5:1b:a7:e6:5b:d0:33:20:b9:36:c1:41:96:5b:f6:e2:c9:8f:
a9:e5:e0:4e:4e:1c:64:e5:02:df:f2:54:25:48:9d:18:ee:f4:
47:75:17:9d:5b:b1:dc:54:38:9c:5b:bb:25:62:63:3d:4a:21:
04:35:ee:26:f0:9e:39:db:68:87:70:b5:66:72:43:b7:3c:f1:
52:bd:40:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:20 2024 by rpki-client on console-ams.rpki-client.org