Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/MJZinxlN9qCfa-RbO30_2dAQr1s.roa
File: MJZinxlN9qCfa-RbO30_2dAQr1s.roa (raw, json)
Hash identifier: NM1F4Jz+j+S+Crv4DtHt5NkC31IPcAtKBShyxCz0RIQ=
Subject key identifier: 30:96:62:9F:19:4D:F6:A0:9F:6B:E4:5B:3B:7D:3F:D9:D0:10:AF:5B
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 01856ECBA372759019854107630475B4722C
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/MJZinxlN9qCfa-RbO30_2dAQr1s.roa
Signing time: Sun 01 Jan 2023 19:25:17 +0000
ROA not before: Sun 01 Jan 2023 19:25:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 185.90.220.0/22 maxlen: 24
83.229.113.0/24 maxlen: 24
193.57.94.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 06 Mar 2023 20:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:a3:72:75:90:19:85:41:07:63:04:75:b4:72:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Jan 1 19:25:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3096629f194df6a09f6be45b3b7d3fd9d010af5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:77:72:ed:83:f9:06:fe:18:96:83:42:a9:
f4:6c:49:c7:16:78:e0:56:24:25:02:2e:28:07:27:
69:87:7c:ac:9d:c1:e2:0c:a6:15:2d:10:84:07:12:
71:52:fa:ad:38:89:e2:4f:ed:4a:0e:a7:1d:3a:dc:
7c:45:b4:bd:61:1e:e0:b9:77:6d:54:8d:33:80:21:
14:8e:78:bd:6a:9a:63:32:d3:47:60:6a:21:ca:b9:
6d:e3:09:27:07:11:32:a5:9f:11:b1:ae:c1:ed:0f:
14:93:d9:d6:e7:ee:c9:9f:d9:e4:f1:ca:b1:ce:b9:
f7:06:f5:22:12:51:b2:0b:5f:be:73:bd:29:2b:a3:
f0:0d:9b:c6:1e:54:9c:55:59:0e:eb:0b:ee:1b:53:
bb:39:41:0e:64:9f:36:fc:c3:03:ad:c6:54:2a:72:
13:e3:80:e7:a8:74:dd:e2:34:0f:df:9b:6e:dd:e4:
c3:60:48:b0:06:c6:41:e2:8c:a9:b4:64:74:4d:a8:
b3:51:fe:24:0b:e3:04:c5:07:c4:58:ff:c7:2a:2d:
11:28:ca:87:c7:a8:df:c3:2b:0b:7f:8f:ed:cd:77:
d7:be:d0:dd:4b:b9:28:6e:db:9b:4c:65:d6:97:3c:
91:f4:d4:2e:94:72:15:4f:8b:48:4e:0e:3c:b1:4f:
4e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:96:62:9F:19:4D:F6:A0:9F:6B:E4:5B:3B:7D:3F:D9:D0:10:AF:5B
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/MJZinxlN9qCfa-RbO30_2dAQr1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.113.0/24
185.90.220.0/22
193.57.94.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:c3:a3:ef:62:7d:1a:16:2d:03:20:c8:1f:9d:31:05:67:db:
ba:6a:ef:b5:23:40:6c:62:53:ab:16:74:49:16:04:d3:1c:e1:
58:5d:35:87:c1:f7:5f:8b:71:ae:4b:45:1e:3c:27:e9:d7:3b:
1e:35:48:38:64:ba:4b:1d:4c:d7:78:7e:42:56:5e:78:21:72:
9a:e4:88:9e:93:c2:1c:d1:fe:a4:06:ad:3d:07:0d:30:78:80:
4c:ea:92:3f:ea:94:32:f2:cd:d4:9e:b2:36:4f:da:05:b9:ec:
3f:63:c4:e6:4a:c5:2c:46:25:89:a8:70:b2:8f:fe:f3:20:42:
ab:3d:cb:6c:3e:a7:14:45:74:ce:23:a2:bf:09:13:eb:02:d7:
96:28:7c:9b:7c:74:70:2a:72:ca:ea:0f:c9:0d:e1:72:49:c4:
a1:bb:29:b9:8b:5b:1d:67:61:6d:f3:19:40:76:9f:b0:7e:7b:
6e:1c:c1:e4:8e:c1:e6:6e:03:14:d2:af:eb:c4:c8:8b:5c:95:
3d:52:32:34:69:0d:3a:88:56:f6:e0:41:4d:1e:a4:29:b2:36:
2d:13:6e:ea:05:32:95:7c:68:f4:72:8e:09:2c:dc:c3:07:e7:
98:fe:5e:28:57:09:be:74:62:da:2e:6a:ae:bb:dd:d2:b0:bd:
0f:85:2c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:26 2024 by rpki-client on console-ams.rpki-client.org