Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mizZceR1z_gLPq4go9ZPn1xbhAk.roa
File: mizZceR1z_gLPq4go9ZPn1xbhAk.roa (raw, json)
Hash identifier: F6bGFOK6Fv8xJj2ISOkfQW8PXik00wpxzyJdYR/7gD0=
Subject key identifier: 9A:2C:D9:71:E4:75:CF:F8:0B:3E:AE:20:A3:D6:4F:9F:5C:5B:84:09
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018571D7D4053A09F9DA07D4C69D309D44A5
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mizZceR1z_gLPq4go9ZPn1xbhAk.roa
Signing time: Mon 02 Jan 2023 09:37:27 +0000
ROA not before: Mon 02 Jan 2023 09:37:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 212.69.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:d4:05:3a:09:f9:da:07:d4:c6:9d:30:9d:44:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 09:37:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a2cd971e475cff80b3eae20a3d64f9f5c5b8409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:ff:b3:fd:52:c7:6d:15:9b:12:fd:00:6c:
3e:56:bb:39:9c:61:f8:8a:3f:ba:3b:b0:d4:f2:dc:
90:ee:63:f0:2d:be:42:2d:3b:d2:97:41:fb:8c:83:
ab:85:c1:79:04:43:8f:bf:3f:d2:fe:36:24:63:cb:
b7:24:60:27:cb:eb:30:82:b6:93:bf:f3:7f:18:9d:
86:d2:da:d3:90:b2:54:08:ca:f7:4a:f0:61:c8:2b:
14:4f:30:85:05:11:91:3f:6e:4c:e3:c5:30:6c:98:
da:28:a3:af:68:fe:15:b2:25:d4:6e:5f:75:71:9e:
a8:68:f1:51:92:f7:53:bf:bb:35:90:58:3d:79:fd:
d2:5d:01:c7:7c:ee:51:e3:fb:af:5a:dc:2b:42:47:
e8:f2:f2:75:b2:da:83:d1:34:e6:f9:3e:62:cd:be:
66:9a:ec:08:ce:ee:68:74:d5:17:e0:99:4a:73:1f:
af:79:3f:72:7f:72:e8:f2:55:74:9b:f7:a0:2f:a4:
b5:f3:67:92:7c:5d:35:ed:6b:e0:da:33:79:ae:ec:
dd:43:59:52:53:14:65:e1:ab:2a:f9:97:59:d8:f3:
1d:41:17:31:3e:62:3c:c0:9e:70:31:77:29:26:3d:
43:df:b4:48:d7:36:9b:59:ff:15:88:8d:7f:9b:b9:
b1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2C:D9:71:E4:75:CF:F8:0B:3E:AE:20:A3:D6:4F:9F:5C:5B:84:09
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mizZceR1z_gLPq4go9ZPn1xbhAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.10.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:29:30:6c:89:6d:30:4d:a5:db:7c:36:3b:f4:67:46:bf:23:
2e:aa:1b:5f:1c:c1:82:ef:65:dd:d6:46:d0:ae:75:c8:1a:eb:
0a:dc:c9:06:ef:fb:67:32:bd:d8:1c:2d:c5:66:f6:2f:e6:b1:
8d:6e:f3:f8:f0:35:e1:ab:21:cc:a8:e2:2c:e7:d8:62:a7:ea:
f3:00:e6:20:aa:08:e6:c1:80:d8:f6:59:20:79:f0:64:cc:45:
f6:13:2f:0a:5d:6f:9c:a1:f7:ec:a4:5c:79:d3:38:6c:40:27:
3a:60:1a:f7:d3:e2:4a:29:dd:a6:91:9e:4d:45:88:6f:0f:0f:
73:51:d1:b3:7d:20:cf:a3:b5:12:6e:77:bb:69:eb:48:cd:73:
e2:b4:be:3f:6c:e8:5d:fe:4d:c0:5c:b9:9a:35:3f:c1:cb:22:
80:54:36:a0:3c:dd:17:44:27:2e:70:7b:96:c5:fa:c4:db:9c:
96:38:ed:5c:1e:7e:f5:32:5c:36:45:30:38:aa:16:81:7f:73:
0c:ef:9e:1f:03:a7:b3:72:b0:92:ff:ed:98:c6:dd:e5:44:ea:
86:aa:ca:cd:bf:ae:45:b7:47:66:37:e3:06:ba:1e:b9:cf:b5:
1e:a7:22:76:02:22:2c:bb:9f:46:31:d1:85:8e:47:a8:ab:14:
fb:9f:f5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org