Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/mzdXv5WKvr4j5HxEhicdc0QVIuc.roa
File: mzdXv5WKvr4j5HxEhicdc0QVIuc.roa (raw, json)
Hash identifier: SnmOO/MdsWXwEVGfgMLDaTuRpuu4yeeNrzyRM/o8W7A=
Subject key identifier: 9B:37:57:BF:95:8A:BE:BE:23:E4:7C:44:86:27:1D:73:44:15:22:E7
Certificate issuer: /CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Certificate serial: 018570B0656E13871B35C25BEAFB2DB0FA70
Authority key identifier: 0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/mzdXv5WKvr4j5HxEhicdc0QVIuc.roa
Signing time: Mon 02 Jan 2023 04:14:46 +0000
ROA not before: Mon 02 Jan 2023 04:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199901
IP address blocks: 195.62.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:65:6e:13:87:1b:35:c2:5b:ea:fb:2d:b0:fa:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Validity
Not Before: Jan 2 04:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b3757bf958abebe23e47c4486271d73441522e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:21:27:e2:26:1d:be:21:1e:df:43:22:12:fd:
6f:0b:8d:bb:03:d5:d1:ce:93:a9:61:ec:95:75:7d:
cc:26:c0:c8:85:71:d7:e3:05:31:59:c2:72:4e:e3:
c6:cf:03:ea:c6:52:f9:45:ba:70:9e:4c:85:2f:89:
1c:c5:e9:6d:b4:56:b1:11:c6:60:6f:c8:8d:62:24:
3e:7f:a7:bb:34:a9:0a:91:37:19:9b:66:54:3d:2f:
65:89:a1:55:ac:74:46:f8:5f:e8:43:dd:58:a5:22:
96:79:4f:d3:1b:ed:4b:f1:ba:78:11:27:3b:1c:a9:
aa:c5:c4:96:a7:72:37:63:7c:20:19:d3:bc:ab:64:
9c:a9:c4:e8:bc:91:b3:ad:c3:aa:0c:c4:74:79:87:
2f:64:ab:43:b6:ae:96:ff:16:6b:47:39:99:8c:b2:
f3:bb:0f:7c:93:59:e9:48:f0:46:05:eb:2c:8f:04:
57:52:46:bb:36:c5:1e:f2:a4:9d:ef:67:6e:f2:fe:
1a:69:34:92:19:38:04:ab:26:b9:93:2a:d4:f1:3e:
ca:17:26:9b:9e:5e:b6:c1:d5:86:51:75:6d:7c:d3:
88:c9:42:5d:1c:77:76:df:d3:25:57:62:5c:46:f2:
01:a3:da:8d:45:a7:65:ed:01:ad:2d:5c:82:b2:d7:
1b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:37:57:BF:95:8A:BE:BE:23:E4:7C:44:86:27:1D:73:44:15:22:E7
X509v3 Authority Key Identifier:
keyid:0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/mzdXv5WKvr4j5HxEhicdc0QVIuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.34.0/24
Signature Algorithm: sha256WithRSAEncryption
75:aa:f7:ed:0f:75:af:47:d4:90:f9:38:82:d1:43:44:57:44:
2a:38:1b:f9:48:43:1c:b0:b1:b2:b5:7f:94:34:bb:5f:81:aa:
5a:ff:51:ce:69:13:5c:19:10:ca:40:99:5d:ae:16:e3:1b:a6:
9b:ff:5a:f5:b9:8a:66:4e:ba:44:4f:1c:11:e5:23:81:2b:13:
62:01:77:47:33:d7:7a:80:ab:20:98:07:31:c6:5d:14:2f:3a:
68:94:e8:dc:92:df:d4:d7:8a:b9:66:45:2a:01:70:ae:55:9e:
fd:ef:44:3b:a1:ec:89:f2:39:e8:77:6d:9e:12:6c:3d:33:ee:
88:72:8b:91:19:23:59:ce:30:be:5f:c4:b8:7a:ee:8d:12:6f:
ae:6a:35:c0:98:09:1f:69:be:fe:b3:d9:21:29:71:1b:cd:0d:
3f:53:b7:c5:1a:b2:ec:a2:81:67:cd:7e:49:30:c8:c2:6e:be:
ed:89:ce:a1:e9:1a:3c:0a:cb:1d:13:3e:ef:62:0c:7d:08:65:
bd:02:b9:cd:21:00:34:ed:2c:33:cb:ad:95:bf:f4:d1:f8:dd:
61:46:ce:b0:6c:75:30:5c:84:db:e4:f3:ff:f5:aa:64:95:47:
c4:c3:08:22:ff:2d:e8:b7:8c:16:09:ab:24:12:95:3a:48:7d:
3a:a4:05:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwsGVuE4cbNcJb6vstsPpwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNTRmOWUwYTdhOWVhZWVhY2JjNWIxMDMxMDIzNWI3ZmQw
ZWVkMDMwHhcNMjMwMTAyMDQxNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjM3NTdiZjk1OGFiZWJlMjNlNDdjNDQ4NjI3MWQ3MzQ0MTUyMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiEn4iYdviEe30MiEv1vC427A9XR
zpOpYeyVdX3MJsDIhXHX4wUxWcJyTuPGzwPqxlL5RbpwnkyFL4kcxelttFaxEcZg
b8iNYiQ+f6e7NKkKkTcZm2ZUPS9liaFVrHRG+F/oQ91YpSKWeU/TG+1L8bp4ESc7
HKmqxcSWp3I3Y3wgGdO8q2ScqcTovJGzrcOqDMR0eYcvZKtDtq6W/xZrRzmZjLLz
uw98k1npSPBGBessjwRXUka7NsUe8qSd72du8v4aaTSSGTgEqya5kyrU8T7KFyab
nl62wdWGUXVtfNOIyUJdHHd239MlV2JcRvIBo9qNRadl7QGtLVyCstcbowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJs3V7+Vir6+I+R8RIYnHXNEFSLnMB8GA1UdIwQY
MBaAFA9U+eCnqerurLxbEDECNbf9Du0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85MDU5YzgtYmJkOC00ZjZlLWE2MGUt
ZWYyNmMzNDRlZjAxLzEvbXpkWHY1V0t2cjRqNUh4RWhpY2RjMFFWSXVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS85MDU5YzgtYmJkOC00ZjZlLWE2MGUtZWYyNmMzNDRlZjAx
LzEvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwz4iMA0G
CSqGSIb3DQEBCwUAA4IBAQB1qvftD3WvR9SQ+TiC0UNEV0QqOBv5SEMcsLGytX+U
NLtfgapa/1HOaRNcGRDKQJldrhbjG6ab/1r1uYpmTrpETxwR5SOBKxNiAXdHM9d6
gKsgmAcxxl0ULzpolOjckt/U14q5ZkUqAXCuVZ7970Q7oeyJ8jnod22eEmw9M+6I
couRGSNZzjC+X8S4eu6NEm+uajXAmAkfab7+s9khKXEbzQ0/U7fFGrLsooFnzX5J
MMjCbr7tic6h6Ro8CssdEz7vYgx9CGW9ArnNIQA07Swzy62Vv/TR+N1hRs6wbHUw
XITb5PP/9apklUfEwwgi/y3ot4wWCaskEpU6SH06pAVL
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:48 2024 by rpki-client on console-ams.rpki-client.org